Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier: LlOJozIbRvBQFqNxSyfpqlSshdLk+4HOCaVV4RwHp9A=
Subject key identifier: C8:BD:F6:BA:94:E3:AC:52:32:B9:99:64:D1:4E:19:26:C3:19:F3:63
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 019F190D673F0700F9BEDEDD66BB052B5662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number: 0A97
Signing time: Tue 30 Jun 2026 15:02:16 +0000
Manifest this update: Tue 30 Jun 2026 15:02:16 +0000
Manifest next update: Wed 01 Jul 2026 15:02:16 +0000
Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: zSRejsEU2cq0wFgpvLDZ1yXLj+SfOQn0s5loPdfWkic=)
2: E2bog414s7wIyFoCk8EPV__dfvA.roa (hash: V6Nnm/ymBZJD1OFNh62adA8C3xBKE7VTPboLYpn7i3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:67:3f:07:00:f9:be:de:dd:66:bb:05:2b:56:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: Jun 30 15:02:16 2026 GMT
Not After : Jul 1 15:02:16 2026 GMT
Subject: CN=c8bdf6ba94e3ac5232b99964d14e1926c319f363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:36:c9:81:05:59:64:8c:c1:7c:df:ae:ed:
23:19:89:4a:d3:10:e1:e2:6c:f2:34:56:65:3c:8f:
4a:6f:8e:05:29:50:df:9c:fb:c9:c0:d1:22:8b:6b:
84:74:df:6e:9a:32:e2:06:2b:9d:c4:39:d6:b0:e5:
4d:13:cb:ee:8c:9b:ff:74:2b:29:63:11:ea:3f:fa:
57:6e:3c:56:84:0f:17:29:0a:11:7c:0d:eb:6a:99:
46:32:1e:a3:4e:12:ef:d8:76:48:da:ab:5b:2a:f3:
0e:bb:25:bd:f1:a7:81:58:b5:bd:e0:dc:30:b3:d3:
d5:de:34:54:88:11:9a:82:ad:be:fa:d0:37:8d:21:
50:01:9b:23:b2:45:90:3d:25:f6:ba:79:fa:94:ca:
a1:c1:8d:79:13:d2:a8:b5:8d:72:20:ed:97:8c:33:
27:5c:1e:d4:8c:48:aa:b6:39:fe:fa:21:a3:8f:f5:
74:50:6c:b9:8e:42:bb:af:7a:2d:6c:f4:33:c2:36:
ca:b5:4e:e9:a5:31:9f:95:9d:f7:b8:9b:ea:ff:09:
84:32:e3:e8:b4:bb:93:e3:fe:0a:50:56:d1:6d:51:
5f:4d:98:ae:cd:2c:eb:d0:74:9b:c2:04:97:f4:8b:
a2:cc:dc:43:01:3f:8d:d7:fa:58:de:10:29:7e:27:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BD:F6:BA:94:E3:AC:52:32:B9:99:64:D1:4E:19:26:C3:19:F3:63
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:16:6b:97:39:86:f6:ba:00:c6:61:26:2e:dd:77:c5:96:78:
dc:b5:2c:e1:88:ef:6f:69:f1:a2:62:24:18:69:79:f1:7f:78:
7f:ac:57:c9:c4:09:b7:5f:78:4f:af:5f:a4:4d:9a:f1:bd:2b:
4a:6c:33:a6:11:c2:36:f0:74:6a:f0:1d:79:5d:20:d9:16:6d:
8b:b7:56:28:79:ec:db:82:f7:21:ac:ba:34:9c:ce:85:f0:8e:
8d:f5:f2:e0:90:78:71:c8:af:99:69:7a:3a:9b:c5:40:c5:7b:
a2:ff:88:f5:fd:b5:52:88:27:18:55:d1:e0:34:da:79:1c:44:
0d:01:5a:44:85:08:bc:5f:80:df:45:1b:ae:93:9d:e2:94:0a:
85:a2:8c:b6:a6:e3:f3:cc:0d:7a:b0:0e:a3:2b:ef:c2:ec:54:
82:40:7f:35:a1:db:e8:75:a7:a1:85:69:96:e5:e0:e8:f7:0b:
2e:a6:01:f0:a6:26:97:c4:3a:bd:a8:1f:72:18:e3:5b:5e:b7:
8b:44:24:e6:87:0e:83:b5:f1:36:18:0d:9b:c0:31:a0:1d:c9:
0e:49:e2:ff:68:a0:3f:9e:59:53:8a:ab:80:11:f0:a2:10:60:
2e:58:aa:f5:fc:55:f4:59:8a:5d:bc:aa:ba:e7:3b:e5:b5:eb:
44:5f:60:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:44 2026 by rpki-client