Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: ClDEgKmKFoSvCtxcw+jEI5n+1/mLNg1w5eMTGgUL8As=
Subject key identifier: 0B:BD:1E:37:23:6E:86:E9:DA:C3:D8:E8:AB:B3:9E:6E:C6:1A:83:C7
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 019F189EF6DCB8CE1D9FFAE76A125AE4796C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 136E
Signing time: Tue 30 Jun 2026 13:01:38 +0000
Manifest this update: Tue 30 Jun 2026 13:01:38 +0000
Manifest next update: Wed 01 Jul 2026 13:01:38 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: KhS4lQkCRLVL6Ydfi6X3CNBiTsnEwfsUbcvWGUn7DoA=)
2: 5NCPJAHZuuvT_Y3OLL7H8HuHVKg.roa (hash: Bkja5xY8wPIuCivflgBr5uP8e0j+G2X5xzd/ng/E16A=)
3: D6_vhrKcdm3SeocdHjY0RSl6kYk.roa (hash: 7HV4a9Y3R1hQs2yh9xBaiZSckY1ztfOLxpIEor4i7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:f6:dc:b8:ce:1d:9f:fa:e7:6a:12:5a:e4:79:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Jun 30 13:01:38 2026 GMT
Not After : Jul 1 13:01:38 2026 GMT
Subject: CN=0bbd1e37236e86e9dac3d8e8abb39e6ec61a83c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:3f:f8:fb:35:d3:fa:aa:81:74:21:f4:13:
73:92:33:ed:01:7d:76:9a:99:4d:8a:7b:a8:b0:2b:
f6:34:54:b9:27:85:cf:09:d9:fb:b6:84:f6:bf:8c:
e4:d5:55:d6:ed:67:65:c4:99:da:6a:12:f5:67:3b:
8d:4f:bf:0d:3b:0f:6a:27:f1:e1:65:85:8c:46:b0:
e3:3b:5c:01:c4:a3:f8:a2:07:17:76:55:57:77:9a:
36:15:29:e6:c0:45:a3:af:28:3e:77:f6:2e:3c:d3:
d6:14:da:89:ed:fb:06:c1:9a:77:52:3f:99:93:a5:
d6:b5:2e:ec:cd:24:cb:34:05:85:75:d1:5d:0c:52:
55:76:75:19:d2:28:4f:51:56:6b:b9:d5:f6:be:4d:
bb:d5:ea:ba:82:e7:ab:07:39:f7:c4:00:cb:41:0d:
fc:87:5e:07:21:d6:af:4d:ed:eb:cf:77:c2:ba:ab:
72:44:7f:6c:3d:f4:e9:93:59:f4:14:ad:52:d3:72:
43:85:28:c4:0d:35:0a:6a:0b:c9:7c:5d:59:52:64:
ac:6a:68:05:6b:33:37:29:2f:89:69:b1:a8:7b:3c:
34:84:64:36:41:18:d5:90:3f:e8:c9:36:41:69:ab:
08:13:e2:55:e1:79:59:d8:c6:14:7c:81:a0:8f:0a:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BD:1E:37:23:6E:86:E9:DA:C3:D8:E8:AB:B3:9E:6E:C6:1A:83:C7
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c9:e9:21:2b:28:fa:91:da:b4:c2:29:f2:af:8e:2c:e3:0c:
47:4a:f4:1a:9f:d7:df:c4:a2:14:e5:bf:be:56:6a:b4:4c:3c:
18:04:8c:84:f0:8e:d9:49:10:2c:f6:b7:f6:04:3d:af:73:37:
b3:e4:c8:34:00:05:55:2c:d7:30:bd:d0:5a:7a:ea:51:2b:49:
e3:b4:98:d8:b6:5a:1e:44:b7:47:6a:3e:b2:23:3c:99:6d:44:
66:b9:32:18:e2:8d:5c:dd:31:e0:9e:aa:7d:0f:91:ca:2d:b1:
ae:81:77:6f:1e:7f:3a:d1:0c:d2:fb:2c:03:d6:3a:52:c5:4f:
f2:84:74:b2:93:e6:be:7c:54:e0:9e:70:43:66:76:9c:cd:32:
12:6a:86:b2:28:ac:8f:cf:37:0d:7b:2e:b4:92:3c:0a:86:91:
f7:f9:76:d9:4a:7e:d2:66:a4:d9:1a:eb:78:cf:aa:9a:3d:d3:
6a:12:00:88:45:37:7c:ce:87:7f:8a:c8:8a:fc:5e:60:7e:77:
c7:75:24:06:05:e1:15:d4:a7:38:09:e0:6d:1f:db:37:ad:c8:
18:ce:1b:80:65:90:8a:28:f1:05:6b:ec:71:95:4e:c8:6f:c5:
42:66:3c:a2:c5:83:05:38:8f:fc:40:58:f1:b5:6f:d6:8c:ba:
82:af:1b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:52 2026 by rpki-client