Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: WjN1Jl0q3UBjwps5AVw3zz164+Ku1j1X0EkfLEBR7Es=
Subject key identifier: 68:6A:2C:53:B9:AD:FE:18:9C:63:B6:3A:32:63:DC:40:06:66:14:66
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 019F18679340994745002DA6120FFC282CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 0A81
Signing time: Tue 30 Jun 2026 12:01:08 +0000
Manifest this update: Tue 30 Jun 2026 12:01:08 +0000
Manifest next update: Wed 01 Jul 2026 12:01:08 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: eEjdLlwTILUAe7lg0Vn6O9AWC0cSpmHIuqaYlZqtGaM=)
2: d1jP90vciiSKp3aodWDKGnu38Bk.roa (hash: nxrJlRcagS8YYk40MdJDJveIMr4yj0rHLHg2nPrUsoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:93:40:99:47:45:00:2d:a6:12:0f:fc:28:2c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Jun 30 12:01:08 2026 GMT
Not After : Jul 1 12:01:08 2026 GMT
Subject: CN=686a2c53b9adfe189c63b63a3263dc4006661466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:46:ff:af:70:e2:ba:6e:68:15:7f:5f:f9:c4:
fc:d3:53:61:01:4c:f8:d5:21:4a:7d:78:79:ae:19:
22:e8:f2:39:df:d5:f3:d8:95:e6:9b:b2:5a:5a:16:
b3:3a:6b:1e:b1:00:3d:6a:1e:0e:5a:08:35:ba:09:
bd:2b:0e:d6:b5:73:8b:88:99:45:ec:f3:b9:df:f2:
9c:e2:2a:7a:eb:b5:53:c4:39:61:a5:1f:26:69:48:
12:24:19:be:c7:10:a3:12:ec:fc:78:41:44:5c:9c:
b2:64:6c:1f:34:b6:72:3e:1c:69:55:40:5e:28:b3:
66:87:74:48:33:40:9b:d3:90:ac:a0:20:a6:83:e0:
d8:50:de:3e:f2:98:b6:be:89:d0:60:c4:15:42:3b:
06:89:a3:1d:a9:65:cc:32:32:dc:22:7d:cb:14:06:
4f:67:af:22:2c:d4:21:00:43:79:c6:42:b8:2b:ad:
a3:e8:13:d1:b9:05:9b:d5:9c:1d:3b:1f:50:19:be:
a0:33:88:c0:4d:9e:f5:92:a2:83:b5:ff:80:70:28:
43:40:49:3b:d0:54:84:3d:45:f0:e8:74:ad:74:a2:
0c:50:7e:e3:59:86:4c:60:c1:e0:ff:8a:8a:44:a4:
af:72:92:20:06:10:e1:80:60:47:1f:36:13:73:f8:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6A:2C:53:B9:AD:FE:18:9C:63:B6:3A:32:63:DC:40:06:66:14:66
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b2:46:17:7f:90:83:cf:7f:32:2b:50:de:0e:0e:46:0f:0d:
b1:14:24:0b:46:97:61:f7:6d:44:e1:45:00:42:f3:14:71:0c:
de:27:0b:f8:d4:67:18:8e:b4:c7:5d:ae:1b:5a:ba:58:03:43:
d3:03:50:c1:01:2f:65:20:2b:5b:fd:c7:b5:96:a3:7a:50:41:
d1:ef:f6:ce:3e:d3:2a:9f:0b:5a:fd:e4:cb:d1:1a:7f:29:e0:
d3:4f:81:42:30:ff:e4:14:ef:34:3c:55:30:49:74:39:91:73:
6d:e0:3c:45:6a:ff:d8:dc:b2:9a:26:25:55:4a:93:b8:07:97:
48:40:25:fd:a8:c3:f4:b3:19:1d:ae:59:22:b8:fd:de:fd:55:
23:9d:f8:c8:01:bc:ca:10:84:5a:c3:cb:43:68:f5:95:77:7c:
67:b5:31:58:24:60:d2:00:1f:45:e8:56:4d:ad:d3:f8:b6:d5:
09:43:c3:9b:75:17:d4:61:ec:9e:49:72:4b:68:f9:2e:7f:58:
7c:69:9d:01:56:90:96:87:ee:1e:33:93:cd:3b:66:1b:68:20:
38:a4:2c:5a:66:97:77:f2:de:05:70:ee:a4:12:00:d3:a1:1c:
ba:ab:05:fd:2a:4d:c9:8d:22:a2:21:82:42:9b:fe:b4:58:16:
56:95:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:58 2026 by rpki-client