Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: HMMP3J+CYYAhiG+rEOGXX19seRNljKk/sBJKCkZTgpo=
Subject key identifier: C1:AB:45:02:3D:E8:CC:D9:B2:0C:6E:A2:95:88:F8:EA:6D:58:68:6C
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 019E28B92DDB52F0525082524261999253A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 18B8
Signing time: Thu 14 May 2026 23:01:24 +0000
Manifest this update: Thu 14 May 2026 23:01:24 +0000
Manifest next update: Fri 15 May 2026 23:01:24 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: KcpOIauGNOvZV7BAlFxSes/YFwXQFcKgQKrXV0pdmrA=)
2: 66xj8nJZJDodIpTEFYfIO2lI0pg.roa (hash: cnTcAyScXe7FLebnmc+X1hADlgaMe8Kz4UH8Ho7fCks=)
3: YC7q8GupNzZHSH1s2Vu8MGm0c2Y.roa (hash: TnzlosbHJ70+TNYLJ5XWl/2V3tal0xrZM8UfJyyEdK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b9:2d:db:52:f0:52:50:82:52:42:61:99:92:53:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: May 14 23:01:24 2026 GMT
Not After : May 15 23:01:24 2026 GMT
Subject: CN=c1ab45023de8ccd9b20c6ea29588f8ea6d58686c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:75:1f:9e:bf:fc:68:bb:be:1e:12:ea:4f:
be:fe:4c:bf:36:2f:c4:ad:68:1d:67:8f:b8:14:90:
e6:e7:7b:2e:f5:ee:99:66:7f:ef:3c:a3:31:2b:50:
48:8a:f3:ab:21:06:8b:85:42:6f:dd:0e:3d:a9:8d:
15:5d:11:62:6b:8e:00:91:77:d2:c3:9d:15:6b:14:
8d:36:a4:52:10:2f:c0:a1:89:eb:13:3c:d3:90:10:
7c:5e:8c:d5:ac:7d:16:1f:8e:b3:ba:1b:69:77:bc:
f2:89:1a:5d:a0:1b:af:9a:be:1a:a9:09:f0:3e:24:
43:9a:a7:69:f9:a7:4b:62:8d:e1:7b:5b:a7:e0:f6:
1d:b9:e5:eb:c0:00:2d:f5:82:3d:c2:b8:9c:69:d4:
3a:87:93:91:a0:a4:63:56:4b:c9:09:02:39:ae:b2:
3d:6b:16:67:d6:94:d5:75:53:74:8b:dc:f9:08:63:
74:9f:6b:38:d1:ce:31:c6:30:21:24:55:cc:f3:80:
1d:a7:b4:c7:89:0a:9a:51:b9:ef:da:3b:80:c1:db:
32:4f:cd:b2:69:db:d8:89:f3:c5:d4:fd:ed:76:e8:
9a:32:f3:f2:0c:7a:97:4d:d6:35:37:fa:39:54:b6:
f9:5e:0b:3a:6e:21:eb:d4:7f:1a:1a:69:fb:b3:9d:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AB:45:02:3D:E8:CC:D9:B2:0C:6E:A2:95:88:F8:EA:6D:58:68:6C
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:57:64:4c:e3:bd:6e:0d:cb:01:bd:11:17:f0:c5:f1:32:8e:
6f:ad:7a:a8:81:f5:f0:4e:29:d5:86:f4:50:59:42:92:22:1d:
bb:e7:f2:a2:63:be:0f:80:a1:a2:31:df:4e:9b:66:bd:60:de:
57:18:52:a6:e9:21:c1:ec:de:2c:b3:55:01:31:99:53:f1:75:
be:25:b8:aa:c0:ef:5d:06:9b:36:8d:6e:c9:e8:4f:21:c3:15:
74:c2:84:24:12:53:2f:fa:32:df:8e:25:b2:dd:32:54:59:d7:
42:12:ab:75:4d:ac:93:f9:30:c2:94:49:6f:9c:66:7d:d3:23:
1d:ff:b1:61:e6:fb:ec:e7:bb:2a:6e:af:08:2e:a4:fa:ea:4c:
aa:8e:00:c6:e6:e7:44:a2:43:53:a2:16:32:e7:7f:00:f0:fe:
28:b6:9e:9c:92:2e:22:e0:6d:c0:0e:b6:59:ba:e3:47:6d:45:
e7:17:88:82:0d:b3:a1:ee:1c:c4:0d:bd:0e:4f:f9:9a:a2:a4:
d0:83:88:58:02:9c:31:ed:3f:c8:fa:58:ba:23:dc:45:1f:d8:
d0:cf:54:5d:1d:c9:52:67:f5:01:e4:97:66:bf:ca:10:9c:8b:
9a:9d:fc:5a:c3:08:81:37:4d:6f:b3:d1:a2:bc:19:e2:b6:8a:
37:51:57:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ouS3bUvBSUIJSQmGZklOhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTgyZjk3OWEyZDI1ZWJiMmRhYjI2NTRiOGMyN2M5Mjhj
ZjVhYzcwHhcNMjYwNTE0MjMwMTI0WhcNMjYwNTE1MjMwMTI0WjAzMTEwLwYDVQQD
EyhjMWFiNDUwMjNkZThjY2Q5YjIwYzZlYTI5NTg4ZjhlYTZkNTg2ODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodZ1H56//Gi7vh4S6k++/ky/Ni/E
rWgdZ4+4FJDm53su9e6ZZn/vPKMxK1BIivOrIQaLhUJv3Q49qY0VXRFia44AkXfS
w50VaxSNNqRSEC/AoYnrEzzTkBB8XozVrH0WH46zuhtpd7zyiRpdoBuvmr4aqQnw
PiRDmqdp+adLYo3he1un4PYdueXrwAAt9YI9wricadQ6h5ORoKRjVkvJCQI5rrI9
axZn1pTVdVN0i9z5CGN0n2s40c4xxjAhJFXM84Adp7THiQqaUbnv2juAwdsyT82y
advYifPF1P3tduiaMvPyDHqXTdY1N/o5VLb5Xgs6biHr1H8aGmn7s52BwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGrRQI96MzZsgxuopWI+OptWGhsMB8GA1UdIwQY
MBaAFN2YL5eaLSXrstqyZUuMJ8koz1rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8zN2VhMTktNmYyNS00MmJjLWFkMjct
OTg4NmNiMWI2NDBlLzEvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8zN2VhMTktNmYyNS00MmJjLWFkMjctOTg4NmNiMWI2NDBl
LzEvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzFdkTOO9
bg3LAb0RF/DF8TKOb616qIH18E4p1Yb0UFlCkiIdu+fyomO+D4ChojHfTptmvWDe
VxhSpukhwezeLLNVATGZU/F1viW4qsDvXQabNo1uyehPIcMVdMKEJBJTL/oy344l
st0yVFnXQhKrdU2sk/kwwpRJb5xmfdMjHf+xYeb77Oe7Km6vCC6k+upMqo4Axubn
RKJDU6IWMud/APD+KLaenJIuIuBtwA62WbrjR21F5xeIgg2zoe4cxA29Dk/5mqKk
0IOIWAKcMe0/yPpYuiPcRR/Y0M9UXR3JUmf1AeSXZr/KEJyLmp38WsMIgTdNb7PR
orwZ4raKN1FXXw==
-----END CERTIFICATE-----
Generated at Fri May 15 06:59:33 2026 by rpki-client