Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: cWT2Lc1F1YTUvFuPa0zlOI5Cfvfv1cnGQz72ZXoTjac=
Subject key identifier: AE:24:08:81:A1:FA:B3:2B:B8:2D:2D:34:8E:F4:66:09:37:9A:94:0A
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 019F18D63298FA005A1095AE7FC7C5CCB72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 18C9
Signing time: Tue 30 Jun 2026 14:01:58 +0000
Manifest this update: Tue 30 Jun 2026 14:01:58 +0000
Manifest next update: Wed 01 Jul 2026 14:01:58 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: dUTxhjhC8g+LYDeVCOMGGZBzoXKm295CQOpg1BGptcw=)
2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:32:98:fa:00:5a:10:95:ae:7f:c7:c5:cc:b7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Jun 30 14:01:58 2026 GMT
Not After : Jul 1 14:01:58 2026 GMT
Subject: CN=ae240881a1fab32bb82d2d348ef46609379a940a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:c0:fa:a6:c0:ec:fc:80:75:b4:2a:b2:e0:
d8:26:37:6c:75:ac:23:86:dc:13:b6:1d:70:c2:b4:
b0:54:ed:7e:10:df:57:ae:9b:4d:80:bb:e0:fb:c1:
da:e7:c3:78:b0:f9:7e:c0:43:fc:98:b1:21:fe:be:
e8:1e:8f:49:59:fc:c7:20:ed:d6:e6:be:c1:b6:95:
d0:81:2b:f5:40:db:a4:a6:e1:df:82:1e:94:27:a2:
d5:65:30:12:10:ff:79:aa:c7:58:04:2a:33:7d:fb:
c4:6e:35:90:ab:2c:d6:3c:f7:79:99:35:a7:5a:66:
51:90:28:fb:69:1c:ce:a8:1f:4f:bd:96:8b:08:c9:
db:73:1c:53:b7:da:e7:f6:31:32:7b:09:d5:41:39:
df:ee:4b:60:ac:a3:b7:55:ce:0e:f6:2d:fe:41:8f:
6a:85:a9:d8:07:4f:7a:81:d0:e7:68:01:e4:a3:cc:
d2:f8:fb:f8:72:9d:e1:9e:64:44:77:12:5e:63:b7:
aa:66:fd:fd:be:f6:7b:17:01:ab:d9:ee:31:ef:12:
e0:f3:ba:cd:67:2e:87:91:3c:41:58:ec:f3:9e:cb:
f2:d0:2c:c5:61:02:5f:2d:a3:ba:74:81:53:ea:0d:
77:87:e4:58:b0:eb:10:6d:d5:66:cf:4c:d4:f4:ee:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:24:08:81:A1:FA:B3:2B:B8:2D:2D:34:8E:F4:66:09:37:9A:94:0A
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3c:f2:f9:35:c9:c4:ea:ac:ec:29:88:df:00:0e:c3:9f:e3:
b9:86:e5:5a:56:84:fc:bb:8c:7e:98:d0:d1:38:0b:11:99:66:
83:d6:a4:59:15:93:a4:ff:eb:92:6a:4f:19:09:06:20:ef:89:
fc:14:9c:f0:c6:69:34:28:e4:db:c0:e9:54:23:61:81:07:d6:
fb:ee:49:ce:40:73:8b:da:28:0e:0d:a8:33:0c:47:5d:15:ff:
26:eb:b0:af:cb:62:fa:58:5e:34:f6:01:5c:af:89:b6:b3:a7:
2f:c9:a2:95:ad:bf:78:41:8b:a2:49:8b:bd:73:68:43:01:9f:
b9:47:09:98:75:d7:38:8b:61:a5:d6:7a:7a:73:cf:88:ec:a9:
e4:6d:cc:f9:bd:4b:29:22:cc:fa:97:97:14:3d:5a:ec:d3:88:
d8:bf:98:7f:e8:e7:91:c8:98:76:88:f0:c9:91:d3:40:ff:8a:
d6:b5:7e:08:0f:91:f4:28:1f:0f:da:aa:66:28:2d:e7:ce:3b:
56:16:3a:ff:96:5a:49:1d:f0:cc:c8:0b:29:b3:6a:b6:c6:10:
df:87:1f:97:61:a7:9a:b3:02:83:18:c3:41:22:50:29:53:9b:
ad:d6:ef:c8:93:ba:f8:f8:28:e1:8d:12:24:11:bd:d7:58:96:
29:94:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:16:52 2026 by rpki-client