Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: IZR6OHPT6j3Qp9eJzmuL24tHfACe9DqLbXZHA0+4e0U=
Subject key identifier: 39:5C:A5:18:30:17:F4:98:74:34:B1:FE:61:C7:54:3D:46:49:09:87
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 019E9A721AC3A637CCD9E6B3899766E559D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 1947
Signing time: Sat 06 Jun 2026 01:00:29 +0000
Manifest this update: Sat 06 Jun 2026 01:00:29 +0000
Manifest next update: Sun 07 Jun 2026 01:00:29 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: egAAuiLaQylkIUoe3+kcn6YlS3upoS6XmXGUA83cvQU=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:72:1a:c3:a6:37:cc:d9:e6:b3:89:97:66:e5:59:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Jun 6 01:00:29 2026 GMT
Not After : Jun 7 01:00:29 2026 GMT
Subject: CN=395ca5183017f4987434b1fe61c7543d46490987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:4c:d4:51:e3:81:8c:05:52:f3:10:05:b6:
e6:64:c1:31:10:15:95:9f:b9:1f:1e:aa:fc:fd:01:
ca:56:30:f2:58:0e:8d:72:62:6a:23:c0:95:ef:56:
43:3c:a5:71:9b:f6:a4:eb:a5:e3:e0:e6:78:79:91:
89:90:97:74:35:f8:24:1a:fa:37:7d:ae:22:92:e9:
44:49:68:a0:1e:c8:8e:de:16:21:13:3c:c3:66:20:
d3:95:30:99:91:f4:b1:f4:23:49:cb:6c:fd:6e:ee:
17:af:8a:af:af:69:73:4a:19:bb:44:2c:bc:f8:ca:
3b:c6:c1:11:cb:47:4f:26:d6:b0:f4:64:eb:b7:60:
19:d3:43:64:6b:5c:d6:af:48:5f:fd:3d:45:9e:f4:
aa:f0:89:0b:ef:48:07:cb:1a:4e:da:d6:d7:f2:b3:
38:31:6c:ff:d6:cb:b6:7f:0b:c6:14:57:8b:fd:a6:
5a:d0:8b:3c:26:77:8e:a2:71:40:29:49:28:f3:db:
d5:0d:f3:5d:0e:f5:28:ac:76:a9:39:ab:70:07:9b:
a9:e4:49:2d:0f:7b:ed:03:09:7e:6d:c9:18:5b:4e:
b3:1a:ed:ab:81:90:e8:f0:27:47:ce:e2:a7:6a:a5:
4d:98:b2:d8:06:c4:02:6a:0f:c4:b1:43:09:1d:c1:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5C:A5:18:30:17:F4:98:74:34:B1:FE:61:C7:54:3D:46:49:09:87
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:37:1b:51:a6:3f:e1:36:e4:09:a0:46:aa:b4:cb:f3:f4:4b:
0f:a3:b2:73:27:14:f7:8b:34:81:49:a2:9e:b8:21:f1:e5:b6:
b4:b7:87:86:57:96:4d:f7:3b:c7:af:4a:b3:d9:96:c7:b5:ba:
1e:33:7a:2c:76:af:09:72:61:11:f1:b4:3e:5d:e9:64:a9:0f:
be:d4:13:44:41:33:59:77:f3:80:b8:02:91:78:ce:0e:04:a1:
1d:7c:aa:82:26:ea:c4:5d:ed:e4:eb:a8:d3:a6:5d:a9:95:44:
6b:23:c9:98:9c:45:30:1e:82:41:73:c0:ae:ac:65:02:99:54:
73:2e:71:64:5e:56:39:31:15:21:5f:65:81:1b:7d:ea:ca:fd:
bd:dd:ab:f1:ab:f8:e0:27:de:5f:1a:04:5e:fa:04:04:79:1b:
b2:01:f8:e3:ef:41:a6:84:95:f2:b4:2a:11:1f:aa:23:aa:6f:
ec:3f:5d:7e:65:15:bf:a2:31:67:9f:b2:20:bc:98:7a:58:ff:
90:04:ba:a9:20:0c:0b:d0:4e:8f:a4:a0:3a:07:0b:b7:d9:15:
68:5e:a4:cf:ef:20:2d:cd:51:ad:57:38:f5:c4:cb:32:39:e4:
54:d6:10:88:d3:b4:0b:d6:a4:5c:5f:52:2d:a7:ce:96:8a:16:
06:11:0e:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6achrDpjfM2eaziZdm5VnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTQ2ZWFhZTdhZWYyZjQ0ZmU2NjAxNjJiYjlkYzcwZDY1
MjVhZjEwHhcNMjYwNjA2MDEwMDI5WhcNMjYwNjA3MDEwMDI5WjAzMTEwLwYDVQQD
EygzOTVjYTUxODMwMTdmNDk4NzQzNGIxZmU2MWM3NTQzZDQ2NDkwOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzVM1FHjgYwFUvMQBbbmZMExEBWV
n7kfHqr8/QHKVjDyWA6NcmJqI8CV71ZDPKVxm/ak66Xj4OZ4eZGJkJd0NfgkGvo3
fa4ikulESWigHsiO3hYhEzzDZiDTlTCZkfSx9CNJy2z9bu4Xr4qvr2lzShm7RCy8
+Mo7xsERy0dPJtaw9GTrt2AZ00Nka1zWr0hf/T1FnvSq8IkL70gHyxpO2tbX8rM4
MWz/1su2fwvGFFeL/aZa0Is8JneOonFAKUko89vVDfNdDvUorHapOatwB5up5Ekt
D3vtAwl+bckYW06zGu2rgZDo8CdHzuKnaqVNmLLYBsQCag/EsUMJHcEKaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlcpRgwF/SYdDSx/mHHVD1GSQmHMB8GA1UdIwQY
MBaAFN6kbqrnrvL0T+ZgFiu53HDWUlrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEt
MWZhOWFjNTgwYjhlLzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEtMWZhOWFjNTgwYjhl
LzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDcbUaY/
4TbkCaBGqrTL8/RLD6OycycU94s0gUminrgh8eW2tLeHhleWTfc7x69Ks9mWx7W6
HjN6LHavCXJhEfG0Pl3pZKkPvtQTREEzWXfzgLgCkXjODgShHXyqgibqxF3t5Ouo
06ZdqZVEayPJmJxFMB6CQXPArqxlAplUcy5xZF5WOTEVIV9lgRt96sr9vd2r8av4
4CfeXxoEXvoEBHkbsgH44+9BpoSV8rQqER+qI6pv7D9dfmUVv6IxZ5+yILyYelj/
kAS6qSAMC9BOj6SgOgcLt9kVaF6kz+8gLc1RrVc49cTLMjnkVNYQiNO0C9akXF9S
LafOlooWBhEODQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 11:59:54 2026 by rpki-client