Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: XOedVPgCbii4hVoASxIbX+hGY+/wJW9dz015VbhRqNs=
Subject key identifier: 02:C8:B6:ED:E0:DF:84:AB:94:27:D4:ED:FC:38:1A:20:24:1F:43:D7
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 019F1867B29401CA56EDD6DC9BECAED063CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 12:01:16 +0000
Manifest this update: Tue 30 Jun 2026 12:01:16 +0000
Manifest next update: Wed 01 Jul 2026 12:01:16 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: 24FdfzARuboppq2x6pTpeBxBVywivZRlxdggpYNiOnk=)
2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:b2:94:01:ca:56:ed:d6:dc:9b:ec:ae:d0:63:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Jun 30 12:01:16 2026 GMT
Not After : Jul 1 12:01:16 2026 GMT
Subject: CN=02c8b6ede0df84ab9427d4edfc381a20241f43d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:81:16:dd:1c:e1:7a:a3:9c:d1:c3:9a:5d:
94:fc:96:c0:64:bf:ec:10:16:ad:dd:a6:7b:2a:7b:
f9:d0:f8:90:c1:cb:cc:b4:3c:e9:c8:97:8d:dc:91:
21:8a:17:e3:02:47:91:ed:0a:fd:39:81:a5:d7:26:
2c:c2:22:67:5e:f0:09:cd:ab:17:a4:2d:4f:41:c7:
4b:33:6d:c3:27:cb:a4:09:2a:86:a4:11:8c:1a:3f:
4e:4b:56:fa:4d:f7:2d:e5:d9:ab:aa:55:8b:a9:89:
14:c4:b6:90:a0:d2:85:a6:28:0f:6d:91:60:c5:04:
fe:78:0f:8c:31:a0:9a:2f:26:94:8e:21:8e:69:46:
84:d7:1a:a7:91:34:5f:ca:e9:d1:e3:1b:a8:1f:6f:
9c:4f:20:fb:ad:84:26:ee:a5:2c:e5:7b:b7:23:67:
95:eb:fc:f2:d7:0c:60:f2:59:fb:df:73:e9:21:c8:
d1:b2:74:66:bf:97:19:41:37:a6:45:6e:92:a9:49:
6e:b0:35:b6:3b:85:b2:d6:aa:1c:83:a7:07:a3:c3:
5e:5a:c7:0d:68:84:a1:4b:6c:8a:c9:3c:8f:b7:57:
5f:0d:6f:f6:bf:50:ca:a1:05:21:4d:05:af:29:71:
f8:f4:3c:43:d4:56:29:07:af:0e:4e:48:16:7e:94:
8d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C8:B6:ED:E0:DF:84:AB:94:27:D4:ED:FC:38:1A:20:24:1F:43:D7
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9b:15:46:1a:4d:a9:0e:c2:a0:be:0f:98:18:5c:3c:60:1e:
33:40:94:f1:2d:f9:ba:7d:e2:e7:06:54:13:4f:8e:20:b7:78:
d0:54:a6:2b:76:34:c7:b6:ad:08:a7:fd:ee:cd:2d:a0:a0:5f:
48:53:00:e3:31:08:f4:b8:f6:57:10:18:82:9a:98:15:5d:c0:
7e:b8:53:e3:b7:5d:77:da:10:4f:bc:a5:74:6b:21:50:d7:e1:
ba:de:5e:2a:21:95:b3:b0:af:6b:2f:d2:9f:32:a6:2b:e6:bc:
05:9c:f6:8d:f5:53:61:7d:3b:c6:14:18:9c:14:f7:68:55:6a:
ca:3c:d7:3f:1c:b4:96:55:7d:42:59:4f:02:bf:52:08:03:cb:
9d:b9:65:57:da:45:96:a3:27:f4:f9:06:0f:db:4e:91:e9:09:
9e:e3:42:61:10:6e:3a:e1:53:d7:c8:df:e4:a0:ca:f6:f2:6a:
35:b1:31:50:39:7a:50:1e:ac:2f:cd:8d:63:70:42:0b:e5:0e:
a9:27:3e:f6:7f:a1:97:ef:ad:b1:36:16:de:f1:89:80:f4:43:
37:be:8a:da:94:31:35:c3:3b:a6:66:5f:01:54:44:33:c7:21:
22:07:63:13:fe:b9:ed:ee:bd:e9:1b:f1:6e:18:0c:de:94:f5:
99:32:46:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:49 2026 by rpki-client