Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier: oBtRXE4uvhnF25NwwJmYvF5vewMjO0NLFrWZUF49WoU=
Subject key identifier: 3C:46:1F:4C:E7:C7:66:C4:0F:E2:35:42:3F:B6:A5:94:DF:99:1D:4B
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer: /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial: 019F190D42C8A8FDF00CF0120A25081A6FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number: 09DF
Signing time: Tue 30 Jun 2026 15:02:07 +0000
Manifest this update: Tue 30 Jun 2026 15:02:07 +0000
Manifest next update: Wed 01 Jul 2026 15:02:07 +0000
Files and hashes: 1: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: XWNVqkkh/2iBubyv/LfQ3Z0gZEkAAn+9KyhqfB4AkOU=)
2: hBIKQJotb91PfUz83IlhlDln8Os.roa (hash: FZgPmcaU95wHeFAG7MifAFsuelM+Kr14jElFrFSjrsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:42:c8:a8:fd:f0:0c:f0:12:0a:25:08:1a:6f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Validity
Not Before: Jun 30 15:02:07 2026 GMT
Not After : Jul 1 15:02:07 2026 GMT
Subject: CN=3c461f4ce7c766c40fe235423fb6a594df991d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6d:d6:f7:34:d1:f8:61:84:9a:0f:2b:10:5f:
c8:fd:ce:60:27:71:fc:d5:57:f6:18:5a:21:4f:6f:
3b:58:dd:2b:f2:67:20:85:7a:2f:8f:f8:92:d1:58:
ce:39:c2:de:bc:1b:41:c8:1c:c7:f3:c1:70:59:80:
b5:04:40:24:d5:c9:fa:87:25:38:af:93:f8:dc:a4:
d6:73:6c:de:36:2f:d5:a8:0c:4f:52:54:0b:d6:a3:
95:f0:bf:03:de:28:05:35:b2:74:1f:0b:5e:3d:b0:
86:28:27:87:4b:45:a0:c4:f4:39:e8:09:6a:e9:d9:
53:1d:d3:39:b6:4e:75:a1:d2:39:d1:d7:f1:df:78:
46:97:98:b2:8c:7e:e5:f4:b6:24:c3:f4:cb:90:a1:
e4:0e:c8:f2:b7:b1:87:7e:27:d6:02:b6:84:4b:bb:
4f:11:06:e2:5b:51:1e:41:12:0b:58:66:1f:63:71:
6e:0b:d2:71:72:e1:a2:0f:1a:0f:df:ea:55:1f:5d:
3e:3e:ee:34:da:e8:a8:bb:18:ae:9a:b9:b2:33:a2:
53:bf:e3:15:7e:8e:61:25:bd:00:96:aa:46:b7:5b:
03:6e:06:6b:48:27:2a:b1:86:52:98:a1:4a:eb:5f:
92:21:87:80:61:26:6e:37:7d:85:bf:dc:3c:4d:fe:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:46:1F:4C:E7:C7:66:C4:0F:E2:35:42:3F:B6:A5:94:DF:99:1D:4B
X509v3 Authority Key Identifier:
keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:27:5a:5e:03:6f:24:72:5a:c1:78:cd:3c:a7:b2:77:a2:f0:
54:75:5e:c5:72:9c:4b:6c:3e:e4:86:04:32:86:2a:ef:cc:6d:
89:86:f5:6a:24:0a:12:47:00:a4:7d:2b:bb:16:2e:f7:c6:e2:
34:38:59:8c:7a:fa:53:38:6a:dc:cd:22:9f:dc:38:6d:76:aa:
76:a9:0f:69:c4:be:88:70:ac:57:d3:cf:62:c4:5d:82:9f:1a:
b9:27:ce:d1:1a:c6:a9:6b:3a:b4:b7:de:6c:e0:d6:e5:85:91:
6f:2f:6a:ea:ff:65:ee:b2:5f:b7:36:6a:5f:e8:e4:33:91:1a:
95:e7:eb:1b:70:29:b3:77:75:e2:ff:58:0d:6e:d8:b8:2a:bd:
42:c8:95:d7:33:e7:00:34:d7:f3:c2:a1:22:cb:2a:da:a8:39:
c2:d2:eb:21:cf:85:54:5b:aa:8a:99:86:ff:6f:27:7d:20:28:
a7:63:d0:e8:8e:3c:a7:be:d9:cb:c7:8f:73:4a:64:06:f5:92:
db:02:89:79:e0:cf:a0:72:3d:d9:bb:80:91:ab:cc:84:6e:09:
b0:38:45:27:52:54:1e:20:e9:d0:4e:14:00:a0:ef:05:ed:cd:
cf:03:d1:9c:cf:a9:f5:be:7c:a5:c4:77:74:c1:37:c2:77:f7:
76:c2:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:20:05 2026 by rpki-client