Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: IamYtKO9oEUDrJ0VkTo6XeF8koHQvQel83aKR6yiGJA=
Subject key identifier: 84:7B:83:6F:44:A7:12:B2:20:68:1E:5F:91:0A:E8:D1:9A:14:8B:14
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 019D99D015B5582AE2C6634548DC42ADE4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 13F5
Signing time: Fri 17 Apr 2026 05:00:44 +0000
Manifest this update: Fri 17 Apr 2026 05:00:44 +0000
Manifest next update: Sat 18 Apr 2026 05:00:44 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: fV9WgR+GmZFgvS2PolHP2b2BinttLos15vxL2gT1tdo=)
2: S_e75AZV3-MMHLgXTcVLGq4T6uc.roa (hash: AVmxa5KmaRL9M9i0sdO8A9BbJeQGosTTukip4Q42nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:15:b5:58:2a:e2:c6:63:45:48:dc:42:ad:e4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Apr 17 05:00:44 2026 GMT
Not After : Apr 18 05:00:44 2026 GMT
Subject: CN=847b836f44a712b220681e5f910ae8d19a148b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:f0:35:99:60:e5:3d:95:a1:34:b0:6b:25:
b8:a1:b0:ca:b8:bb:99:c3:bd:19:89:eb:04:e3:ef:
96:64:5c:7b:58:f3:7e:10:77:0b:c0:06:7b:b4:78:
50:19:38:84:b2:33:d3:d3:96:88:b7:33:0a:00:08:
3d:d2:79:7b:d2:2f:86:07:8e:0b:84:3f:3a:de:00:
4f:7e:2a:7d:90:27:20:8f:55:c4:17:7f:51:a4:1a:
8a:47:1a:01:8a:21:d7:c9:33:72:a1:ed:90:b5:5f:
9b:00:2b:ac:76:55:be:70:5e:0b:d4:76:c0:7e:a1:
93:63:ed:e8:cc:e3:25:4c:0b:27:07:82:82:2d:96:
c6:3c:c6:58:3f:0a:6b:f1:42:65:18:29:f7:2a:09:
ed:56:04:68:db:74:4a:aa:97:fb:3b:3c:28:67:eb:
c4:ea:a9:4b:f2:0e:f1:cf:29:b0:d5:42:f8:21:f5:
26:e6:e8:0c:a3:58:a3:d2:bb:ec:45:f8:d9:92:c4:
d4:63:37:91:2c:aa:e4:cc:fc:01:f0:94:f4:22:d2:
f9:73:25:ec:88:c7:7d:eb:c9:51:86:ac:d7:81:e0:
79:a9:67:c7:cd:0a:b5:45:c3:0a:e7:c3:93:fd:fb:
14:6e:79:5c:95:9b:79:99:4a:a8:0e:b3:0c:f6:aa:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7B:83:6F:44:A7:12:B2:20:68:1E:5F:91:0A:E8:D1:9A:14:8B:14
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:1e:82:cf:4b:ec:d0:43:bc:b7:19:f5:51:dc:51:e4:1d:c4:
4e:14:1e:82:cc:c7:4d:3e:f1:03:b1:89:13:71:d3:1b:58:bc:
17:d4:df:67:01:89:bb:28:4b:63:e0:d7:66:2c:b6:ed:b5:b6:
e7:90:c0:7d:e1:bd:a7:72:e6:12:bc:3e:ef:ba:6d:5c:e6:96:
77:8c:7f:8b:5d:6d:9b:85:f2:c7:1c:12:2d:51:9f:1e:28:8e:
62:fa:d2:ef:3d:ed:87:20:64:df:a4:cc:57:33:9c:87:50:d5:
b8:aa:bb:27:bd:25:cc:7f:99:6a:0e:89:45:7c:3e:b2:05:06:
14:e5:2f:43:d7:df:1f:5a:95:60:62:ae:f1:25:b4:a1:1f:c1:
f8:4d:82:14:a3:cc:79:41:b8:97:1d:2b:77:38:f4:df:fc:32:
13:d2:79:95:14:04:db:22:91:41:93:b3:71:df:0d:de:0a:d0:
7f:78:76:69:b0:e6:4c:bf:e8:d5:23:65:a5:0c:92:3d:8a:66:
b4:3c:84:44:c1:d0:f4:d1:91:9b:cf:df:3d:26:ce:f6:dd:fc:
41:e6:f7:b7:eb:33:8f:cf:c2:fe:ea:a5:13:c8:6d:1e:c7:46:
a1:2e:6d:89:21:43:ed:7a:ed:ee:76:52:ed:c2:41:ac:d4:85:
c5:e3:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:34 2026 by rpki-client