Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
File: 3-KkwH5N3j8ePKw5ujshNTGsy7k.mft (raw, json)
Hash identifier: cuAOrrlFC55cBKXoTyQee3dNHn9Im3Qw4JYeuRKm5gg=
Subject key identifier: 8C:B5:ED:82:41:A1:61:4B:8D:6D:E0:CE:FF:F6:48:6C:16:78:69:9D
Authority key identifier: DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
Certificate issuer: /CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Certificate serial: 019EB6211FED226F40138641D700FA751F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
Manifest number: 0104
Signing time: Thu 11 Jun 2026 10:01:24 +0000
Manifest this update: Thu 11 Jun 2026 10:01:24 +0000
Manifest next update: Fri 12 Jun 2026 10:01:24 +0000
Files and hashes: 1: 3-KkwH5N3j8ePKw5ujshNTGsy7k.crl (hash: 9JAXl5tELWJexVRSoL9mdkuiSRH0nuXXtExyGvQNCDI=)
2: Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa (hash: FRvotk1GU1c0bgTGRLjQpv9XYU8csQF9vIzVahVu7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:21:1f:ed:22:6f:40:13:86:41:d7:00:fa:75:1f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Validity
Not Before: Jun 11 10:01:24 2026 GMT
Not After : Jun 12 10:01:24 2026 GMT
Subject: CN=8cb5ed8241a1614b8d6de0cefff6486c1678699d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:60:e3:9b:73:cf:ed:75:ee:df:04:27:77:3a:
bf:3a:3f:33:db:b6:44:80:94:bf:02:68:e3:68:aa:
55:da:54:34:bb:56:75:11:21:93:4c:ec:53:73:f1:
46:21:6f:05:f6:01:8e:e6:6b:40:bd:b2:a5:1a:0c:
36:fe:00:be:53:84:0f:0d:50:43:9c:1c:99:b2:8c:
2c:4c:70:99:8b:23:dc:33:a8:c8:f3:f1:0d:69:01:
f5:80:2f:1a:94:8b:4f:d5:74:7a:ea:20:53:22:3f:
44:02:0a:a9:79:92:b9:2d:4c:ce:36:63:b0:58:1e:
ec:5e:91:84:3a:43:2f:0c:64:d1:5a:7e:a7:07:68:
10:92:3b:ef:6b:8f:db:2f:df:5d:1a:a7:0c:03:9f:
53:cb:c0:fe:76:90:7c:42:c3:c3:29:9a:b6:d4:fe:
6c:87:e9:24:80:5d:8e:f9:bf:4a:d8:4b:5e:c6:78:
ee:02:49:d2:7f:95:40:d4:c6:f7:a1:fb:2d:34:03:
ab:2a:4f:f3:c8:57:c5:1b:55:58:ec:67:a0:58:04:
83:bd:f4:d2:30:1f:ce:c6:08:09:8b:75:f7:4c:d1:
06:7d:19:c3:86:d7:ac:ef:7a:b1:f5:72:b4:2c:bf:
af:d7:3e:c7:24:a7:c6:f3:b0:c4:0c:59:85:af:41:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B5:ED:82:41:A1:61:4B:8D:6D:E0:CE:FF:F6:48:6C:16:78:69:9D
X509v3 Authority Key Identifier:
keyid:DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9c:83:e9:f3:1a:56:03:5c:cd:2a:c6:bf:51:75:18:e4:f3:
b6:a3:aa:a9:7b:f7:46:34:77:f5:05:55:42:50:8b:90:74:cf:
59:4a:ac:94:52:26:13:8b:7e:76:2b:db:37:78:14:7c:6b:cc:
b7:84:ff:0b:2e:14:bb:38:29:35:3c:33:19:44:91:4f:b4:87:
98:e8:12:8c:74:76:48:fe:7b:b6:24:07:55:3d:c7:df:76:a2:
03:94:fd:ab:b8:fa:21:62:e5:82:ce:b8:ae:91:15:fc:c1:8f:
99:01:79:79:22:8c:39:9e:80:8c:96:aa:87:a9:b5:f8:f8:26:
00:75:95:fd:a3:13:10:bc:a8:92:e2:11:ce:2f:14:db:0a:55:
93:43:eb:f7:b4:15:6f:4f:63:9d:c5:7c:6e:16:22:3f:77:8f:
1a:79:5c:68:1c:05:6c:a3:49:c6:2e:f8:2e:03:9a:37:c5:f9:
95:05:4e:35:37:4e:04:b8:a3:94:4e:68:07:4a:90:61:46:a0:
ae:1d:4b:b5:7f:57:c0:fe:4c:b9:92:76:e5:a6:0a:87:51:f4:
41:92:3f:c8:ce:b0:51:74:da:a2:89:0e:19:1e:50:3d:db:b4:
79:1c:d3:00:88:fd:df:d0:8d:01:a2:1c:06:50:26:43:54:51:
48:b1:1b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:20:42 2026 by rpki-client