Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: O4Ef9OVBKjaf0gzQXxLUqvQ+2hwiDA1baGO6OU+pD1k=
Subject key identifier: 0D:86:6F:ED:1B:F9:0D:21:3F:33:2B:1E:02:6B:46:D3:5C:54:07:C8
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 019E30047107850A1B678E66B1FA428988D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 1040
Signing time: Sat 16 May 2026 09:00:57 +0000
Manifest this update: Sat 16 May 2026 09:00:57 +0000
Manifest next update: Sun 17 May 2026 09:00:57 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: MyrvMc9TuomJbK8ei8ElvHFgx/EKe60bjIApXQ9jx9k=)
2: TmN-dr45oTfR8pksVoCNgmVOGLU.roa (hash: vnALMBgUiF5Ge/N8pDhGThN8hB7OAP8KLzkie3WI7N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:71:07:85:0a:1b:67:8e:66:b1:fa:42:89:88:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: May 16 09:00:57 2026 GMT
Not After : May 17 09:00:57 2026 GMT
Subject: CN=0d866fed1bf90d213f332b1e026b46d35c5407c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8d:3f:49:e2:70:87:d9:1b:5c:9d:89:cd:67:
85:b5:34:d7:b2:d9:61:14:51:a4:00:6f:59:c0:8d:
fc:45:0c:20:b0:27:f0:dc:f8:1b:32:df:3b:6a:e2:
9c:21:e1:fe:bb:de:cd:c7:32:95:fc:a1:d6:1f:41:
4c:c3:cb:c9:e4:71:91:0c:35:80:0f:2c:62:ce:c6:
fe:ff:ba:68:54:d5:19:23:9a:ae:f3:45:1c:92:92:
c8:b4:ec:9f:f2:05:94:71:fb:05:66:75:1c:5b:ea:
a4:32:1b:45:91:6e:f7:25:d8:13:53:a9:b5:7d:9b:
0c:e4:f2:54:1a:a3:c2:e0:8b:a3:22:27:2e:35:77:
d3:e7:3d:e3:14:b2:cf:bd:47:46:56:35:0c:ab:01:
78:0f:fe:2a:61:75:09:c4:ad:73:7e:fb:ad:4b:da:
f8:34:58:26:aa:35:9f:d0:a3:5b:3e:34:68:68:68:
b6:1e:a4:6c:48:9c:80:4c:13:eb:e9:61:cc:98:16:
74:aa:86:c6:15:42:6e:9a:ac:6f:ba:e1:69:53:e4:
c4:dc:aa:7d:14:27:ac:f1:63:17:55:92:e0:58:09:
36:4a:62:b1:dc:bf:83:0c:9b:20:f7:c0:d3:3d:0c:
67:8a:56:da:1a:11:6c:50:d1:ca:74:28:74:bd:8b:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:86:6F:ED:1B:F9:0D:21:3F:33:2B:1E:02:6B:46:D3:5C:54:07:C8
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:74:9e:4f:e7:80:8f:a4:de:50:13:1b:9a:ab:d6:30:78:64:
e6:fb:36:d6:0c:a3:d4:4b:34:7b:6e:05:a8:62:ca:98:5e:4a:
a3:92:79:67:54:47:ee:8b:03:c0:1c:14:91:ce:c9:8a:42:5d:
4b:f9:33:29:14:2a:8a:37:16:27:ae:a5:77:87:ab:a5:51:8e:
fe:34:8b:c9:fb:51:8a:b0:14:1c:13:41:9d:68:2f:5e:bf:c5:
5e:e7:c2:00:08:2c:63:bc:11:40:2f:26:bf:6a:90:20:a0:b0:
4d:6f:4b:53:51:30:fc:19:46:bc:78:80:03:51:61:d1:e2:43:
a1:f0:71:e9:ba:8b:c3:f7:3f:60:c3:07:35:f1:b1:b4:16:b5:
94:01:3b:11:7e:25:a6:ea:59:5f:84:ce:01:8e:2b:7f:6e:90:
3f:1b:0e:da:6f:67:b9:55:49:4a:3c:33:68:8e:cc:e9:17:26:
5f:aa:42:58:49:cf:ef:03:3f:b6:79:57:de:47:89:99:f5:7f:
cd:65:74:8d:3c:e0:f4:59:48:e0:64:f6:92:bf:3b:d2:ab:1e:
56:0d:f8:3a:ca:0c:7a:6e:e2:ca:bb:c6:fb:2a:2d:50:d0:96:
68:1c:f9:83:15:53:64:b9:97:36:d3:7c:25:9e:dd:a3:17:cc:
2d:76:f9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:53 2026 by rpki-client