Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: qD4G1UUFpdouC0HxXZOxH4HvS3Xgxs0u015bSaffGS8=
Subject key identifier: 96:12:3D:64:63:FF:8B:A2:F1:0E:51:F5:52:B8:DD:DC:3F:3F:3D:09
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 019F186814A0BA02CA279E7FC520595BB017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 12:01:41 +0000
Manifest this update: Tue 30 Jun 2026 12:01:41 +0000
Manifest next update: Wed 01 Jul 2026 12:01:41 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: ydAdhkY29WVc5k6zKTScIrnhkqABl+J8aONVaYbX+Ds=)
2: KNINNJg3cCwRIkadz_iFDjzCAZo.roa (hash: uyBgZTWuxKjfgaFUXeyVL4F1AHNOmaLe474fWdCTqys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:68:14:a0:ba:02:ca:27:9e:7f:c5:20:59:5b:b0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Jun 30 12:01:41 2026 GMT
Not After : Jul 1 12:01:41 2026 GMT
Subject: CN=96123d6463ff8ba2f10e51f552b8dddc3f3f3d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:43:50:78:ce:88:af:65:a9:d7:cd:7a:71:
6d:56:5e:37:29:cc:65:a5:12:6b:04:22:c0:d4:95:
43:a6:8e:06:11:3d:a9:83:25:1d:b1:70:e7:66:9b:
a5:b9:44:c0:01:e4:08:db:e0:e4:fb:2a:97:5c:c3:
6a:e0:47:e5:48:77:f6:2e:c3:34:1a:8c:2d:51:e3:
97:a5:39:f1:07:38:3c:cd:7e:9c:a6:8b:eb:87:dc:
21:e9:50:ec:77:eb:f0:5c:b8:cb:56:2b:ce:71:a3:
7a:ae:9a:4f:47:98:67:24:3d:0a:46:b8:04:3d:6c:
fe:37:14:9d:3b:16:ba:0c:79:ea:93:81:5e:36:e6:
6d:44:e8:41:43:e3:42:b6:82:2b:a7:1f:88:33:3f:
a4:db:0f:30:1f:fe:b9:ae:b4:53:02:b3:32:a2:43:
98:42:8d:a2:9a:a6:81:23:7e:00:15:34:f1:79:a3:
73:4f:ce:36:8a:65:44:fe:c0:41:10:49:d3:6a:4c:
90:a6:06:15:7b:26:51:12:58:de:6f:91:f5:92:e4:
a3:ea:55:70:9c:dd:7b:97:24:42:4c:fb:7d:27:79:
d5:0d:26:b2:11:1b:e0:02:6b:8a:00:18:1f:83:12:
0e:71:c1:59:d3:84:e6:8b:d2:3f:a8:b2:43:8c:ae:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:12:3D:64:63:FF:8B:A2:F1:0E:51:F5:52:B8:DD:DC:3F:3F:3D:09
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:da:df:6a:6b:9e:c4:20:81:b4:8b:22:d2:d1:99:17:ba:6e:
48:3f:38:f9:53:69:76:af:2a:b6:ca:c2:b2:67:40:71:12:38:
48:a3:78:d9:1e:24:a5:03:48:b6:58:11:1a:3b:de:8e:69:c9:
d9:97:d6:3c:6a:21:9f:62:cc:71:bf:26:4b:0c:e2:e1:b7:ac:
b6:93:ca:5c:93:02:ba:9a:04:fb:7a:1a:61:94:68:91:00:1a:
da:ef:bb:28:b5:dd:a3:d0:34:2d:ac:83:92:5d:71:05:72:19:
af:72:4b:f8:10:e6:d5:e3:85:0e:1b:de:1d:d9:19:fd:b4:2e:
a8:62:b5:c4:b4:ca:5d:6b:97:df:01:de:b5:56:ba:3b:bd:7f:
40:7e:05:15:2b:4d:0f:ef:32:b1:a1:ec:b2:86:b2:ac:99:e7:
83:50:9f:24:9f:cd:c6:55:11:7e:44:06:48:af:cd:6a:8d:bc:
c8:37:d9:92:f2:e3:27:f1:68:72:8d:e5:97:e8:ad:40:cc:02:
78:f1:67:04:f2:1c:f3:5f:f2:0e:df:eb:4f:01:44:e5:6a:b2:
1b:6f:b3:0a:69:f8:05:47:21:a8:7d:e0:1b:d9:17:e2:20:b9:
1a:19:17:88:8f:3c:03:a9:18:92:fc:94:13:7f:d6:61:e2:38:
4e:a7:5e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:44 2026 by rpki-client