Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: aYQEzKEBdzNPXyDQ5YCThQRXWI/3EE5w5eVqlj2qIzc=
Subject key identifier: 55:36:AF:B6:BC:B6:F0:28:39:C2:90:CE:5D:B4:05:B3:EE:04:82:80
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019EB73323889BD365EA7A8B1E036E89DB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 1698
Signing time: Thu 11 Jun 2026 15:00:42 +0000
Manifest this update: Thu 11 Jun 2026 15:00:42 +0000
Manifest next update: Fri 12 Jun 2026 15:00:42 +0000
Files and hashes: 1: 0_VDRwikWTvRQIQsMp3aqjlVQuQ.roa (hash: X74/QCu3+W4NQQ4c/uIC5xYm7kaBm7r/kGt68bnJBmk=)
2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: 5sJcz1T0k+tUhVT6BHuoPELHNqisTJvB4TFeSEcvc78=)
3: EuhZP1AZU_rcBrUtpebBNKpZGDs.roa (hash: 4fJyMfdftWEjgJj30JHbQU1JK+JRhaZwjIp1NhaWeFg=)
4: EvJXEnC7zFUYWLsUXhzwJeb526c.roa (hash: 2yJuq+SaVzl7mv1pagqpW7rfh/6PNh11sR0zDQ+hDZo=)
5: JMtxM_e2f4IyQOe7ag83ATmrnwo.roa (hash: rSI4U1a3IADB916oOPX87Zu4Y5DYpWavrDRX8n8/D+w=)
6: WuAI-H8NlswYvvMAMOlcviEzotw.roa (hash: B7KPgvRjador4ZwI7bCeT1UxGcCpNUqTQunKcDn/m+I=)
7: jZ3FO_mV9WrcoKTLceS8pJGW3yc.roa (hash: jtA00NOXzw+v3t4avm6wslZ9lfOfAkUHsLwcYHyN6g8=)
8: k9aptvqWA05x4uvgA-vKuzilVzU.roa (hash: BJ061QuQOWlxavQBE+4vNFSfiTJRQL5oGm4+Ibheqps=)
9: uY0sFNMzlqwBju7zNYnP8ksOTWE.roa (hash: SVkZbh6uHodPSzQYZV8KL/YnQleGlnDyzyp+5VJFwZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:23:88:9b:d3:65:ea:7a:8b:1e:03:6e:89:db:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Jun 11 15:00:42 2026 GMT
Not After : Jun 12 15:00:42 2026 GMT
Subject: CN=5536afb6bcb6f02839c290ce5db405b3ee048280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:ef:25:ed:b3:70:4a:12:db:ae:e1:25:c9:
0f:a7:f4:6b:f6:35:69:2b:d8:be:79:3f:eb:5a:23:
7f:65:67:9b:5c:a7:21:38:89:30:b7:4e:20:83:b1:
ee:4c:78:64:0b:9d:15:c0:db:a8:fb:00:df:e2:e5:
5c:0f:15:98:9c:6e:05:91:6b:60:7d:a8:8a:8f:b2:
81:95:ec:80:4a:27:60:1f:05:64:f3:d0:77:c2:00:
4e:b8:d4:d8:53:87:24:70:95:79:ff:55:c7:c9:76:
a5:e2:30:36:0b:91:3c:04:0f:87:f0:e4:b9:2e:1f:
a9:d2:78:09:25:27:4d:2b:6a:01:7e:2f:fd:c6:92:
10:40:3d:50:d0:be:e5:80:a7:16:21:07:ea:2d:f8:
4f:00:1d:e2:15:df:43:18:33:09:09:a8:2d:3d:e5:
1c:44:6f:6f:09:60:e6:0b:c3:2c:35:ef:91:b8:26:
0d:b4:c2:76:10:b2:89:18:8a:bd:01:43:13:93:9f:
40:0f:ee:bd:da:37:ec:06:6a:3a:4e:aa:32:6c:d8:
d5:5b:8b:d5:d5:e2:b3:7f:e5:3b:b8:37:14:4a:99:
db:61:df:66:18:6a:ff:ee:86:6b:70:d8:a6:8f:ac:
19:a2:ec:ff:e6:03:fa:c9:d9:11:de:37:cb:f5:af:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:36:AF:B6:BC:B6:F0:28:39:C2:90:CE:5D:B4:05:B3:EE:04:82:80
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:fd:22:0f:43:7e:b1:5a:da:df:ac:e9:a4:0a:c1:4e:f4:84:
d3:86:e6:20:72:ad:04:0c:ef:48:1b:f7:42:db:99:f0:11:04:
7d:ed:b1:ee:fc:8f:18:cb:39:06:1f:76:c6:b7:42:d7:ba:fb:
25:49:57:20:d8:40:3f:92:15:56:dd:c7:0a:e9:f8:c0:1a:17:
75:c2:ba:2e:d6:b8:2e:50:78:e5:1d:8b:b3:5e:82:2a:92:8b:
12:d6:43:1f:a1:67:8a:88:22:46:77:2b:b8:26:04:b5:67:c2:
29:cc:ec:75:e9:c4:05:a4:78:43:7b:3a:d7:31:4b:fc:fa:f9:
34:2b:c0:df:d2:9b:f9:82:4c:1e:53:9b:6b:28:3d:69:20:1d:
b2:c7:5c:15:43:54:cf:6d:1a:75:70:ba:39:19:47:0f:e8:44:
2b:79:01:22:03:f6:4c:62:fc:82:ac:ef:49:3b:ef:a5:c6:5b:
b2:ed:ef:12:04:b0:16:da:c9:83:d3:a7:e4:df:0a:ee:2f:c1:
e5:a2:b8:72:dd:6b:25:e4:ff:80:4d:1d:c1:4a:c5:79:11:4e:
b4:40:99:9c:3c:74:ed:97:02:7e:89:ba:87:b3:56:d6:00:1d:
74:1d:cd:ea:40:4d:df:c1:54:72:b2:8f:0d:00:d9:fb:c0:d5:
50:f6:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:36:13 2026 by rpki-client