Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier: ONtwK4XdeQ7iprYD+aHRaAFXn6W+sBGXuFDRDZXY4Qk=
Subject key identifier: 35:D9:B6:A8:66:52:C5:F5:17:7D:21:20:E5:C3:53:BF:03:82:EA:14
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 019F18680F8C186D7F64D73D3B0AEE72AF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 12:01:40 +0000
Manifest this update: Tue 30 Jun 2026 12:01:40 +0000
Manifest next update: Wed 01 Jul 2026 12:01:40 +0000
Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: kKcnCmXqShrdXa0ROHwmT8mAOqbCrG050XQp4mij4/s=)
2: WGji20uEwm-qc16TI-95pZHam9M.roa (hash: bsiH0UDqVUjwGYGg21cqoyVxVRYxf5QKf4uTXeiNmjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:68:0f:8c:18:6d:7f:64:d7:3d:3b:0a:ee:72:af:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: Jun 30 12:01:40 2026 GMT
Not After : Jul 1 12:01:40 2026 GMT
Subject: CN=35d9b6a86652c5f5177d2120e5c353bf0382ea14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:7d:c4:dc:33:f3:66:1c:19:e4:c3:f5:f8:
55:9c:45:b7:30:a1:2f:8e:6b:89:9d:23:3e:81:eb:
1f:5e:d1:79:e4:0f:c8:05:d0:e3:10:fe:e9:f1:ff:
89:7e:26:ee:b4:b6:0e:b7:8d:56:62:b8:81:9e:6b:
3b:75:87:f6:e6:c2:ac:fb:62:0a:08:35:d4:05:f3:
bb:23:89:e3:43:96:ad:91:3b:73:fb:93:f7:06:14:
7c:8e:d4:48:49:5d:2d:bf:eb:73:b4:c0:ac:ae:ef:
a8:cf:35:76:ef:00:7f:9a:8c:01:12:5e:b8:09:4a:
31:0d:a7:af:ff:8d:6b:26:78:a2:57:c5:d7:51:32:
5c:cb:d0:1b:76:18:32:4e:eb:a2:3e:81:03:42:a7:
e0:36:db:fb:ba:02:6d:22:61:39:de:7f:7f:12:80:
64:84:9f:a8:01:ee:c8:49:0f:41:97:cb:85:71:8d:
78:f1:6e:ce:b1:45:0f:d8:66:7c:8d:3a:d7:04:2e:
18:f6:67:da:52:19:58:ff:84:3a:9d:6f:4d:39:98:
4d:c6:62:30:6c:ad:8c:a3:bd:17:ce:a8:a9:11:c7:
9f:81:7b:fa:f2:c2:58:fe:6c:21:a0:d3:d5:0a:a1:
6a:c5:45:e7:07:c5:39:91:97:d9:b0:4b:41:39:ae:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D9:B6:A8:66:52:C5:F5:17:7D:21:20:E5:C3:53:BF:03:82:EA:14
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2a:08:8f:74:3b:39:e1:6d:3e:35:02:fd:b1:c4:91:24:31:
18:8f:3c:dd:57:76:0c:23:dd:a6:ca:7e:c6:b9:e2:94:d2:ad:
37:af:46:a6:2c:2d:75:c4:19:74:15:fc:c3:99:3e:94:6d:68:
7c:21:0e:e8:f1:f6:00:17:20:84:54:c0:d5:3a:a6:4f:fc:b3:
e7:0a:21:53:ed:69:9b:2d:d2:76:4d:33:bd:75:be:ea:90:d3:
6d:5b:12:f1:d3:ff:77:ad:c5:e5:94:68:f7:d2:76:1e:42:38:
ae:5b:68:6c:8b:54:3d:cc:d4:5a:95:7f:1a:d3:2d:9e:72:11:
61:e5:97:e2:08:37:97:40:dd:92:44:38:96:3d:f1:e4:87:69:
1a:aa:e0:d3:48:f2:f8:62:93:29:c6:d7:fe:4a:e8:4b:10:8a:
3d:85:94:12:d3:db:64:f0:c9:10:95:9e:eb:76:0a:67:81:d4:
74:28:07:a7:4b:f5:1b:98:9b:1c:5e:eb:dd:cc:ef:74:77:54:
d9:0d:19:ee:fd:4f:86:c2:ef:01:5a:8c:ad:7d:e8:dd:eb:37:
47:59:cb:35:ed:b6:5c:4c:d6:5f:aa:cc:ad:1d:03:c3:a0:a7:
4d:07:7d:6d:22:2b:dd:f8:a9:4b:22:3f:96:20:58:da:4c:9f:
85:9f:3a:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YaA+MGG1/ZNc9Owrucq8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMmE2OTVjNDEyMjFkZDhlZGRjZmM1YzRiNWNjMGI3ODlj
Yjk1M2IwHhcNMjYwNjMwMTIwMTQwWhcNMjYwNzAxMTIwMTQwWjAzMTEwLwYDVQQD
EygzNWQ5YjZhODY2NTJjNWY1MTc3ZDIxMjBlNWMzNTNiZjAzODJlYTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCd9xNwz82YcGeTD9fhVnEW3MKEv
jmuJnSM+gesfXtF55A/IBdDjEP7p8f+JfibutLYOt41WYriBnms7dYf25sKs+2IK
CDXUBfO7I4njQ5atkTtz+5P3BhR8jtRISV0tv+tztMCsru+ozzV27wB/mowBEl64
CUoxDaev/41rJniiV8XXUTJcy9AbdhgyTuuiPoEDQqfgNtv7ugJtImE53n9/EoBk
hJ+oAe7ISQ9Bl8uFcY148W7OsUUP2GZ8jTrXBC4Y9mfaUhlY/4Q6nW9NOZhNxmIw
bK2Mo70XzqipEcefgXv68sJY/mwhoNPVCqFqxUXnB8U5kZfZsEtBOa6Q6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXZtqhmUsX1F30hIOXDU78DguoUMB8GA1UdIwQY
MBaAFN0qaVxBIh3Y7dz8XEtcwLeJy5U7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85NGFjMTctZjlkZC00OWY2LWE4OGEt
MjA4ZGMwNjhkNTNjLzEvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85NGFjMTctZjlkZC00OWY2LWE4OGEtMjA4ZGMwNjhkNTNj
LzEvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyoIj3Q7
OeFtPjUC/bHEkSQxGI883Vd2DCPdpsp+xrnilNKtN69GpiwtdcQZdBX8w5k+lG1o
fCEO6PH2ABcghFTA1TqmT/yz5wohU+1pmy3Sdk0zvXW+6pDTbVsS8dP/d63F5ZRo
99J2HkI4rltobItUPczUWpV/GtMtnnIRYeWX4gg3l0DdkkQ4lj3x5IdpGqrg00jy
+GKTKcbX/kroSxCKPYWUEtPbZPDJEJWe63YKZ4HUdCgHp0v1G5ibHF7r3czvdHdU
2Q0Z7v1PhsLvAVqMrX3o3es3R1nLNe22XEzWX6rMrR0Dw6CnTQd9bSIr3fipSyI/
liBY2kyfhZ86AA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:50 2026 by rpki-client