Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: DTxPx4fuabBl4IsFzPjMKpcq9Elwbp5uqXhcxxK7H00=
Subject key identifier: 9D:64:EF:A0:27:9F:53:4A:53:92:46:58:32:C4:E1:1F:85:D1:E4:5F
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 019DCFE35054328127B31735E4E06C043E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 1838
Signing time: Mon 27 Apr 2026 17:01:13 +0000
Manifest this update: Mon 27 Apr 2026 17:01:13 +0000
Manifest next update: Tue 28 Apr 2026 17:01:13 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: SK42h/Eiv/j9/u6+OsgUZV7HWqqCmm+35tDd4VVu5Eg=)
2: lEBvXs4u3OpbEZMx5XwLH2hQlKs.roa (hash: 9m0BkgzH4gSyZI57npmc+BY5iSf+kkTcUVRRsTUd1zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:50:54:32:81:27:b3:17:35:e4:e0:6c:04:3e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Apr 27 17:01:13 2026 GMT
Not After : Apr 28 17:01:13 2026 GMT
Subject: CN=9d64efa0279f534a5392465832c4e11f85d1e45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:34:25:45:f9:63:5b:f0:0b:eb:f4:7c:1b:
cc:cc:da:bf:f6:4b:85:35:6a:0e:e2:8b:23:27:51:
15:51:29:5a:30:85:43:4d:f4:ed:7b:73:0c:95:a4:
aa:57:50:0a:39:e5:bc:17:f2:84:b0:06:3e:34:af:
05:37:36:c1:34:4d:bd:59:85:6b:04:13:1a:28:63:
3d:67:a4:38:70:43:fb:8f:59:63:01:c9:76:63:85:
ec:64:ca:2f:b0:b9:17:bd:cd:9e:8c:f4:4b:02:f8:
ed:8b:a4:f1:55:43:17:b4:a6:f2:27:04:28:b2:64:
4d:91:91:a2:af:51:8f:ec:d9:62:27:59:24:3e:b0:
24:4b:6e:f0:a9:4a:4a:9d:15:27:41:11:f2:2f:33:
14:d7:52:29:e2:18:b5:7a:00:78:91:17:9d:e8:97:
b4:61:1b:c7:96:1b:b3:43:5f:31:7a:19:72:c4:12:
30:62:01:8e:0f:83:bf:c0:46:7d:76:32:1f:0c:79:
c0:35:c6:79:b7:62:37:6c:65:14:af:bd:b0:81:fc:
35:97:30:d0:ed:cc:84:c2:79:ce:b0:00:8d:81:79:
8c:ef:ae:1b:3f:04:17:e7:49:5b:f9:22:4b:f4:0a:
d9:42:55:51:be:18:90:92:81:1a:1e:b2:d5:e4:a3:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:64:EF:A0:27:9F:53:4A:53:92:46:58:32:C4:E1:1F:85:D1:E4:5F
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ec:0e:47:50:3a:de:fa:9c:59:7b:3a:71:8c:1d:5b:a5:c4:
46:43:a8:6b:8e:93:1a:24:ee:09:5c:38:03:48:77:db:84:8b:
ef:38:83:7c:c3:8c:5a:ca:05:72:22:3c:1f:04:10:76:aa:d1:
c3:a4:f2:e9:04:d3:50:25:b5:3e:f8:c2:df:32:06:47:17:d8:
8f:84:ad:1b:ef:82:aa:ee:d7:dd:d3:d4:e1:f8:d7:d9:e6:bd:
19:54:5e:cd:f0:2c:ea:7f:52:48:98:c7:6b:73:29:fa:6e:0a:
ed:be:88:24:cf:fd:8c:40:a9:59:e4:c5:ad:3a:22:f5:fe:5f:
2b:e8:bd:15:05:03:70:05:d8:62:a0:21:7b:88:46:0e:07:b8:
76:e3:3a:42:c6:05:3d:4b:da:95:11:56:56:e4:f8:6b:28:91:
3b:4a:10:70:58:5a:b7:ed:27:bc:ce:56:2b:38:d0:d4:95:0a:
c6:de:67:dc:77:68:26:1a:b4:c4:39:67:93:65:33:e4:f2:5c:
dc:d4:f8:ca:1d:a5:2a:b7:05:17:f6:c2:47:da:ac:1c:15:64:
bd:08:2e:bf:31:00:ed:51:e8:ca:2c:0f:c3:54:e6:3b:b0:d3:
64:ce:14:51:84:be:5e:bb:b1:b4:13:aa:e9:92:e9:ae:32:c1:
23:5c:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:32 2026 by rpki-client