Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: aJ7GrGw1BCPhCL/1lQejzLYpsUI2I/zP1hJa1pljAa8=
Subject key identifier: 06:C0:CC:9E:D9:95:1D:0E:69:F2:A1:F3:46:92:53:E6:2E:56:92:90
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 019F19438B999C6F22292521B04FE894E926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 191C
Signing time: Tue 30 Jun 2026 16:01:24 +0000
Manifest this update: Tue 30 Jun 2026 16:01:24 +0000
Manifest next update: Wed 01 Jul 2026 16:01:24 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: cry3VSpswiL3pMZBHKlidGPhCAqnUWwwPLo8FFPmWD8=)
2: gmn2k3f32tfDXu2zwYzVyGe8JSs.roa (hash: W9sjDbpYZWeZAU/ChNMb2ZUNyZYk9yxty8Xm+AfcIh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:8b:99:9c:6f:22:29:25:21:b0:4f:e8:94:e9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Jun 30 16:01:24 2026 GMT
Not After : Jul 1 16:01:24 2026 GMT
Subject: CN=06c0cc9ed9951d0e69f2a1f3469253e62e569290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:11:99:c6:37:6c:c3:94:b8:65:38:30:16:
b2:9c:40:a5:17:7e:69:f4:66:27:42:36:8c:22:1b:
c4:08:e8:4b:13:14:49:58:db:cd:51:03:7e:96:94:
83:f0:fc:02:f0:25:e9:7a:a3:74:29:48:9b:75:69:
82:6c:c9:1f:fe:f6:b7:b7:59:c8:64:35:f3:63:cc:
9e:2e:73:ed:c5:9f:d3:19:0d:ff:93:36:2e:77:92:
f2:77:1e:b3:06:84:b7:75:0b:32:eb:0e:c7:a3:02:
11:cc:39:3e:48:7e:82:28:23:23:43:15:dc:08:63:
ac:46:d6:85:26:57:b9:c8:9c:78:d0:43:e2:0f:ae:
e1:18:12:bb:0b:74:9b:d1:3a:fb:ca:d2:c7:49:e3:
29:ef:f4:a3:cb:58:cd:86:dc:f3:19:07:80:25:6c:
3f:70:fe:37:2f:e0:35:d5:ce:b3:f4:be:f7:27:4a:
ed:17:22:a4:c5:5f:ae:a9:15:fd:da:7a:86:bf:03:
04:e7:03:af:de:4d:04:db:e0:5b:3b:ba:a5:93:f0:
22:da:5c:65:12:4d:2d:da:4e:98:11:20:60:a2:32:
8c:3d:b6:51:d6:58:a7:ff:c3:c7:ab:07:a9:8a:c8:
ba:0d:ba:36:31:3e:82:b9:71:a2:8c:a3:fe:d5:d9:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C0:CC:9E:D9:95:1D:0E:69:F2:A1:F3:46:92:53:E6:2E:56:92:90
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ca:fd:f1:37:20:8f:6f:b2:4c:5d:de:8d:ef:2c:59:4f:3a:
79:0b:94:55:f5:91:cb:01:ba:9e:4a:d8:fc:56:55:e1:6f:62:
7e:ec:44:28:6c:c6:4f:4a:f6:2e:29:15:83:b9:3a:1a:b9:21:
71:6c:c7:86:aa:2f:97:f6:ca:42:c4:8d:6a:a7:a4:63:f5:ec:
94:b2:d7:63:db:b5:d5:12:b1:d2:23:2d:e6:5c:10:82:53:8f:
20:c2:92:e9:df:4a:ec:b0:5c:4b:a7:f7:d6:4d:2e:ba:36:e9:
fc:32:a4:c8:d8:26:4a:42:17:f0:72:8e:57:83:35:13:ab:ff:
d4:d4:41:74:34:bc:db:15:66:94:de:9f:8f:d3:ea:91:43:a3:
f7:87:f4:40:fd:f2:90:0f:ca:76:37:23:b6:7e:01:6a:a7:2a:
0d:08:b2:0c:88:03:c7:04:4f:5e:e8:24:73:82:50:73:17:2d:
3b:f7:49:ea:80:9b:59:f0:22:a5:1a:2f:1c:38:d6:56:23:da:
d7:2a:4c:71:6f:bc:ba:de:5b:3a:64:6d:40:7d:23:11:0d:2b:
6f:f6:b2:0a:df:85:3d:6c:26:a1:b9:1f:ad:68:f4:38:e3:b1:
4c:e0:4c:5d:89:6a:87:2f:b0:d8:ad:ac:a9:2b:ee:85:d0:17:
7f:2d:13:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:11:39 2026 by rpki-client