Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: z81l+pRFkcYoNck6LnEl4i/ekHzUYu+aryW2337+gTA=
Subject key identifier: 08:66:CA:D9:07:34:A1:DE:51:24:3D:20:F8:9D:C6:B1:25:56:C9:71
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 019FA907BD033787AFDC9D1C0DBEFBC7A81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 192D
Signing time: Tue 28 Jul 2026 14:01:24 +0000
Manifest this update: Tue 28 Jul 2026 14:01:24 +0000
Manifest next update: Wed 29 Jul 2026 14:01:24 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: NYa3zmNgEJZnRTwfm955FUFiadsFb/ICm6EenMemM0g=)
2: lEBvXs4u3OpbEZMx5XwLH2hQlKs.roa (hash: 9m0BkgzH4gSyZI57npmc+BY5iSf+kkTcUVRRsTUd1zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:bd:03:37:87:af:dc:9d:1c:0d:be:fb:c7:a8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Jul 28 14:01:24 2026 GMT
Not After : Jul 29 14:01:24 2026 GMT
Subject: CN=0866cad90734a1de51243d20f89dc6b12556c971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:85:b8:f9:38:eb:25:18:5b:66:88:49:50:
f9:b2:90:9a:71:bf:da:46:5d:63:25:fb:c5:a9:ad:
f3:88:e7:9e:51:5b:6e:26:92:0e:cf:18:ff:f4:a8:
1e:22:e9:9f:4d:29:37:4a:f5:17:ce:11:d5:a4:18:
bc:ce:ae:1e:24:4f:8e:b4:9a:24:4d:4d:39:09:d1:
20:b4:03:05:0e:16:55:97:a5:da:c1:22:6c:ab:d4:
d0:46:38:c2:9e:b9:b0:65:52:7b:c6:1f:30:cf:ce:
79:9a:df:7c:53:e1:be:54:97:8e:75:19:01:c3:dc:
1c:8f:0c:e7:15:90:30:6a:0f:dc:b5:24:6d:c9:08:
04:d5:3a:da:77:61:85:aa:50:b8:c8:4b:56:10:7b:
32:1f:9c:7e:b9:14:c2:e5:79:7a:db:bf:80:82:75:
bb:b0:b6:3b:41:24:2e:52:90:30:41:94:86:95:d7:
fa:5a:40:59:af:d9:41:f7:bd:99:28:d5:91:34:9e:
2b:ee:9f:20:60:1e:fd:71:31:e2:21:48:d4:0f:5e:
98:35:de:2b:d0:2c:62:e9:35:84:92:55:97:c9:91:
f2:14:34:67:9e:98:d5:d4:9d:77:b2:08:fe:df:d9:
1f:58:12:dc:e6:db:62:30:0b:c5:ec:6d:ec:df:b8:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:66:CA:D9:07:34:A1:DE:51:24:3D:20:F8:9D:C6:B1:25:56:C9:71
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d5:af:2b:e3:80:95:22:eb:9f:70:26:a5:ae:ed:ef:44:a3:
69:05:b9:5c:2b:08:dc:9e:9b:e3:70:7b:78:f4:ab:e3:56:27:
75:5d:06:c7:cb:43:3c:6e:77:09:25:63:ea:7e:fe:0c:36:89:
52:a1:f0:b1:ee:91:19:bc:0d:0b:e1:0e:6f:9a:7f:55:89:5c:
27:4d:d2:c3:8c:14:95:46:03:38:aa:ac:9a:33:40:ed:27:88:
2e:af:ae:ca:8a:c7:6a:86:00:11:67:0d:cd:cc:b3:d1:23:c1:
d7:a6:f2:7e:90:3c:ef:c1:b6:21:90:58:e8:a1:b1:57:17:bb:
48:43:31:dc:71:5b:54:ba:c3:a2:05:a4:a2:02:c9:0d:8c:2f:
86:85:6e:e8:ce:0c:40:59:ad:a0:cc:19:40:f4:6f:18:2b:69:
06:20:e2:f5:5b:9b:2d:33:fd:bc:1c:3b:44:b3:f4:ff:32:7b:
24:43:34:cf:9e:cb:e3:a4:d7:e2:8b:c1:af:04:4e:2b:92:d8:
02:dc:3a:fb:fa:17:74:08:7d:00:fa:6e:a3:45:f6:e0:23:4c:
4e:ce:a2:0c:b5:7d:68:26:57:4a:bb:0d:1f:bc:d2:63:23:e8:
8d:98:b3:16:99:2b:1e:c6:fb:17:2b:f2:de:ba:89:11:69:4d:
95:23:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:31 2026 by rpki-client