Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: Sl9+i8uRa07dGwEffGaQ3Oi3VXVtY7j0oEYS9oGybdk=
Subject key identifier: 75:09:75:C3:EB:5B:B3:BD:A5:31:26:FF:16:89:A2:11:29:AA:EF:A7
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 019F17F9BB110CF0AF7E95CE9CFB9946A61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 10:01:10 +0000
Manifest this update: Tue 30 Jun 2026 10:01:10 +0000
Manifest next update: Wed 01 Jul 2026 10:01:10 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: u3ljNWs3POYUFIBgcAizWSrr3nZckQe2S86ZR50xuRs=)
2: 3ostfnsnfixfxEqrfywy9eGNnT0.roa (hash: TMH3qMKKkwZR6QRgNjTjxS5fjcdU4kA+Vz+Hy9Lz73k=)
3: d2YSIWOU5vk9kBcZoNOEBYoB5d8.roa (hash: 7IimrnEh+R6l+Oc9i2fjThrQzcZAJGrkh3OgCSJFbow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:bb:11:0c:f0:af:7e:95:ce:9c:fb:99:46:a6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Jun 30 10:01:10 2026 GMT
Not After : Jul 1 10:01:10 2026 GMT
Subject: CN=750975c3eb5bb3bda53126ff1689a21129aaefa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:5a:d7:5f:ed:3e:a7:77:30:0a:e8:5e:83:
e8:04:a8:ef:99:af:d5:da:fb:d1:80:b8:85:09:0d:
78:af:ac:60:78:f0:b1:62:c9:d4:bb:fd:5b:39:48:
ac:51:a7:dd:bd:4e:56:a1:82:d4:bc:4a:53:72:ef:
33:c8:8d:33:76:d1:cc:87:7f:c8:67:c9:a1:ff:66:
d0:e3:27:c0:00:5f:6c:82:d1:bc:16:73:d0:db:41:
43:12:f7:da:e7:57:3c:d8:35:9c:4e:5d:14:0b:72:
70:95:dc:5d:7e:23:8d:41:72:ec:d5:7c:49:dc:7b:
6c:da:6f:c0:de:01:b8:43:61:5d:d3:fa:18:0b:85:
43:d5:64:fd:f2:dd:5b:3a:6c:4e:3f:6f:cf:37:97:
26:a6:38:b3:b9:07:80:4f:3c:7d:e1:51:2c:15:ff:
5d:ca:76:87:a8:86:41:19:ac:04:89:6b:84:48:df:
a9:5c:f7:88:75:3c:06:c1:81:d7:69:8e:46:95:9c:
33:a4:69:f7:3f:a2:17:93:97:94:4e:ba:ea:63:0f:
6d:64:b3:0d:f8:02:e3:2e:08:a9:70:ff:e2:10:dd:
ea:b9:b0:34:58:cb:41:a8:7c:fb:01:ef:3e:c5:28:
74:73:b4:47:b6:33:f9:75:f7:91:63:25:40:6f:39:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:09:75:C3:EB:5B:B3:BD:A5:31:26:FF:16:89:A2:11:29:AA:EF:A7
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f7:ee:d2:97:f6:f3:37:dc:5e:3e:16:1e:d8:70:bd:65:1f:
2c:ad:fe:a5:d2:ba:bf:72:68:d6:34:fa:9d:f6:5c:c7:cd:ca:
db:3e:72:0c:42:e3:7f:48:c4:e2:d8:32:9d:6b:5b:27:ef:c9:
68:e7:57:1d:54:2d:56:59:9e:64:30:3c:5d:18:0a:c0:c0:da:
4b:42:10:36:48:50:a9:44:93:9a:83:81:c3:9b:2c:79:c9:d2:
6d:a6:2c:e9:a3:2b:c2:71:06:4f:a2:02:b8:f1:c4:4f:e0:f5:
e0:b4:26:b3:b4:59:f6:9a:70:4d:d6:8b:57:60:b3:16:fa:fc:
17:ac:4a:76:3f:53:f4:73:49:9c:87:05:ee:6b:79:d9:35:96:
76:10:f9:1e:f2:65:32:bd:f0:3a:a5:ae:4c:07:ae:12:82:31:
ec:44:6c:af:c9:42:9d:76:62:ca:70:a5:08:af:36:24:34:79:
d6:c9:9e:af:5d:f5:4d:b1:df:33:ca:66:c6:62:a6:15:2a:c5:
d1:b9:d5:34:d1:df:ec:57:8e:33:1f:f2:91:58:9d:90:5f:64:
51:76:02:23:b0:d0:b9:8d:c4:16:21:67:70:b8:81:8d:a4:53:
1c:4a:36:d7:f2:88:a3:4f:6b:3b:62:73:24:dc:ce:13:b7:96:
52:c5:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:48 2026 by rpki-client