Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: 5jeGdjj3K4P83Qpagk6bPsASuUCsdzP6xl4fjVBYjs8=
Subject key identifier: E8:22:E1:6B:D0:EE:20:97:95:21:53:0A:C6:0C:7E:32:C5:AB:76:BA
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 019F19442A54945B5A84DE7E927673B8AFBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 191C
Signing time: Tue 30 Jun 2026 16:02:05 +0000
Manifest this update: Tue 30 Jun 2026 16:02:05 +0000
Manifest next update: Wed 01 Jul 2026 16:02:05 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: xZbwGg+R5wNUAGf1vuNbR4b2Cn6YpHOrprrxvnEq780=)
2: O-gxnsHzDhdYKwTNHTFr-Ch9dJM.roa (hash: kVKhuC0dJOQWPqNSK7n1W9Bj9SrxDJpJnAeLYtUm8Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:44:2a:54:94:5b:5a:84:de:7e:92:76:73:b8:af:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Jun 30 16:02:05 2026 GMT
Not After : Jul 1 16:02:05 2026 GMT
Subject: CN=e822e16bd0ee20979521530ac60c7e32c5ab76ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:46:e6:f4:33:8a:85:4d:a8:37:e5:ef:06:
bd:07:c3:13:d3:8d:19:24:13:ac:d2:04:41:04:b5:
bc:6d:4b:1f:e3:6f:55:54:13:62:37:5d:f8:a4:72:
5a:da:13:86:19:43:36:13:3e:3a:7f:9a:03:d2:93:
40:67:fa:43:4d:d2:6a:68:d3:a3:e0:bc:5a:84:b8:
1e:4a:db:92:9f:89:66:34:5a:20:0a:b0:d2:4f:d1:
92:10:e2:70:50:2b:da:87:88:3d:0f:ea:4d:48:ea:
d7:51:4f:4b:4b:bc:52:8c:b2:20:8b:32:1a:ac:36:
88:10:f0:bc:53:93:e6:56:01:ff:7c:19:ee:37:26:
8b:37:5e:e5:46:aa:0d:e2:68:de:67:e9:98:4e:65:
47:78:72:09:01:b1:42:48:c1:c8:72:0d:c6:b9:4a:
d5:2c:ff:68:f2:29:da:04:ea:97:ad:bc:e3:ff:a7:
cd:81:f9:93:6f:37:e4:0a:d0:27:d8:80:9d:db:6c:
87:79:7c:1c:cb:a5:2c:04:a6:22:12:d6:d3:50:d4:
89:72:9f:31:b3:ab:ff:c5:88:2a:13:d0:e4:b2:72:
69:99:2f:97:5e:0f:de:43:60:b2:6c:73:61:e1:2b:
6e:49:ef:de:ff:e5:2e:52:f7:25:22:5c:1b:04:24:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:22:E1:6B:D0:EE:20:97:95:21:53:0A:C6:0C:7E:32:C5:AB:76:BA
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3e:e6:b9:ac:98:1f:fe:63:d9:ec:c4:8a:ed:9a:69:78:68:
bc:7e:c0:93:f1:87:fd:ed:9b:78:c0:78:1a:ae:e6:71:28:0f:
b2:94:21:ca:2d:ef:42:80:f0:4f:7f:5c:e9:2c:4c:f0:ee:24:
99:dc:cd:69:6c:a7:be:5d:30:59:1c:3f:d0:83:a7:df:41:bf:
93:3f:2f:78:0b:59:bd:b1:f0:49:78:d6:45:88:51:0a:9a:99:
73:8e:37:78:0f:fd:02:3b:24:4f:5e:4f:0e:c0:fb:1c:aa:98:
82:b5:02:17:c5:5d:71:19:a7:36:d8:8a:18:4b:17:4d:ac:5d:
6e:78:d1:31:8a:28:cd:2e:20:d9:42:ad:89:9c:91:73:13:b0:
93:10:55:51:b6:24:43:05:f9:cc:3f:64:0a:37:8b:bc:39:be:
ff:5e:3b:0b:13:68:63:84:3f:38:af:07:59:08:3a:a4:66:fb:
eb:fc:e8:b5:e8:51:74:ec:4b:26:d0:04:cc:12:c7:dd:1d:6e:
b1:f2:aa:10:ba:99:bc:f5:8c:19:c1:82:3f:6d:68:31:35:16:
15:2b:77:15:8f:57:55:98:d5:a9:c0:02:8b:e0:11:df:a9:04:
76:01:77:85:78:06:56:52:cb:17:66:3b:ef:7c:a7:3d:b5:48:
6c:ac:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:20:11 2026 by rpki-client