Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: GvFf+R4908HN+AUmKdCFfnxgSL5a4Z4sIxbd2m4QvOk=
Subject key identifier: BA:E9:CD:21:BB:6E:5D:BE:AE:25:9D:19:38:48:94:C6:3E:83:30:08
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 019F190CB8199381313EEEA2D9071428A945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 15:01:31 +0000
Manifest this update: Tue 30 Jun 2026 15:01:31 +0000
Manifest next update: Wed 01 Jul 2026 15:01:31 +0000
Files and hashes: 1: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: IQS5CsDHpIWL9QOALNFL0cOgd/13LbcRJTr2SojV9Fs=)
2: 7DFhLxfNsNdBG7misMM2Gd6pq98.roa (hash: 91BxkeL//UY4lGamLg4LH3uIYXXl6dNvyu0iOuqwroo=)
3: kOLGFIQ68N0t89GXfLW_l-tuaZs.roa (hash: JEbR7GHzj1yo7N6pB32D4eZu3GhxlqvfkdXGhcPXMmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:b8:19:93:81:31:3e:ee:a2:d9:07:14:28:a9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Jun 30 15:01:31 2026 GMT
Not After : Jul 1 15:01:31 2026 GMT
Subject: CN=bae9cd21bb6e5dbeae259d19384894c63e833008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4c:55:af:8d:11:5b:57:d0:c5:5b:7b:8f:02:
d4:d2:86:64:46:05:7a:c4:8c:d1:1d:91:de:56:da:
b3:db:62:19:3d:6e:82:1b:ce:e4:4c:af:41:d4:51:
0e:82:8a:92:34:81:f7:bc:32:ec:46:6e:ca:76:90:
0e:8d:83:a3:fc:f0:02:b4:44:d9:67:4c:88:6e:ba:
3c:6b:77:fa:fe:45:44:d6:4e:76:04:32:a9:dd:cd:
42:6f:b1:27:fd:db:c3:32:97:d9:bc:59:74:6f:9e:
21:5b:f0:40:ee:99:a9:5c:02:3b:61:71:c4:2c:fb:
5a:2f:7c:ff:ae:24:e2:d7:59:b5:dd:38:71:e0:f9:
b2:1f:28:44:64:d2:8b:24:aa:5f:04:9f:18:7a:3e:
42:20:ca:40:8c:d0:ae:0e:92:de:47:f7:92:ba:6c:
98:d7:f3:2a:7b:65:65:33:b0:db:a5:22:37:c6:d9:
ae:1a:a7:cd:89:85:74:38:9b:9f:00:fa:01:f5:c0:
d6:42:23:6d:42:b8:7b:6c:ef:bf:a1:f6:c2:00:f5:
25:63:12:2c:bb:b2:b2:9a:83:b3:05:dd:a8:f3:ba:
0e:85:4c:d2:9e:bb:d9:19:9d:f5:1c:ca:44:92:18:
ae:5e:fe:5b:79:ca:2c:f1:75:6f:9e:0d:01:7f:11:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E9:CD:21:BB:6E:5D:BE:AE:25:9D:19:38:48:94:C6:3E:83:30:08
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d6:7c:e2:d7:84:a8:a1:ee:ce:03:cb:85:99:c6:e8:33:ae:
a8:69:8a:7e:1f:e3:2e:5a:8b:10:ed:ed:da:b8:43:72:d7:43:
89:22:dd:af:14:8d:fa:f3:c2:44:75:9e:8a:dc:ef:2d:43:91:
79:3c:6c:da:79:90:c1:d4:9e:56:b5:29:5e:df:be:f5:5a:91:
6d:08:7f:33:8f:e6:47:51:6c:2f:d2:ea:19:50:81:c2:dd:87:
72:cd:7c:b2:a9:42:a3:d4:22:0d:89:95:96:9a:6e:92:5e:06:
af:0c:56:2d:77:ea:6f:6e:f3:49:c5:f7:e3:c7:74:c7:52:da:
58:02:c9:87:a9:ca:88:d1:09:41:0c:7b:ae:a5:66:19:e0:b4:
97:10:b3:0e:6e:da:63:ed:0e:72:9d:ab:fa:bc:44:fc:4f:45:
1e:43:23:fb:b0:77:d5:9b:71:9d:99:72:63:6f:4d:4a:3c:22:
6b:82:06:df:1d:3e:12:3f:4a:ee:79:95:5e:39:cd:85:f4:36:
b1:9f:1b:6a:36:16:87:0a:6a:52:64:b3:07:be:0f:1a:10:49:
a8:1a:50:be:3b:93:95:73:76:47:28:8c:1c:c2:ea:90:ed:57:
b2:b4:f1:60:54:67:7b:83:45:20:d5:ed:81:8f:f0:24:f9:06:
3b:aa:94:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:44 2026 by rpki-client