Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
File: 3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json)
Hash identifier: XW5bUDyHStMs1MwkH6N3p1lCiqMkSQMIuStie8sf6aA=
Subject key identifier: 3F:8D:83:F9:62:8C:86:7C:44:76:95:76:D8:76:23:08:6C:A9:58:28
Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
Certificate issuer: /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Certificate serial: 019EB620F41FDD87D33E7A71C338E3B1D224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
Manifest number: 041B
Signing time: Thu 11 Jun 2026 10:01:13 +0000
Manifest this update: Thu 11 Jun 2026 10:01:13 +0000
Manifest next update: Fri 12 Jun 2026 10:01:13 +0000
Files and hashes: 1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: EJv3UURfL/lM96DiCE4HKJp/s8EtGwE7TzdPwNYNe9k=)
2: j9kxk_tAwUgeNl7TqWWToAuo7-I.roa (hash: zHNTjJflclZYXilnm9iiED1a7nYrKcFrqoiJZmNUrRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:f4:1f:dd:87:d3:3e:7a:71:c3:38:e3:b1:d2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Validity
Not Before: Jun 11 10:01:13 2026 GMT
Not After : Jun 12 10:01:13 2026 GMT
Subject: CN=3f8d83f9628c867c44769576d87623086ca95828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:dd:98:37:53:5f:9d:c2:d3:ab:7a:e1:be:
a0:43:e2:90:c3:80:b0:85:7f:e6:cf:df:1e:89:ce:
9e:7d:cd:ae:a9:e1:cc:87:a3:3c:94:9d:70:48:a6:
87:9f:b7:b6:a7:cf:63:68:a2:6a:fb:ab:48:ba:8c:
15:c4:f1:1f:48:a8:a6:c7:1e:6b:fe:7f:88:20:96:
c4:49:68:3c:87:0e:39:08:25:e5:3a:07:1d:ea:90:
73:f1:a8:27:0b:fc:43:4e:89:fa:d4:81:1f:5d:3d:
38:67:db:f9:ee:df:05:91:f3:40:55:52:d5:bf:0a:
26:13:1d:1d:3d:28:68:7d:50:f3:b9:88:ba:df:15:
25:94:5d:94:85:09:4a:c3:87:d5:8d:9b:55:25:b7:
eb:a4:65:9d:45:1f:cd:69:d7:c2:5a:e8:35:91:3e:
f1:54:e0:7c:96:8c:69:8d:b1:9b:25:f4:0d:62:21:
1e:2b:dd:65:3b:cf:d1:77:99:8d:77:0d:f4:6c:d3:
64:d8:01:72:b9:77:26:de:9d:c6:b7:9d:7a:d4:22:
56:a2:fd:11:90:e8:36:89:44:88:97:3e:9d:ba:ad:
6f:6c:2f:b6:41:23:8f:a3:41:9b:79:ca:7a:6d:ae:
4a:fc:f2:4a:89:af:98:9b:0c:2c:f8:0f:52:ee:33:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:83:F9:62:8C:86:7C:44:76:95:76:D8:76:23:08:6C:A9:58:28
X509v3 Authority Key Identifier:
keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4a:30:d5:26:3c:95:a6:72:27:4a:25:3b:ab:14:b6:6b:e4:
3e:d2:54:fc:39:ef:c4:56:6d:fc:78:81:ff:38:24:d2:29:1f:
8c:42:77:11:68:e2:fb:3c:b3:e3:91:bc:bf:7c:54:02:fc:c8:
8b:99:a3:19:3c:02:aa:60:97:d7:d6:b2:d6:21:8a:72:aa:90:
aa:a5:c1:a5:8a:64:10:5d:11:3b:1f:21:59:38:3b:9b:e4:2a:
ad:c9:f2:3d:0b:e1:fd:f0:b8:82:99:77:c4:9d:2a:81:cc:17:
53:c5:d1:ba:27:3c:05:e8:90:8b:26:84:6a:75:12:a7:7e:4a:
76:29:af:fc:c2:75:1f:6e:3b:38:f8:0e:e4:8a:4f:24:fe:c8:
11:e2:62:65:8d:c9:91:ba:3b:30:d4:f1:08:72:47:65:00:3d:
ac:37:6b:30:56:6f:15:01:a4:20:cb:a9:42:c9:30:c2:b1:c1:
60:2f:a1:c7:32:53:7b:2d:ca:00:83:ed:44:87:b5:70:db:c2:
24:89:28:4d:82:f4:ad:dc:ba:da:93:26:88:ef:00:88:de:a0:
3c:ec:da:bc:7b:f0:f9:5b:0f:47:75:62:67:89:eb:80:47:33:
9a:3b:f0:42:4c:86:aa:b2:82:55:19:3b:b1:76:4e:09:20:14:
a4:62:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:23 2026 by rpki-client