Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: FNhKrpf0TmsaNICcGqA5OzBhnJcRwhqnnLw0EJ2jucE=
Subject key identifier: 44:2F:D1:E4:89:FE:DE:37:9E:2D:9C:62:DD:89:06:32:DE:6A:84:7B
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 01A08AFA378B060090270DA0A3E42F68355A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 19A2
Signing time: Thu 10 Sep 2026 11:00:49 +0000
Manifest this update: Thu 10 Sep 2026 11:00:49 +0000
Manifest next update: Fri 11 Sep 2026 11:00:49 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: WhceW78FiA1Yh7ATPV2n+ku8QWTeS6SKeX2j3kDEERc=)
2: lEBvXs4u3OpbEZMx5XwLH2hQlKs.roa (hash: 9m0BkgzH4gSyZI57npmc+BY5iSf+kkTcUVRRsTUd1zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:37:8b:06:00:90:27:0d:a0:a3:e4:2f:68:35:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Sep 10 11:00:49 2026 GMT
Not After : Sep 11 11:00:49 2026 GMT
Subject: CN=442fd1e489fede379e2d9c62dd890632de6a847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:49:8d:f8:80:13:8d:3d:67:58:4d:a8:64:
4c:45:fe:a9:aa:1b:33:fb:46:36:0a:07:2b:b0:72:
25:c3:65:c7:a8:13:2c:63:16:b5:87:77:2c:94:04:
f0:3f:d8:ae:56:e4:fc:07:b2:14:67:9f:97:62:60:
69:0a:fc:ce:2a:23:85:7f:db:3a:2c:86:73:03:65:
3d:ee:6e:cd:7e:7d:1f:c7:58:6c:be:86:81:e4:f7:
f7:8f:f2:5e:4a:4f:8f:da:01:1c:0c:d4:19:93:47:
98:12:73:7e:c7:0c:03:1b:14:6a:76:22:6e:28:91:
e0:27:88:ab:da:92:fa:42:85:73:85:36:57:5e:c3:
47:ad:e5:68:7d:8d:31:96:ad:61:cc:0f:4d:da:36:
ba:47:09:6b:d6:ba:3d:cb:9b:1b:21:c3:b8:97:26:
24:70:37:2d:0f:b5:d1:f3:bd:55:1b:dc:fd:a1:ed:
4c:9d:ac:c1:2e:a8:e2:6a:00:bd:25:af:8a:f0:6e:
54:3d:bc:fb:93:c5:6b:4b:99:64:7e:66:ba:66:a3:
92:6f:2f:88:12:5a:ea:6f:14:6a:7f:1a:ea:fe:e3:
95:ab:c5:68:60:e5:69:25:14:87:cc:eb:b5:fc:f4:
f9:bd:cf:50:ba:b8:d3:dc:a7:bb:ed:78:85:4d:64:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2F:D1:E4:89:FE:DE:37:9E:2D:9C:62:DD:89:06:32:DE:6A:84:7B
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:70:65:79:ed:8d:1e:f3:77:87:93:a5:4f:b2:d8:21:d5:3c:
8d:85:35:4f:61:f4:bc:33:5b:84:96:c0:c2:7f:63:46:03:86:
ba:e6:81:45:6d:bd:e5:dd:0a:b2:47:2c:dd:d2:dd:df:5a:46:
da:2c:76:17:41:d3:c8:bb:85:14:6d:ae:02:22:b9:39:7b:a9:
e6:90:22:f8:6e:6a:2f:72:e9:22:4d:d7:17:d3:54:30:cd:94:
3e:10:ca:d5:18:71:c5:95:73:13:a9:b0:14:ac:69:92:a5:cd:
ad:74:ad:20:e9:07:37:d9:48:c7:38:d0:78:ec:a6:c9:c1:a7:
a6:5f:70:2d:21:20:0e:a3:fb:24:90:69:66:df:63:f6:3f:30:
ca:91:57:6c:f8:1b:73:9a:3b:bc:c7:a6:5f:ef:f5:fd:19:78:
20:e8:47:c0:bb:b1:57:21:05:44:e1:c3:e1:49:b9:02:6b:cd:
cf:d7:bc:e1:37:b7:70:58:cd:d7:97:45:b3:88:0c:ed:2f:4e:
34:af:2a:36:33:f8:77:39:9b:ad:8d:63:0e:c8:81:2a:28:f1:
3e:c9:0b:d2:30:76:94:37:e7:88:0f:57:43:12:a6:d5:9a:30:
58:cb:3d:7d:8b:45:97:4a:32:26:d9:fb:d3:49:51:d5:0b:18:
0e:3f:73:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:28:01 2026 by rpki-client