Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
File: k3hbOp4zxStYueyVo3cj8ACL-UY.mft (raw, json)
Hash identifier: JyZU38wQqsLaeljg0M5cM06d/t9g7bd4SE0xuGwmaoU=
Subject key identifier: 35:F0:8C:32:DD:1A:42:80:8E:F6:DE:93:6E:C3:3E:52:6D:4F:79:9F
Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
Certificate issuer: /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Certificate serial: 019EB87D1E0BB681A72B1992753130491EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 21:01:07 +0000
Manifest this update: Thu 11 Jun 2026 21:01:07 +0000
Manifest next update: Fri 12 Jun 2026 21:01:07 +0000
Files and hashes: 1: k3hbOp4zxStYueyVo3cj8ACL-UY.crl (hash: G4L0maYW6TDWewx8Ng1bsD6gRYYPLIZkVQ7P1G7iw+0=)
2: lzqB-_xRsBzlfZC3i-581O0TRPA.roa (hash: p6cjxCw0yBX+JOEsw/uKDi48tVNBgWuDysGJUIAaJS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7d:1e:0b:b6:81:a7:2b:19:92:75:31:30:49:1e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Validity
Not Before: Jun 11 21:01:07 2026 GMT
Not After : Jun 12 21:01:07 2026 GMT
Subject: CN=35f08c32dd1a42808ef6de936ec33e526d4f799f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:99:89:aa:d2:75:e6:d6:b5:ef:c4:66:18:af:
dc:d8:a9:ce:4c:ac:bb:41:15:7c:46:e0:f5:74:4b:
b0:77:e6:1c:c1:e3:3d:2d:4f:bd:c6:d8:31:d9:f4:
d8:85:14:99:21:69:58:e5:37:23:03:ac:90:c4:5f:
fc:19:11:b7:45:68:b1:5f:d6:23:1e:b0:00:77:a2:
86:a0:55:c1:3d:35:4a:2e:e1:46:82:5a:25:d4:85:
70:1b:d0:be:ae:16:5e:bc:55:94:70:a0:ab:31:19:
32:88:d8:1c:9f:dc:cc:79:a7:64:92:1c:c0:09:e7:
45:d9:25:5f:ca:8d:cc:8f:43:e8:a8:5d:7a:aa:7f:
80:64:d2:4b:4e:fd:7f:b3:ce:ed:13:6c:fa:a2:10:
b7:7e:0c:99:5a:f7:28:2b:d1:14:42:21:8d:47:23:
c0:4e:2d:8a:65:a6:79:9e:1d:1b:d8:dc:89:8e:c9:
1c:b1:67:c3:6e:dd:13:68:1c:6c:9d:98:bc:c2:85:
9c:08:1a:fb:68:e6:f7:95:79:7a:33:c7:00:ec:7c:
ff:2f:8a:51:44:82:05:7e:3e:0e:3e:54:4b:f5:b1:
6e:ba:96:4e:25:4c:0e:39:f0:c8:de:ff:5a:87:b8:
99:c7:50:2a:f2:c2:c7:23:5b:68:55:47:61:9f:35:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F0:8C:32:DD:1A:42:80:8E:F6:DE:93:6E:C3:3E:52:6D:4F:79:9F
X509v3 Authority Key Identifier:
keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e3:a8:77:c0:62:97:7f:f4:16:9a:bd:26:67:fa:06:fd:ac:
d8:7a:06:4b:de:63:60:d9:53:c6:70:c6:cf:a0:ce:65:51:64:
95:67:c0:fe:b8:63:37:40:50:5b:8f:a3:ea:21:e5:45:68:40:
43:9c:46:e6:05:99:84:e6:af:91:7e:38:32:b9:94:e2:de:9c:
47:cf:44:b6:83:26:e2:17:1f:b7:af:09:05:4c:90:85:97:31:
1c:b6:d5:46:d7:e1:64:7f:d3:cc:04:13:c3:47:02:7a:5d:b6:
f6:83:08:cf:30:05:c6:47:7d:f7:c1:8e:48:72:70:6d:31:fe:
62:0d:d1:21:88:68:b5:b1:c4:09:aa:d7:73:34:4f:99:e2:3c:
48:86:f3:cc:a6:74:4d:d3:10:17:a5:60:be:59:d7:41:0a:ae:
42:fe:f9:28:58:04:7b:ce:92:52:25:91:84:6c:ff:30:c1:37:
da:86:dd:25:41:bd:bd:32:3d:ae:e8:6b:69:a8:19:6e:3e:f0:
f2:b2:ad:12:01:07:84:d7:78:2b:1c:13:55:df:d8:5a:fb:81:
de:68:dd:9c:d5:ef:b0:1f:dc:70:d9:3f:9a:a9:37:45:4b:15:
75:61:2c:27:26:3b:ac:44:71:e0:95:48:fa:91:7c:87:5f:8b:
6f:9c:15:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:07:09 2026 by rpki-client