Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: MOVNkmF2MZC64mAJrOOf4n1pVjpu5b8oXLSZv4bkuJE=
Subject key identifier: 37:6F:85:D8:63:1D:91:82:8E:DB:C5:98:6D:50:06:48:35:5B:6E:5A
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 019F17C2902A6FD4B65611C908813A54309B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0EAE
Signing time: Tue 30 Jun 2026 09:00:54 +0000
Manifest this update: Tue 30 Jun 2026 09:00:54 +0000
Manifest next update: Wed 01 Jul 2026 09:00:54 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: trZiva3TGsSXO6dD4ZV4VLsvyW1lbfmyTkckexAB5Rc=)
2: KUy8l_kE9Ez8yOXsZsPg_xu8U88.roa (hash: Q8NXv7/aGohuJqdBeBqSqaYcBq21Vr5wijgoX0wzMFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:90:2a:6f:d4:b6:56:11:c9:08:81:3a:54:30:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Jun 30 09:00:54 2026 GMT
Not After : Jul 1 09:00:54 2026 GMT
Subject: CN=376f85d8631d91828edbc5986d500648355b6e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:8b:1c:67:2b:8b:be:1c:fd:19:84:57:a0:
51:69:40:71:ba:cc:ae:6f:10:c8:b1:0a:e1:33:79:
1c:d5:ce:73:b1:b1:f8:64:ae:14:c7:f4:9f:6c:92:
84:66:b9:da:31:0c:02:5a:3c:03:2a:d2:ea:03:bd:
d7:06:21:aa:a5:fa:b9:ab:db:9d:21:50:91:ed:35:
2e:2e:30:95:35:f7:27:da:e6:db:c1:9a:93:a9:4a:
32:2d:8c:41:d9:74:24:b6:6a:2c:f4:d7:dc:df:b7:
10:3c:3e:5e:88:63:91:11:6f:c3:66:96:4f:c5:d7:
5d:ca:a2:8f:c8:58:c6:71:8c:c6:02:8e:e0:02:48:
4a:86:96:59:e1:12:49:9a:26:22:c7:a5:0a:05:7f:
0e:53:8e:50:f6:bc:9b:d8:f5:62:fe:fe:05:08:a6:
c5:04:fe:e7:7f:27:e9:88:c5:0a:59:98:1f:38:e4:
9e:48:c1:63:6d:1d:81:30:75:4e:45:2a:13:bb:f6:
c2:fe:c6:19:f4:4c:b2:75:cc:7f:45:e4:40:a4:54:
38:c7:7e:08:8a:9b:80:6f:60:40:f2:6a:62:85:b0:
8a:d7:40:fa:e6:0d:1d:44:7e:45:ed:0b:fd:63:f6:
de:bf:f8:66:2d:ae:3c:71:13:65:05:16:bc:80:cf:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6F:85:D8:63:1D:91:82:8E:DB:C5:98:6D:50:06:48:35:5B:6E:5A
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ab:f5:79:fe:88:1b:72:5c:ff:a3:15:5c:78:7c:11:db:76:
ed:9b:90:8c:b9:ae:22:9f:53:c6:41:e8:a5:62:48:c9:c5:79:
6b:c3:af:dc:6c:64:32:3a:88:c2:f8:41:53:a5:3b:ac:3c:bc:
f8:4f:be:b3:28:04:ec:37:86:4f:9b:17:ac:4a:8a:99:27:af:
87:1d:93:c5:b3:06:17:f0:15:f0:91:b4:b0:52:2e:55:31:30:
ea:9f:3b:58:70:f6:7c:fc:9c:2b:20:8b:10:7e:87:9d:d6:ff:
a9:f5:4b:a2:75:1b:dd:53:62:37:a2:07:ae:d8:e9:30:52:5c:
e4:9e:32:81:57:37:0e:c4:6f:2b:2b:b9:1b:01:b1:bc:36:5c:
fd:32:d6:07:d2:1f:dc:48:ab:85:c6:98:7d:a3:12:a6:bd:08:
08:90:8b:1f:59:5b:31:6a:59:a9:f3:9c:76:f5:35:00:93:c6:
a6:29:20:71:5c:d4:ec:77:42:f1:47:66:ff:6e:b6:84:c9:49:
fe:c6:42:8d:5e:3e:53:79:15:c9:79:98:bb:e3:0a:96:54:ac:
72:2a:1a:eb:6a:24:89:5f:c3:a8:a8:1a:d7:28:1f:30:7f:11:
6a:b0:86:1d:7b:78:1a:f2:4b:70:14:6b:10:f2:b7:39:b7:e3:
ad:04:b3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:49 2026 by rpki-client