Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
File: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft (raw, json)
Hash identifier: z2sCSIP4GWYWCbGV5OWszv8xcHy/kolq+0uVzYYh5Pk=
Subject key identifier: FE:0D:0B:2B:CE:99:5E:D8:93:69:CB:96:88:60:03:04:88:93:15:F4
Authority key identifier: DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
Certificate issuer: /CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Certificate serial: 019F1AC5325AE4553FED6E4D5D98F24E16CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
Manifest number: 0176
Signing time: Tue 30 Jun 2026 23:02:38 +0000
Manifest this update: Tue 30 Jun 2026 23:02:38 +0000
Manifest next update: Wed 01 Jul 2026 23:02:38 +0000
Files and hashes: 1: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl (hash: JAbn0Xs6M6OQVsyXJclyr04qq+WXCYtyaUQyK/q32Q8=)
2: Eczgp2EFr8e_XSlXUgSdJTrIAak.roa (hash: FsSSezhMi82MyPxKqmo1dtY5pOhu7CRckdx69CzRJss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:c5:32:5a:e4:55:3f:ed:6e:4d:5d:98:f2:4e:16:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Validity
Not Before: Jun 30 23:02:38 2026 GMT
Not After : Jul 1 23:02:38 2026 GMT
Subject: CN=fe0d0b2bce995ed89369cb9688600304889315f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:c8:05:47:6a:18:a6:65:6a:63:de:c6:94:
06:c7:71:0c:58:3c:c4:eb:d4:cf:f2:fb:a7:1e:3e:
b8:c0:86:0f:b8:17:72:ad:be:4e:ce:17:b8:a3:09:
a3:f8:97:4e:65:6a:23:c9:11:38:63:5a:ae:5e:1a:
35:82:8c:90:c2:cb:2d:dc:ee:50:d9:da:b4:e8:ee:
15:03:41:f4:54:11:6b:29:2c:f3:72:3b:c6:ca:97:
ed:1e:56:f7:dd:35:42:ce:7e:04:8b:de:64:7f:07:
3b:31:ed:86:40:ca:cc:97:ba:6e:43:39:75:61:5c:
87:00:09:4c:9f:5e:68:33:5f:f4:34:ef:d7:cc:b5:
c6:93:8b:18:35:07:5c:f9:9f:3c:75:7b:89:48:c3:
fc:0a:18:e4:c5:88:76:85:42:46:a4:f5:9c:05:e7:
c8:8e:7e:08:b0:c9:a0:84:d4:8e:0f:c4:f1:bc:c7:
cb:50:37:c7:ce:5e:f1:5d:94:7f:a2:21:a8:1d:e4:
fb:54:2a:28:76:6d:07:d7:57:e8:9c:50:da:20:60:
ed:32:7c:e9:61:42:d4:b8:c6:00:e6:52:1b:1f:11:
c5:73:ab:5d:21:8f:e1:b1:2c:45:47:5c:89:ff:68:
6f:ad:1b:d6:ef:32:09:94:22:72:98:99:cc:54:4f:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0D:0B:2B:CE:99:5E:D8:93:69:CB:96:88:60:03:04:88:93:15:F4
X509v3 Authority Key Identifier:
keyid:DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1f:aa:fb:a6:5b:23:b7:c6:08:bf:db:da:f0:ea:b2:95:2d:
b9:ac:b7:bb:a3:0c:7d:d0:c5:91:90:f9:d7:3b:d0:1f:ca:d4:
78:b7:02:73:8f:24:8f:5c:ef:e4:b5:ce:04:c1:01:79:ba:42:
11:35:4b:24:10:6d:6e:0e:cf:9c:fc:33:c7:89:75:b8:d3:78:
f2:ca:e1:66:d6:10:15:fd:63:1b:32:3a:48:53:25:a1:54:e6:
9b:20:28:f7:2e:5e:7a:bd:a2:88:6a:4a:5b:7a:6c:26:d1:33:
1e:e4:a2:0c:75:aa:46:06:3e:59:4f:79:2c:48:7e:51:3c:91:
52:fb:1c:ea:f3:0c:e9:1d:cd:12:ef:5f:c4:56:d8:6d:10:54:
1f:6b:27:53:c3:41:27:4e:30:38:fb:02:e3:31:eb:6e:ce:a3:
7c:88:3d:98:2d:c7:3a:8c:14:64:98:90:f1:d6:42:22:a0:48:
6b:69:77:d5:d8:56:8e:45:00:5b:23:13:05:4f:94:b4:25:05:
7b:f2:d8:b5:c3:f8:06:9d:8e:7f:9e:12:fb:5c:fd:4b:f9:4f:
6f:d5:c4:2c:41:96:7f:b2:67:89:55:30:86:b5:de:95:49:3d:
d4:93:8a:86:f4:d0:1e:83:74:89:c4:cd:05:ec:a0:6c:a8:8a:
01:39:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:26:11 2026 by rpki-client