Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: Fs815M6pAFj7qrLNNbyAWRmX2JeFEdM2NnJhjK1xJbU=
Subject key identifier: 6F:8A:C9:89:60:C9:19:EB:05:03:C6:E8:D9:E1:60:14:63:DE:7E:6F
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 019F190CEE13F6741124A65426E38875875D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 15:01:45 +0000
Manifest this update: Tue 30 Jun 2026 15:01:45 +0000
Manifest next update: Wed 01 Jul 2026 15:01:45 +0000
Files and hashes: 1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: ORcsDGygKD3LCDTy70fidD5OKCxZY9USqVOfSW2dQ3E=)
2: q2os6H-xLvk9UkRKuFy2kFXrSyk.roa (hash: PRxebSo24ZxSHOEyZVv7K175GUR0r91e11qM7IDM3bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:ee:13:f6:74:11:24:a6:54:26:e3:88:75:87:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Jun 30 15:01:45 2026 GMT
Not After : Jul 1 15:01:45 2026 GMT
Subject: CN=6f8ac98960c919eb0503c6e8d9e1601463de7e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:34:7a:6b:d5:6b:26:8b:fa:f9:47:c5:5f:
25:2d:5a:3d:75:a6:fa:20:6a:96:f0:6e:3f:c7:15:
c5:e4:aa:7e:a4:5f:c9:58:b8:f8:bb:a6:a3:e3:a3:
00:e5:7e:62:8c:51:e6:4a:97:be:1e:91:5b:fa:9c:
ee:b4:e3:1a:a4:d3:de:14:82:6d:7a:80:8b:4f:58:
c0:63:51:9b:f5:68:dd:1b:60:11:5f:97:8e:b9:6b:
5c:44:13:55:c6:a2:d1:37:6e:79:21:9d:77:60:48:
5e:3c:d3:57:09:78:50:03:96:0a:88:ba:fc:9f:4f:
ad:1e:c0:e2:b9:54:57:0e:e5:13:82:d6:d4:ab:cb:
1b:31:ad:ea:ae:54:cd:9e:dd:8e:ac:90:d5:0b:94:
f4:a8:28:76:94:90:1e:7b:18:4d:cd:ae:5c:a0:56:
f8:f7:57:f5:85:63:fd:bb:6f:e6:82:67:f4:ea:f1:
e6:d8:c4:b4:d1:34:7c:77:e1:27:68:21:a6:ed:7a:
5c:3c:72:ff:da:13:90:60:61:1e:ff:22:a5:df:44:
f9:94:66:df:28:a4:75:00:ec:27:ba:c9:27:13:80:
0c:cf:f8:31:65:ad:01:61:7a:cb:bf:67:b9:32:3b:
0c:fd:fd:47:83:e8:30:02:c0:c8:4f:df:d1:31:7a:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8A:C9:89:60:C9:19:EB:05:03:C6:E8:D9:E1:60:14:63:DE:7E:6F
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9d:1b:e7:f0:e5:01:de:1d:c1:86:4c:21:f5:64:b7:2e:31:
fc:34:ef:4a:fb:43:8a:8a:f7:9e:8b:e0:82:75:fa:a9:d6:19:
52:ef:13:cd:3e:e1:0c:c1:44:4b:76:19:27:f4:df:93:de:a3:
95:87:2e:29:ac:1e:43:48:23:bc:cc:cf:4e:c6:a6:58:62:98:
b7:e8:02:a6:f5:63:8b:a3:d0:c6:bb:d3:8b:22:ff:35:a9:29:
a5:61:43:88:2b:d8:18:fa:98:0a:ad:b5:75:fd:8f:b7:76:ae:
e4:56:ea:4e:3c:d5:79:59:54:2b:6b:77:40:65:a8:8a:24:39:
a2:4c:47:b8:5b:b6:82:ab:48:63:1a:e7:36:f3:a9:77:06:f6:
2d:ca:13:61:0d:78:68:52:bc:cf:bc:b7:b2:7a:09:ad:5b:a9:
a5:f5:0a:40:64:31:27:21:f9:49:e0:24:b1:f4:ab:e6:92:07:
da:f9:22:bd:27:2c:cd:83:a9:16:d9:82:12:83:30:69:3f:47:
55:ec:d1:c4:01:c9:59:57:d4:ff:7c:61:24:b1:8e:c3:49:d4:
38:49:77:eb:18:a3:7e:fb:79:41:3f:18:c5:1d:53:d6:a5:0a:
67:0c:40:66:73:cb:31:66:87:06:5b:75:79:14:19:de:34:cd:
e8:ac:25:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:18 2026 by rpki-client