Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
File: 3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft (raw, json)
Hash identifier: wJOF82h3H1l+rEsW4gAwDttCPHytSl5ehiECR3Gwq+Y=
Subject key identifier: 72:CA:6D:2F:BE:60:21:72:EE:13:9A:BD:CD:FB:C3:08:84:27:B6:98
Authority key identifier: DD:64:C9:C6:CE:8A:7B:7E:95:50:84:75:5E:85:3D:4D:6A:A1:80:C4
Certificate issuer: /CN=dd64c9c6ce8a7b7e955084755e853d4d6aa180c4
Certificate serial: 019E29266AF9E958BCC9B2DC675C05F39E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
Manifest number: 06
Signing time: Fri 15 May 2026 01:00:44 +0000
Manifest this update: Fri 15 May 2026 01:00:44 +0000
Manifest next update: Sat 16 May 2026 01:00:44 +0000
Files and hashes: 1: 3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl (hash: aM64BPnqCLthc0NnKGV48I8/8et3I0dug8ZP7IlnABo=)
2: uVFPp5kgmxZiZ6LoftbDP414XHc.asa (hash: LB9vzgvEJxcEb1WaanSRFRa5GPgjhrGmFrkvoXrEy9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:6a:f9:e9:58:bc:c9:b2:dc:67:5c:05:f3:9e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64c9c6ce8a7b7e955084755e853d4d6aa180c4
Validity
Not Before: May 15 01:00:44 2026 GMT
Not After : May 16 01:00:44 2026 GMT
Subject: CN=72ca6d2fbe602172ee139abdcdfbc3088427b698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3a:3e:29:3c:4a:87:75:7a:16:bb:36:e2:df:
2f:12:c3:99:e9:65:86:6d:21:0d:6a:c5:90:07:23:
48:57:21:a7:56:8c:58:8d:19:22:25:3c:ff:8f:01:
5c:42:cb:ec:fa:27:a0:85:77:21:a4:bf:15:0f:db:
ed:90:22:7e:c6:3a:b6:93:8a:d1:7c:62:4b:ea:87:
cd:94:45:4b:ed:0b:7c:94:22:8c:87:b8:89:45:b2:
2a:fd:49:e4:c2:2c:b2:06:14:b6:18:9a:0c:32:29:
f8:e0:82:75:e6:91:98:03:e8:aa:ab:6d:2e:d9:22:
5b:f7:fc:d7:a6:8f:e9:94:f1:b4:52:41:3d:6d:81:
18:ef:00:0a:3a:1a:ff:bc:f1:8a:95:cf:01:63:51:
9a:b4:18:91:27:a5:59:3b:1d:dc:36:6a:65:cf:2e:
f4:04:f3:86:3e:93:9c:ef:ad:da:20:2f:fb:dc:41:
f6:cb:1f:b0:3e:50:ef:bf:9b:ed:a8:d3:54:4e:e7:
18:b3:f9:d3:04:80:64:8d:83:24:58:f2:80:a7:39:
f5:e3:14:7f:9f:76:76:82:fa:05:d2:08:38:15:24:
4d:20:97:58:bb:51:88:06:b8:70:9b:42:73:53:ec:
67:59:ef:9a:8e:c9:5a:1f:cb:79:d9:96:42:e5:fb:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CA:6D:2F:BE:60:21:72:EE:13:9A:BD:CD:FB:C3:08:84:27:B6:98
X509v3 Authority Key Identifier:
keyid:DD:64:C9:C6:CE:8A:7B:7E:95:50:84:75:5E:85:3D:4D:6A:A1:80:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e7:0e:1c:7c:f9:4a:da:90:05:5a:31:66:09:93:0c:0e:3b:
c1:9b:e7:ab:51:b2:d7:62:b1:7d:a5:a7:8c:51:31:7a:79:4c:
9d:7f:04:01:1a:39:44:b8:c1:85:a1:45:3d:8f:25:ed:5d:38:
b5:28:61:9a:ec:a5:ba:99:00:9b:c8:8e:88:d5:59:11:67:f3:
57:07:e6:b2:a4:6e:07:2b:a6:df:41:90:05:37:b0:1a:e4:9f:
cd:b5:1e:14:29:7c:67:02:47:12:28:c8:da:66:be:44:a1:5f:
ea:3c:d4:85:23:e0:18:48:08:c9:7b:71:7d:40:41:7b:27:86:
98:bf:39:25:6d:82:a1:67:3f:fe:7b:b5:c2:0c:de:7f:70:69:
f7:0f:16:74:38:9f:2d:46:2a:c5:25:80:66:98:30:2a:05:da:
53:fd:84:69:6f:67:e9:2a:29:de:1f:a0:d0:74:5a:53:27:02:
85:6a:17:01:bc:99:63:99:e5:d1:5a:e4:28:0a:95:6f:2d:97:
fa:6d:f9:56:2e:72:8e:d5:99:e7:52:66:ee:a4:17:a1:0a:fa:
df:52:5c:e9:3f:e2:a3:6d:9c:2c:90:20:89:74:28:d6:b3:c8:
f4:45:d4:1b:50:fb:38:70:02:f1:f3:ce:8d:14:f0:30:70:80:
bd:05:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:15:12 2026 by rpki-client