Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
File: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft (raw, json)
Hash identifier: qpWuYFOv2ooBJZAz/CN+pixNASwP61WMeZXpfIoiKRI=
Subject key identifier: 43:9C:F2:00:84:7F:31:49:D5:53:B6:CA:91:50:D0:B1:95:C7:75:C8
Authority key identifier: DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
Certificate issuer: /CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Certificate serial: 019EB6C4FAFFE7C4BBA46EA1DA9C9E488BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
Manifest number: 016D
Signing time: Thu 11 Jun 2026 13:00:23 +0000
Manifest this update: Thu 11 Jun 2026 13:00:23 +0000
Manifest next update: Fri 12 Jun 2026 13:00:23 +0000
Files and hashes: 1: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl (hash: OLur6azoJ99CbFM8JJOdKWNY+bd07so+5FKwVUAvp4M=)
2: VGuckUmXD3FffNojHBh4mr4L2f8.roa (hash: 8TbPfvVyzj3G5WKw2nSbHXcBZE5w35KkZHPmx5cAQsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c4:fa:ff:e7:c4:bb:a4:6e:a1:da:9c:9e:48:8b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Validity
Not Before: Jun 11 13:00:23 2026 GMT
Not After : Jun 12 13:00:23 2026 GMT
Subject: CN=439cf200847f3149d553b6ca9150d0b195c775c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:97:51:68:63:eb:e8:f8:09:c8:13:4f:db:
d0:dc:c4:67:51:43:d9:79:a5:7f:76:39:4e:1a:22:
ec:48:2d:f0:a6:63:97:7d:b5:08:ae:b7:0d:c4:33:
3b:c9:4e:97:a4:1f:43:1b:0b:fd:20:48:8a:1e:9d:
c2:66:18:28:90:fc:b4:1a:42:d7:32:0c:94:de:06:
fa:0a:f6:cd:81:b1:e2:f9:5c:ed:1f:9d:96:37:e3:
a6:76:63:12:9f:6f:8c:d3:8d:0d:d9:82:05:08:0e:
45:5c:ea:42:5e:33:62:2f:d7:87:6d:f2:11:b1:43:
68:5a:de:d8:70:fc:9f:98:b7:ea:7c:a0:0d:89:b7:
a5:22:e0:80:95:9d:f1:47:3a:ff:a3:26:6b:62:21:
04:bd:ba:55:38:a9:34:3f:bc:ac:23:48:21:c4:1c:
14:25:a0:11:70:ce:cc:8f:6b:43:77:2d:ee:d6:51:
ef:94:34:e3:5b:6b:cc:0c:17:1d:59:90:fc:16:b3:
65:eb:33:20:e2:c0:46:d6:04:52:43:44:38:3a:31:
bc:16:5a:f9:30:8c:30:79:f0:85:5e:b1:11:c5:a4:
84:33:0c:87:1b:71:f5:20:c5:5e:07:45:cb:fb:af:
9c:fe:d0:89:19:01:44:57:0e:d2:0f:82:bf:b0:24:
f6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9C:F2:00:84:7F:31:49:D5:53:B6:CA:91:50:D0:B1:95:C7:75:C8
X509v3 Authority Key Identifier:
keyid:DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:07:34:7c:ab:2f:09:3e:9d:10:61:b9:4d:4c:25:ec:eb:19:
31:6f:93:90:d2:a3:00:e5:22:a2:42:ef:b3:ee:ef:1b:3a:18:
08:5e:84:4b:cf:73:80:21:c8:2b:56:23:37:56:80:7b:61:3e:
46:8d:b9:11:e1:79:dd:34:63:35:b4:0d:ba:e8:6c:0f:35:de:
3c:50:6c:7b:05:e1:09:36:8d:a6:c9:72:1f:3a:28:7c:05:aa:
fb:d2:47:a0:e1:12:2e:8f:1e:07:da:15:52:fb:7d:7f:f5:be:
be:73:d0:c1:a2:d3:0e:8f:70:6f:c1:c6:87:33:e3:a3:bb:76:
19:70:55:8f:05:38:1f:f1:77:d7:ff:19:64:70:cf:f7:c4:ee:
d7:ca:5e:04:74:dc:f4:1d:33:ea:a2:5f:56:df:48:60:b7:21:
76:46:4d:85:f5:4c:75:1d:a2:cb:88:d8:07:e6:0c:62:c2:a5:
45:6e:a3:e2:57:3d:9d:3f:3b:aa:96:e8:10:8b:5d:10:21:6c:
6b:ed:c3:96:f9:09:b7:2e:36:06:44:b7:e5:01:78:e9:9b:90:
ae:8b:ed:34:40:21:ae:1c:16:a4:1e:b8:33:da:6b:59:44:a9:
f6:f8:e2:2b:5b:63:29:2e:a4:5e:6e:60:04:c1:9d:68:0e:82:
15:d5:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:40 2026 by rpki-client