
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier: hOYv9dW1HDfuFf4EXCd9HVvfcwadNArXRRbciPIH3R8=
Subject key identifier: 67:8C:C0:05:09:1B:38:83:46:6A:42:B6:26:A6:7E:FC:DB:51:FC:15
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 019F12655159C2E0979C16558416B5B4FED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 08:00:57 +0000
Manifest this update: Mon 29 Jun 2026 08:00:57 +0000
Manifest next update: Tue 30 Jun 2026 08:00:57 +0000
Files and hashes: 1: 7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa (hash: +MmvrOl97e3DA2vv+SK8o06jDjKb06tuUhtauO+J0DA=)
2: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: 8Hh/oEORlu41ZNxZ/Uuime5PdwjqBl3st0hKvqA6rzs=)
3: e73gsHaWTejzTyfXW5UdzDUTXQs.roa (hash: 9j92RNoJBabv7foYLIaPsDGRKKARMwRj5sIk41buBpE=)
4: nExWLodTy66s6nOpw-IuXiduwOc.roa (hash: xQ9/3XOQzACu7Vie8ibe6dTF70DY7qx3P6HKsR8oJRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:51:59:c2:e0:97:9c:16:55:84:16:b5:b4:fe:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Jun 29 08:00:57 2026 GMT
Not After : Jun 30 08:00:57 2026 GMT
Subject: CN=678cc005091b3883466a42b626a67efcdb51fc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:fe:c1:50:7c:a3:89:0a:12:43:95:03:76:
3c:38:ea:80:b9:cc:f9:22:3c:af:fd:ff:29:f5:35:
b9:1e:c5:99:76:70:3e:ef:ec:4e:68:2b:c1:8c:22:
87:9c:87:bb:ae:48:94:f1:40:e6:4d:99:79:2e:23:
46:f6:71:d5:db:3a:48:96:4d:6a:5a:2c:63:09:5d:
c6:55:88:5c:f8:33:2f:24:53:55:e1:f7:5f:d1:a0:
ef:45:f3:60:f8:fb:2d:05:32:0c:bc:d1:a3:0f:d1:
21:16:41:34:9c:7b:e8:8b:d9:30:f9:99:c7:17:8d:
ee:5c:b1:1c:3d:8f:4e:15:5a:60:09:3d:e1:06:53:
5d:10:e9:bc:4a:5c:17:3c:f0:e5:c1:5d:84:88:19:
c9:3b:01:ac:a2:43:31:be:eb:f3:01:9f:f0:3f:8c:
23:c3:42:d1:ea:ea:69:1f:cc:04:dd:57:51:5d:4c:
00:08:38:02:c3:c4:83:53:4b:8e:ba:6f:6e:ab:9e:
b9:24:f1:25:e8:fe:36:d8:39:97:0e:49:13:54:3a:
47:fb:4d:ed:90:82:69:27:8c:59:b5:f2:a5:46:cd:
78:60:ed:2f:68:8d:90:7f:9b:90:bc:a5:9a:40:fa:
c7:d0:cc:e8:08:f7:bc:67:ba:c0:8b:a2:78:52:ce:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8C:C0:05:09:1B:38:83:46:6A:42:B6:26:A6:7E:FC:DB:51:FC:15
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b3:a7:e1:c3:1d:f8:c7:73:fd:ea:ac:d6:5f:86:35:35:30:
c5:e0:fc:3d:26:df:00:78:54:20:53:a1:6b:ab:f9:cf:77:55:
c4:fc:f0:20:d8:92:c3:e4:40:b9:6b:72:ff:7c:c4:03:4d:43:
70:a3:1f:0c:dc:ef:ea:81:5d:c4:3d:08:53:b0:3e:b1:35:30:
28:7c:bb:6f:c0:df:c9:e4:ef:95:c7:7a:4d:f6:80:6f:95:8f:
56:f4:f8:e7:17:66:fb:b3:6b:5e:c0:60:73:2f:d7:4a:05:6e:
43:2e:d8:c6:ac:4a:96:41:51:68:26:2c:84:46:f9:d6:0c:3e:
0c:67:2d:34:c5:fb:7e:12:07:07:d1:a1:3d:ac:63:20:4e:f7:
81:42:21:d5:c3:4b:52:d1:ad:ec:8d:6c:b3:90:ca:4b:11:f3:
10:1d:97:60:05:27:95:80:6c:ad:ee:48:f2:f2:c4:2e:a7:d7:
57:d5:56:66:ca:e4:1a:66:92:84:16:1f:0f:27:09:33:3d:85:
ac:06:99:51:d1:5c:5a:b3:4e:e7:b4:36:92:89:34:ef:b3:3c:
f8:eb:7b:ab:62:ec:3f:58:74:1a:79:51:e1:75:a6:f9:14:c4:
41:0f:41:a2:0e:87:82:32:39:b4:09:30:7d:fd:f4:23:47:70:
d0:7e:a7:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SZVFZwuCXnBZVhBa1tP7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGRlM2FkMThkZDBhZTE0MzYyZDBlODRkZWMwNDNkMzc5
Y2MyNDIwHhcNMjYwNjI5MDgwMDU3WhcNMjYwNjMwMDgwMDU3WjAzMTEwLwYDVQQD
Eyg2NzhjYzAwNTA5MWIzODgzNDY2YTQyYjYyNmE2N2VmY2RiNTFmYzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJL+wVB8o4kKEkOVA3Y8OOqAucz5
Ijyv/f8p9TW5HsWZdnA+7+xOaCvBjCKHnIe7rkiU8UDmTZl5LiNG9nHV2zpIlk1q
WixjCV3GVYhc+DMvJFNV4fdf0aDvRfNg+PstBTIMvNGjD9EhFkE0nHvoi9kw+ZnH
F43uXLEcPY9OFVpgCT3hBlNdEOm8SlwXPPDlwV2EiBnJOwGsokMxvuvzAZ/wP4wj
w0LR6uppH8wE3VdRXUwACDgCw8SDU0uOum9uq565JPEl6P422DmXDkkTVDpH+03t
kIJpJ4xZtfKlRs14YO0vaI2Qf5uQvKWaQPrH0MzoCPe8Z7rAi6J4Us67kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeMwAUJGziDRmpCtiamfvzbUfwVMB8GA1UdIwQY
MBaAFCCN460Y3QrhQ2LQ6E3sBD03nMJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjIt
YmRmNmU0Mjk0YzJlLzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjItYmRmNmU0Mjk0YzJl
LzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrOn4cMd
+Mdz/eqs1l+GNTUwxeD8PSbfAHhUIFOha6v5z3dVxPzwINiSw+RAuWty/3zEA01D
cKMfDNzv6oFdxD0IU7A+sTUwKHy7b8DfyeTvlcd6TfaAb5WPVvT45xdm+7NrXsBg
cy/XSgVuQy7YxqxKlkFRaCYshEb51gw+DGctNMX7fhIHB9GhPaxjIE73gUIh1cNL
UtGt7I1ss5DKSxHzEB2XYAUnlYBsre5I8vLELqfXV9VWZsrkGmaShBYfDycJMz2F
rAaZUdFcWrNO57Q2kok077M8+Ot7q2LsP1h0GnlR4XWm+RTEQQ9Bog6HgjI5tAkw
ff30I0dw0H6npA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:42:37 2026 by rpki-client