Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: eh+KMacyi3/lN4uNwFKptg6qQbIbtYNxSIrBMX5+ES4=
Subject key identifier: A1:D8:2A:83:9E:BE:AA:D6:D7:42:4E:FA:DB:B6:80:AC:3B:F7:0D:78
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 019F189E38ABB57BA619B5C4A1D02EE28A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 1016
Signing time: Tue 30 Jun 2026 13:00:50 +0000
Manifest this update: Tue 30 Jun 2026 13:00:50 +0000
Manifest next update: Wed 01 Jul 2026 13:00:50 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: k/ielIjLO1wgqtHlD/KXkY6pp5ZKWwFaqY2xBCYPlq8=)
2: ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa (hash: lyxkrW/UqVG023E4rkiQmolfszYoshoVE4T/qdnjtKM=)
3: Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa (hash: Dq+bYU+W7cSYjUMeWCs5QEHpiuPHvRD8GOeB0Afw45M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:38:ab:b5:7b:a6:19:b5:c4:a1:d0:2e:e2:8a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Jun 30 13:00:50 2026 GMT
Not After : Jul 1 13:00:50 2026 GMT
Subject: CN=a1d82a839ebeaad6d7424efadbb680ac3bf70d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:cc:4b:8d:4f:1b:47:8d:9b:7b:42:cc:d8:
eb:0a:45:97:d7:a2:82:9d:3a:20:a6:46:cb:f0:fa:
e5:ee:4c:b8:0f:2e:f1:ef:0d:c4:70:66:a3:0d:d3:
46:e6:3d:07:d0:15:8d:b6:6a:37:c1:1e:c2:49:a8:
dc:7b:e5:a5:d5:c1:5f:3b:dc:74:06:b5:ba:61:a6:
7a:26:ba:09:d9:f2:53:bb:97:d3:d6:df:f9:5e:68:
30:9b:eb:3e:3d:fc:2b:12:84:bc:ae:cf:9c:43:32:
2f:ff:27:43:63:b8:b5:60:11:af:59:27:aa:a2:bc:
2a:48:6f:da:75:b2:7e:0a:50:3b:56:a5:76:b3:94:
58:05:05:2d:4d:ab:a5:94:1b:4e:c8:da:09:0e:8e:
e1:f1:b9:39:0e:4f:a1:f6:8a:24:e6:6f:d0:49:2a:
40:88:fb:a5:95:78:0f:09:4b:6b:11:e3:3a:68:bd:
0e:c7:75:56:dc:76:c9:da:9a:3d:07:cc:e6:22:d5:
ea:a6:1e:5a:c0:9e:aa:99:81:3e:dd:de:d9:39:01:
31:d1:83:21:74:53:e4:89:cf:6d:36:db:d0:4d:d5:
93:a0:e1:32:89:43:df:a8:a7:ad:56:94:28:4e:4d:
63:59:1f:8c:9f:46:6a:f9:f9:61:7c:c3:03:0d:c2:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D8:2A:83:9E:BE:AA:D6:D7:42:4E:FA:DB:B6:80:AC:3B:F7:0D:78
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cc:f9:50:7c:eb:d0:a5:28:34:10:5d:cc:ea:4b:7a:3d:90:
5c:5f:b2:6c:e0:8b:cc:8d:88:3c:78:53:b0:16:47:9e:81:02:
b3:2b:e3:4b:4b:c5:9a:45:a0:a9:ba:84:15:a5:8b:8b:65:f8:
52:d0:00:b9:bb:a5:17:99:f5:f6:d2:04:3a:dc:3b:33:e1:49:
39:93:05:80:66:0c:1c:d7:a0:f8:c4:b0:f7:04:0d:50:46:12:
14:bc:9b:c3:c7:b9:ac:8f:06:2c:6a:40:72:3b:79:65:9c:8a:
e6:9d:ff:e2:5b:a5:46:86:df:d5:ae:cc:4b:04:e4:4d:73:b2:
4a:b3:81:70:53:0f:33:a8:2e:06:6a:dc:f4:65:71:a0:8a:ab:
b1:9e:20:3c:ca:1a:4b:f6:90:4c:24:5e:3a:0c:5d:1f:e1:29:
c6:d8:e2:bf:f7:ab:dd:f2:19:f8:23:e4:5e:78:26:53:84:91:
9c:81:2e:48:42:d9:45:30:c2:1a:af:d0:73:f3:8a:a5:2d:2a:
20:9b:3e:4e:42:7d:7e:f4:01:a5:1e:c7:d5:f3:71:f0:ce:12:
40:4b:53:77:7e:06:2f:6a:a3:28:fa:b3:8f:ad:25:25:bb:1b:
63:42:cf:2f:13:1f:b3:6c:81:bb:b0:ec:d7:02:27:06:50:42:
64:13:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:06 2026 by rpki-client