Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File: 3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier: WaOXDIt05VAmy+dHbrDINtXamAnQyMSGC8IiMC+TGW8=
Subject key identifier: 18:EA:AE:3B:8B:F3:96:7D:B9:56:3A:98:7E:4C:F6:DA:AC:11:A0:BE
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019EE28BE4B8D977DB11E88B4E4174C0E67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number: 1981
Signing time: Sat 20 Jun 2026 01:01:19 +0000
Manifest this update: Sat 20 Jun 2026 01:01:19 +0000
Manifest next update: Sun 21 Jun 2026 01:01:19 +0000
Files and hashes: 1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: UOa7oFDF6a9oEk2npsrh1xeQvcFJ5fT4pWDkI/GORHc=)
2: Pe_0_3RXeg0_K2j9ghGT_HDZm50.roa (hash: dq4vcwGpi9Xg3PIMEP+w0b/UoMg+2lIHLeWnB9sLO5M=)
3: QYmlQUAnB-0RA7OiPmhnGtJDWRg.roa (hash: 9MlbxaPMBipZRlyW5FOSHulBh31JEbALxF1O0eX7spY=)
4: Sl3slTlmy5eFtqo76SlKQ9CnbUM.roa (hash: DVZMz6p8+NCTnVKJba2KiAUqUvaQ9KTQclo1bNgr4hM=)
5: fvZVLt2jJxSwkZIVsLw5-Ya7ZRI.roa (hash: fRu3ed4NqNa0Gx+wvKVb9ozSMChmEYjpHTUHm+NNTxQ=)
6: hneKOL6xKV3cr3gP56n-PmBtpXI.roa (hash: GxqGClH9UHGqcmyTREy95vx88t5aKLbmXG/YE4t9Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:8b:e4:b8:d9:77:db:11:e8:8b:4e:41:74:c0:e6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jun 20 01:01:19 2026 GMT
Not After : Jun 21 01:01:19 2026 GMT
Subject: CN=18eaae3b8bf3967db9563a987e4cf6daac11a0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:e0:4c:ee:54:8e:f4:23:67:09:58:28:92:
43:96:59:92:53:bd:0f:4b:73:15:93:d7:eb:74:c3:
2b:16:49:33:6a:25:08:84:d9:14:6f:67:91:2e:cc:
00:e7:58:f9:f2:f5:cd:17:13:73:87:c5:f3:9f:f3:
79:1b:f5:ae:4b:8a:38:ed:d7:b0:39:07:4d:63:fb:
f5:0d:4c:1f:52:e7:77:96:7a:ff:21:50:32:80:98:
95:21:ba:77:4c:e3:aa:18:f7:d4:74:35:ae:09:4e:
92:92:bd:1b:cb:b9:85:47:00:07:cc:58:47:b1:a7:
ef:67:78:5e:e4:b1:a7:04:81:82:ae:8b:7b:4b:99:
8b:f0:1c:88:43:3e:23:e9:f9:c8:99:ac:86:73:90:
fe:1d:d8:41:8f:44:f1:43:37:2b:2a:cd:8c:f3:6f:
a2:02:4b:f6:b5:ab:5c:10:9c:c0:49:56:48:f1:ec:
ce:f2:ac:8e:05:6b:3e:fc:ae:44:80:e1:14:51:3b:
2a:3a:2e:1f:82:e7:ee:b1:b9:bd:27:73:fd:10:27:
3f:30:ec:c2:b1:19:cb:be:be:6e:76:1a:53:72:13:
ed:c7:9c:b0:9b:b5:b3:cf:be:3e:30:eb:a7:5e:4e:
a9:c8:c9:9c:2a:80:66:cf:de:47:77:f3:80:55:e5:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EA:AE:3B:8B:F3:96:7D:B9:56:3A:98:7E:4C:F6:DA:AC:11:A0:BE
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7d:a1:73:1b:de:55:18:bf:a1:4f:1d:07:e5:c7:bd:2d:ce:
7e:29:de:c3:d8:37:ed:d7:82:79:2b:b4:44:bd:d6:45:7c:5a:
69:f5:69:11:d1:1d:5c:08:c7:8b:65:21:9f:18:5d:a0:02:ea:
33:87:7e:b7:ac:0b:3f:a0:6f:00:ff:1b:6b:39:08:63:00:32:
f7:11:1b:88:50:7e:c1:8f:f3:f8:cb:a2:ca:cf:11:4f:a0:43:
8c:63:f0:35:54:c5:ee:13:08:c4:cc:99:0d:5b:04:d8:36:a0:
3b:ef:4f:45:97:cb:81:52:6d:74:b0:c6:7b:b2:0a:75:7b:73:
6e:3f:66:61:96:df:6d:33:c9:c8:52:80:5e:36:fb:56:74:ce:
d0:df:da:ef:e0:4e:8e:30:36:bd:8b:3e:3c:6f:2e:d6:52:0f:
1a:27:77:3d:82:7f:46:ac:ff:e2:1a:ee:bf:88:af:4a:e0:93:
7f:ff:78:f8:1b:f1:c8:e8:b4:c2:91:76:ce:ae:8d:0a:38:c9:
eb:e3:bf:ec:c5:36:2a:ba:74:7b:9a:09:98:57:17:12:c0:e5:
db:68:56:3c:c7:8d:78:38:48:26:12:ee:93:70:5a:cb:29:a2:
f7:3b:da:ab:87:8f:0f:53:6e:a5:19:9b:71:af:e0:f3:f8:63:
61:fc:a7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:13:57 2026 by rpki-client