Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: KPnTClov7JcmjyBYhpwdOJNOj+wJw3tuLDTp67p+PXA=
Subject key identifier: B3:12:D5:F5:52:C0:60:71:23:CE:21:95:F4:2A:65:27:E0:99:D0:5D
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 019F18D66F806C9227F6C2FAA4011D2EB21B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 1344
Signing time: Tue 30 Jun 2026 14:02:14 +0000
Manifest this update: Tue 30 Jun 2026 14:02:14 +0000
Manifest next update: Wed 01 Jul 2026 14:02:14 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: ySsDoc6Dvswc84mYdp7fjxrGha5N96eq4Kacn8Pf9AQ=)
2: 3dytCQRLOyyF8BB1A5B-6F1xVBM.roa (hash: WNCavQmenTSfXPZnZ/JnExGVfMwWPV0krWA6OaC4XXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:6f:80:6c:92:27:f6:c2:fa:a4:01:1d:2e:b2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Jun 30 14:02:14 2026 GMT
Not After : Jul 1 14:02:14 2026 GMT
Subject: CN=b312d5f552c0607123ce2195f42a6527e099d05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:d5:03:0d:6a:33:bc:5d:65:43:03:b3:1c:
82:5f:7c:30:e0:d8:c2:de:05:42:9a:ac:7f:39:45:
e0:f1:15:f7:b0:a4:67:ca:7d:92:b1:b9:63:a6:cd:
28:fd:70:c0:b9:86:c9:43:44:da:0f:e0:bc:e0:6e:
1d:6e:ef:99:15:fd:6d:85:a1:62:b7:ff:e3:eb:1d:
79:93:27:a8:8c:d6:81:8b:bc:a0:42:d1:0e:a0:db:
83:bc:98:62:14:a7:13:18:89:84:ee:af:3e:22:b9:
95:14:e6:df:4f:de:ac:6e:be:54:d0:01:01:7a:d9:
5a:eb:64:52:36:f0:fd:e4:90:17:1f:fd:54:05:c7:
47:7e:c5:4b:42:36:c3:fb:32:44:80:19:ff:06:b7:
49:a8:2d:55:20:b4:0c:72:52:df:ff:6b:74:ae:c5:
80:fc:40:91:5d:3e:7b:be:e2:34:f2:55:00:da:b7:
0e:b5:6d:f2:fa:50:1d:88:80:c0:98:9c:d3:2f:ad:
34:85:0a:33:2e:2a:b5:29:3f:ad:90:80:3c:a8:8c:
c0:91:1f:59:70:ac:d0:ae:bf:b2:ba:b5:95:30:23:
8f:97:6d:4a:a4:ea:33:6c:d6:04:a5:7d:0d:85:17:
d6:6d:c2:4b:7a:d1:94:34:ef:5c:1e:9a:a1:aa:db:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:12:D5:F5:52:C0:60:71:23:CE:21:95:F4:2A:65:27:E0:99:D0:5D
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:19:d2:74:11:25:34:4d:6a:61:1a:17:10:0c:f6:35:6d:ae:
72:a7:5e:03:f4:08:17:51:06:ff:8d:43:03:53:f5:22:17:e0:
01:2b:77:0a:f2:09:37:bd:5c:e1:c2:83:c7:19:0d:c7:5d:78:
68:d0:e7:1e:40:3b:ec:ac:09:7b:02:15:77:e8:b1:6c:44:8d:
7f:0f:21:74:f3:13:14:99:93:4b:54:c2:90:bf:ac:ab:17:93:
1d:26:63:06:6a:d9:e3:7e:8e:41:2c:7f:ec:3c:54:08:b5:ce:
d2:98:b1:17:7f:5f:d9:41:b7:3c:9e:ca:90:04:c2:04:60:3f:
c3:ca:5f:99:f1:1b:a0:a2:1b:60:3a:67:60:f6:c0:cb:13:7b:
76:97:21:5c:89:91:8a:be:b7:45:dc:e3:bd:7f:73:3e:80:9d:
a0:7a:53:8c:eb:c7:f3:15:e3:dc:9a:5e:b8:f0:cd:37:46:da:
13:3b:86:23:51:e0:6b:e8:07:23:4b:0c:36:5a:0b:f3:73:c2:
40:f4:cf:30:99:34:87:00:4a:31:7c:15:07:5e:c1:fb:d9:50:
70:01:b6:b5:91:c3:cd:d9:e8:7a:69:e9:1f:c3:ab:b9:0b:2b:
c8:85:26:d9:ed:be:52:e0:b9:bd:67:2e:9e:69:02:81:77:77:
1b:c6:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:20:00 2026 by rpki-client