Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: AUCHwaenwTSS+T/YsY4kSJa0PSp45qGbjQRmVm9Qyzg=
Subject key identifier: D8:BE:D0:2B:5D:9E:2A:F7:FD:A3:F7:1B:63:9D:8C:6B:50:19:E5:03
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 019F18D6A4BC6016EF2388110A0A58BB0C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 14:02:27 +0000
Manifest this update: Tue 30 Jun 2026 14:02:27 +0000
Manifest next update: Wed 01 Jul 2026 14:02:27 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: swBzz5Q8rtuNpZUS/0id2ZyDhOib0b8S2JammDVVHsw=)
2: 4Qc85N4EwfShTiGhUnkvPvcjOEs.roa (hash: 5gcG+cc/9htcQzQfIk5Lbs8J3j2mNNeVz49M8qI81nA=)
3: dHkvv2AfkDDcX-uBDSlHxgyE9BM.roa (hash: MkJGi0URj4efKyUrfGEHvlM7u0U0Wn9mOiKm3NgF9Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:a4:bc:60:16:ef:23:88:11:0a:0a:58:bb:0c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Jun 30 14:02:27 2026 GMT
Not After : Jul 1 14:02:27 2026 GMT
Subject: CN=d8bed02b5d9e2af7fda3f71b639d8c6b5019e503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:40:ca:af:83:1d:15:f0:48:be:11:1c:d4:
4d:68:6f:38:91:47:09:9f:e1:b6:1e:8f:8e:37:fa:
a9:ac:e7:39:8b:f8:22:b1:a9:96:e9:d7:72:e7:e2:
8f:05:17:a3:2b:84:25:55:2e:14:a0:9e:50:42:62:
e0:3d:60:a7:12:f4:9e:54:ce:c4:84:8c:31:4f:db:
8b:63:3e:80:2f:44:92:62:90:d0:93:c1:1c:65:a0:
65:08:73:8a:66:21:80:7e:dc:4e:4e:16:b7:1e:cf:
ad:7a:c3:49:fd:73:e2:55:f3:62:f2:0b:4c:9a:dd:
c5:17:7f:71:c5:d7:0e:b3:bf:5f:fd:eb:5a:05:fc:
a6:b5:68:ce:0f:b4:56:53:ba:47:f9:ea:97:0e:df:
c8:fa:ce:a3:86:28:ad:af:a3:4a:e7:79:38:4c:55:
6c:02:ee:58:82:db:8a:78:e7:4b:85:8f:88:0b:14:
fa:7f:94:17:e3:8b:5f:7c:16:7c:d8:15:0f:82:06:
f5:8e:96:8d:4c:42:81:67:5b:ae:d9:bc:ee:c9:e0:
22:42:67:44:a0:44:82:a8:29:40:51:7c:df:84:db:
b3:af:00:72:c5:05:87:3e:8e:57:7d:ae:62:d6:bf:
3d:39:2c:82:e4:02:1a:70:6f:bb:a8:68:79:16:81:
e2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BE:D0:2B:5D:9E:2A:F7:FD:A3:F7:1B:63:9D:8C:6B:50:19:E5:03
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e5:bf:d6:71:c9:42:f4:61:3f:00:a2:3f:d5:cb:de:1e:dc:
91:8b:43:b1:38:3f:a8:fb:2b:21:85:06:d8:10:b0:70:80:f2:
df:e2:43:30:1e:7e:a7:fa:0f:44:2b:f1:b4:cd:ee:84:98:23:
63:23:2a:37:d6:97:55:f5:72:7b:61:d3:54:19:04:bb:2d:ac:
e1:18:24:db:4e:a4:95:3a:2a:a2:89:f8:2a:07:a0:ec:f3:e0:
46:e7:26:65:0d:68:82:0a:68:9d:0a:cb:22:86:d7:9d:07:90:
58:3f:5d:7c:b8:e3:91:0a:ef:d5:73:8f:53:19:be:60:29:f1:
b6:eb:f2:de:cf:24:4c:db:be:4c:57:bc:7e:08:34:95:85:65:
4d:8f:c1:ef:07:22:15:e2:9e:31:bc:6d:5b:f9:05:a8:d7:6e:
22:7b:f4:74:f7:db:72:83:3e:2f:92:6b:03:69:a1:12:26:66:
b9:41:29:55:28:9b:8c:92:97:8a:ba:0b:8c:e0:65:ea:cc:12:
f3:bb:66:86:88:02:46:1b:a9:54:dc:46:1f:fb:ff:fd:9b:ae:
d6:73:2d:29:c0:d6:62:2e:e6:39:0c:84:d2:0c:c5:70:64:7f:
8f:0c:ae:bb:0a:f2:41:4a:3b:06:8e:96:6b:b9:56:7a:f5:57:
9e:e8:9f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:10 2026 by rpki-client