Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: iSCiuv9TIvv1EQG2uU0aJpHiYPCQgfN7BR0uGLWG4oo=
Subject key identifier: 5B:26:EE:2A:8D:A7:FC:91:8C:C2:28:AF:7B:74:14:17:BB:18:FB:C3
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 019CE636A1B9E270C5B1DA13261912BBAA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 17BF
Signing time: Fri 13 Mar 2026 08:01:05 +0000
Manifest this update: Fri 13 Mar 2026 08:01:05 +0000
Manifest next update: Sat 14 Mar 2026 08:01:05 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: WspHVY9jsDj9D+HXTT/gfVHv3DLYCPcGda4q7QLev0E=)
2: lEBvXs4u3OpbEZMx5XwLH2hQlKs.roa (hash: 9m0BkgzH4gSyZI57npmc+BY5iSf+kkTcUVRRsTUd1zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:a1:b9:e2:70:c5:b1:da:13:26:19:12:bb:aa:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Mar 13 08:01:05 2026 GMT
Not After : Mar 14 08:01:05 2026 GMT
Subject: CN=5b26ee2a8da7fc918cc228af7b741417bb18fbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d6:1d:b4:fd:84:77:a2:e7:b1:34:69:ad:1a:
de:5c:3c:67:f0:fb:8c:2c:ce:52:33:f5:28:ac:2b:
a0:63:4e:89:f0:20:31:15:6d:5f:3e:75:5e:2c:b0:
90:3b:9f:3a:c3:5a:6a:0d:2d:6a:2f:bb:ad:14:fe:
c2:00:76:86:db:a8:42:6f:d8:67:cc:41:d1:90:09:
02:70:d1:8a:1d:03:10:fc:f4:62:bc:78:9e:62:ca:
b3:04:81:5b:aa:1a:36:ac:99:ed:16:c0:79:67:c3:
b9:9f:8d:de:9b:81:79:75:bf:eb:e5:01:03:74:1b:
fd:36:5d:3f:77:e7:f9:a4:2b:24:1d:f2:64:d2:9e:
bd:88:59:d5:7d:28:5e:2d:9a:4e:9d:00:e4:2e:67:
c6:6d:78:c6:90:73:82:d4:fa:a6:64:ca:9a:ac:2e:
fb:8c:fe:da:68:c1:03:3c:15:81:78:ce:ac:3f:7e:
80:79:39:90:b0:76:41:b6:bc:3c:1d:24:89:9b:9f:
eb:4a:90:e1:2f:7a:8a:ef:58:21:61:a4:e8:14:3f:
ca:29:7c:94:d4:8c:58:c3:ba:20:d2:83:08:7d:72:
48:c6:17:c5:68:f1:4e:23:69:e2:9b:eb:dd:c2:13:
94:3a:9f:56:97:f0:99:a1:5f:fa:c7:df:ee:46:1a:
41:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:26:EE:2A:8D:A7:FC:91:8C:C2:28:AF:7B:74:14:17:BB:18:FB:C3
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1b:1b:d6:5f:c5:26:28:37:6b:42:19:4a:c6:21:6e:e9:7a:
56:94:0a:6a:ec:c4:ee:21:cd:c8:08:19:47:77:00:90:bf:c0:
6a:ac:9a:c0:f0:44:1c:b8:39:be:7f:d9:60:0a:08:9a:ae:a2:
b3:ce:9b:d4:01:88:82:14:5d:7b:d6:aa:38:3e:9d:7d:ce:2d:
72:78:65:5d:35:8e:c5:60:cc:b3:53:24:83:a7:04:f8:39:31:
42:6a:53:5d:d9:5d:96:21:9b:1f:58:65:e9:44:fd:ae:92:b1:
94:79:3f:b0:9e:ae:81:dc:15:f1:ed:ee:37:b4:e3:8f:3f:1f:
08:11:d7:f1:b5:4f:65:5d:f6:5f:17:e2:3b:6e:a9:b5:d8:8c:
b7:8c:6b:88:6d:d1:b0:a8:ba:bd:30:a4:af:8c:6f:a0:8b:73:
71:d6:dd:9b:06:5b:b4:2e:a1:ba:2b:9c:33:0d:49:a7:a4:bf:
d9:c4:97:83:c1:9f:3f:8d:36:94:d8:4a:43:eb:1a:a2:74:b8:
71:79:c8:7e:cc:94:38:1c:1a:5e:23:41:8b:59:62:78:c8:e7:
65:11:dd:8d:ed:e3:5b:f1:38:3b:8c:98:03:c5:3b:74:00:a7:
4e:53:0d:cc:e4:fd:19:62:cd:41:d2:aa:d7:a5:5e:92:1e:36:
ba:75:c0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:39:54 2026 by rpki-client