Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: wjD31KPruaZ8kTitvTWp8gq32ZuBqXfWV9koij2P7cI=
Subject key identifier: B5:1C:FC:3B:E1:04:FD:1E:92:0C:47:43:A4:1C:72:A6:D1:B1:12:22
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 019F190D4F75B473D44FD1046942F2919776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 1611
Signing time: Tue 30 Jun 2026 15:02:10 +0000
Manifest this update: Tue 30 Jun 2026 15:02:10 +0000
Manifest next update: Wed 01 Jul 2026 15:02:10 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: oDY73H0nTiIkZjXHLRvS0SCyZR4r25/6VFfeRMaIoKI=)
2: PjoIBGbk9FD7bZGLP8eN3ezf2Uo.roa (hash: gwcdk+V9+YDh37eh6agaRz1L3hMZa0x8O24FJTvNrKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:4f:75:b4:73:d4:4f:d1:04:69:42:f2:91:97:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Jun 30 15:02:10 2026 GMT
Not After : Jul 1 15:02:10 2026 GMT
Subject: CN=b51cfc3be104fd1e920c4743a41c72a6d1b11222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:16:1e:c4:1e:9d:c4:02:5d:88:ba:2c:26:
ad:c8:00:c5:1b:73:60:75:d8:3e:bd:9a:dd:11:c3:
d4:5d:f6:0e:9f:1b:a8:7d:b1:3c:84:bf:98:81:97:
3c:d1:ae:91:93:9a:3e:65:50:f4:72:da:f4:0f:24:
1f:cb:e1:0c:91:80:27:5d:91:2c:f0:55:0c:9f:9c:
bc:62:3f:e2:a9:14:59:5e:b4:63:32:58:7f:0c:06:
ad:86:b8:17:82:af:9e:9d:a8:67:e1:68:c6:50:8a:
5f:82:8e:62:51:49:4c:c8:d5:1c:b9:13:0e:97:67:
14:45:24:ae:40:0c:69:7a:d6:4a:43:e3:07:82:00:
3f:ef:b8:e8:d4:f2:07:5d:b3:ac:c9:31:55:20:55:
da:5c:ef:63:62:ad:93:7e:88:f9:35:a0:63:6b:b8:
1d:17:1d:10:b9:23:4e:0f:62:0c:dc:fe:a1:5e:00:
da:70:0b:e6:b6:60:0f:88:9c:2b:ce:0b:d8:96:4c:
10:ab:91:53:db:c0:c3:c7:0e:0e:d1:88:df:c0:da:
7a:3d:98:60:80:33:73:3b:fa:3d:e7:1b:1f:d9:be:
43:4e:5e:97:d2:ce:12:2c:6d:82:87:5c:2b:f1:1b:
a0:91:08:b5:ff:84:4a:63:ac:30:39:d6:87:68:07:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1C:FC:3B:E1:04:FD:1E:92:0C:47:43:A4:1C:72:A6:D1:B1:12:22
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:63:4d:22:ed:b6:9f:b1:af:d1:cd:61:b0:97:c7:a0:f9:88:
80:25:6c:a5:4e:ac:8e:e2:ad:7d:48:7d:dc:96:1c:68:91:c6:
04:fb:8d:37:ac:f4:22:03:22:e6:ee:d9:c5:82:68:7e:f2:1c:
28:c6:db:cc:aa:1f:72:d3:2e:a4:88:54:f8:8f:3d:7d:c5:8d:
10:38:53:9e:2c:40:49:91:e4:4e:d7:41:e9:dd:81:05:0e:3f:
77:98:bd:ca:a1:5e:cc:f5:e7:ec:a6:2e:11:7c:9c:95:a5:a7:
68:6e:ef:c2:5d:db:40:d5:9b:12:65:62:bf:3b:28:0c:76:7e:
03:c7:34:51:68:04:40:80:00:5a:a4:30:fd:07:bf:60:2e:c1:
fe:e1:77:86:2c:cd:2b:9d:fd:5c:56:2a:9e:f4:2d:65:07:55:
2a:9b:a6:ff:be:86:ed:34:bb:62:cb:51:c2:38:ec:04:8e:b7:
dc:3f:c8:71:0d:f8:48:87:6a:92:54:53:bb:76:57:c4:cb:f2:
3a:53:08:d0:a1:91:cf:db:0a:6d:82:2c:c4:16:dc:67:c2:86:
26:29:ed:43:77:90:e8:55:14:6f:60:de:5d:da:d9:fc:39:5f:
f1:9b:31:a1:45:13:cd:c7:ca:f6:81:d1:f1:37:79:ec:6b:b1:
1b:1d:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:27 2026 by rpki-client