Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json)
Hash identifier: Tya3IXuJUye5DxreVuAC9DLxNrjQEm0TpZnclOphaqA=
Subject key identifier: F5:31:C1:4A:A6:10:BD:AF:8A:1E:4E:69:10:6D:F3:C8:31:B1:1C:34
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 019F1265DB490CD1F2448360B48B223BC2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
Manifest number: 1989
Signing time: Mon 29 Jun 2026 08:01:32 +0000
Manifest this update: Mon 29 Jun 2026 08:01:32 +0000
Manifest next update: Tue 30 Jun 2026 08:01:32 +0000
Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: GJXxurqN4i/gpNDqAn1hhn3LykF3UwYOW4pXEVc+Y5c=)
2: 6W16tPBnc1dRPPXrNvPZCBivu-A.roa (hash: VTmSpbN2hd3Hw/P9lB0yjXnyihI9X48UXmmFukdSqcM=)
3: 8w9rvTUUt_RYhR3L0tQXn0glplA.roa (hash: f1jbbfJnG4ozyDGlTqWQz2YYiVrxgFWVHi3zprKmPqg=)
4: ACaX6w3ymJccvXanlDaDKMOtpm8.roa (hash: rxt58ZfZIffkntY04x8LDdPZCwFWWCpGs1EcVhf6HWU=)
5: G0RCF0Z6ZBSE1DTghZmezsnYOFc.asa (hash: Yk7ILI9iy5TC4KHdDTWpcbNPlYqZvxcnNf6IQxr0xj8=)
6: hrEIqJAwCku3aKDnRzlzuarP4tc.roa (hash: /EQ3061AHFPZuvaT0q5zSvf6uilyT/zCrLJMTA/SNVM=)
7: rzxMYEL8BKNR02VR6It9IPmftps.roa (hash: 9y+RUm2eWl0SkVwbpclKO/OAFTw8zaeRZoG7TQq0yY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:db:49:0c:d1:f2:44:83:60:b4:8b:22:3b:c2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Jun 29 08:01:32 2026 GMT
Not After : Jun 30 08:01:32 2026 GMT
Subject: CN=f531c14aa610bdaf8a1e4e69106df3c831b11c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:26:45:bd:4b:fe:7d:74:6f:d1:be:6e:62:
39:3e:8d:11:90:2b:e2:20:ed:eb:ae:61:8e:39:59:
68:f7:32:f5:4c:b5:bc:e0:9e:8d:58:32:3e:fd:3e:
74:37:19:dd:05:db:da:5a:43:05:93:22:f4:16:94:
be:b0:8e:1b:cb:83:5e:16:5b:2a:a8:e2:24:2a:72:
4f:40:78:5e:bd:85:fb:d9:65:9c:ba:d4:d7:22:b8:
d2:c1:fd:32:79:80:46:b8:b0:af:ca:e7:03:9f:c0:
de:8c:d2:68:07:95:2e:62:be:61:71:86:c3:61:6c:
bb:6b:b9:6c:e8:24:5d:59:cf:c4:5f:b2:1b:67:66:
99:60:2f:d8:dc:f7:7e:42:9c:96:1d:8e:95:b4:96:
07:1b:94:3d:73:e0:3f:a7:f2:67:b3:08:af:8e:da:
24:b2:b4:2b:b0:8b:1e:42:81:41:ec:d0:c4:82:74:
d9:48:69:0b:3c:8a:29:82:9f:29:c4:08:78:6d:a1:
b4:4c:43:c1:41:84:5d:21:66:d5:7d:c1:3a:64:c8:
6e:35:ce:2a:14:9b:a5:01:55:49:21:e9:3a:5e:66:
fd:98:63:c5:1a:f2:63:1d:76:a0:43:38:82:e1:7c:
e0:c0:1c:48:98:9d:83:fb:ad:dc:41:c4:0e:0f:61:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:31:C1:4A:A6:10:BD:AF:8A:1E:4E:69:10:6D:F3:C8:31:B1:1C:34
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:30:d0:ae:e5:b9:cb:aa:22:95:3a:72:d9:6f:6e:2b:36:b4:
4a:7f:c6:d8:87:1c:4e:46:4c:b1:b4:4c:e2:32:45:f2:75:41:
06:78:c4:ec:fc:51:07:ed:8e:e8:b1:de:5d:09:d0:7c:68:a6:
da:2f:15:07:d8:2b:d3:eb:dc:fb:03:3e:dc:bb:48:4a:fd:1f:
b4:42:c5:b2:ed:77:38:2a:cd:76:25:57:c3:46:d3:33:ba:23:
4d:97:9d:34:c3:df:cd:11:aa:70:bf:c0:4f:fa:d7:c8:64:81:
0d:e6:2e:b9:d7:b9:ab:f9:ef:a0:7f:07:f5:6b:b9:14:57:b2:
09:8a:55:99:1e:93:c7:03:a5:c2:8f:8a:09:ed:33:5a:b0:61:
77:63:96:a7:38:99:c3:3f:fe:5f:cb:de:95:4b:67:66:57:ef:
67:e6:a6:b3:26:64:e0:f4:b8:ad:0b:47:72:fb:c3:ac:5b:40:
a6:20:79:9f:55:6e:f6:32:dd:b9:7f:45:36:7c:08:3c:90:7b:
00:83:08:e4:c7:97:e6:14:d2:ba:2b:95:de:50:cd:ef:a6:7c:
7f:f3:6e:61:97:5b:de:79:e3:70:21:25:a6:c2:0c:c1:d5:2e:
3c:60:dc:ab:14:9a:cb:9a:5e:14:d2:fd:76:ad:3a:df:e4:67:
93:4a:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:22 2026 by rpki-client