Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
File: 3y3kqfK8Uj318Kf15DJJikLFX3A.mft (raw, json)
Hash identifier: UUP69z3ofqCBNN2D3jS8VPD6KGSpOOYygUZoylIAVlU=
Subject key identifier: 45:DD:75:FE:38:59:B3:FE:53:78:8E:5F:69:57:A4:6D:20:F8:96:2B
Authority key identifier: DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
Certificate issuer: /CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Certificate serial: 019EB7D7E46D5898AF2BCB21FE4893C37119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
Manifest number: AC
Signing time: Thu 11 Jun 2026 18:00:39 +0000
Manifest this update: Thu 11 Jun 2026 18:00:39 +0000
Manifest next update: Fri 12 Jun 2026 18:00:39 +0000
Files and hashes: 1: 3y3kqfK8Uj318Kf15DJJikLFX3A.crl (hash: tBUGGKZNZ5HVNU5Y7r0mJbFADnjdZv8DJaKZPnRXDoc=)
2: 8XebNTiumaUWcLbgsrPRqEK7yJk.roa (hash: wIkMYGUwRkloiGV8zcV817/8WXtvc8qz+eDzExEQl48=)
3: SU9_tB5lwfHPL_4Kt4ROwFHlUMI.asa (hash: wN65KwAJllI0kxcg5tgjkk0Y4QH9uf/hvRTzQ2pTovk=)
4: xtsoV3YrVhm4MKDjfu3IvjG7q1g.roa (hash: qMRfu2o1bzSJ1p0UvgBKjKi65ckvS8nI12aCVQ8a6vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:e4:6d:58:98:af:2b:cb:21:fe:48:93:c3:71:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Validity
Not Before: Jun 11 18:00:39 2026 GMT
Not After : Jun 12 18:00:39 2026 GMT
Subject: CN=45dd75fe3859b3fe53788e5f6957a46d20f8962b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:9f:e8:31:44:a0:1e:e4:7e:c9:ba:55:0b:
37:ae:0a:21:c9:80:d5:bf:f1:a5:a6:e2:4f:50:92:
77:8a:e9:06:a2:8f:1a:1c:cf:c3:0e:22:83:a2:56:
c9:b9:0f:2b:68:b3:9b:bd:7a:b4:ec:fd:85:9f:2c:
20:39:1c:8b:d7:11:57:9a:dc:42:04:64:c8:47:e9:
f6:cd:38:5c:b5:5b:03:ae:7b:7e:55:ff:f5:49:b0:
76:15:47:eb:05:d7:48:6c:56:f1:9a:b9:79:f1:77:
90:11:92:9d:2c:26:14:69:1e:dc:a6:e6:31:47:a7:
a2:16:53:73:1e:db:cf:4a:8d:b1:a3:4c:ef:2e:6e:
34:1d:44:45:bf:41:6b:72:a4:26:8b:65:21:61:ed:
c9:66:76:89:b4:86:33:d4:cc:fa:da:60:b1:cc:a3:
f5:36:4f:33:63:37:2f:a6:02:c9:40:91:78:45:a1:
fb:fb:94:f0:e5:9b:7e:6c:ef:e8:48:02:d2:d6:44:
49:68:bd:10:b9:cb:ad:c4:da:2a:18:9d:92:33:85:
09:cb:25:a6:62:7c:6f:21:c6:22:3b:66:8c:d9:02:
20:6a:30:35:30:54:07:93:2e:1b:42:63:9a:72:3d:
b7:bc:19:f7:3e:31:62:b8:91:7c:94:e3:73:c3:29:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DD:75:FE:38:59:B3:FE:53:78:8E:5F:69:57:A4:6D:20:F8:96:2B
X509v3 Authority Key Identifier:
keyid:DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:81:f5:c5:c2:db:43:c1:bc:1b:c0:dc:fe:25:e5:e4:90:21:
61:aa:f2:c2:4e:91:f6:5b:1e:b8:94:b1:ec:9a:e9:74:d0:53:
25:f7:13:17:86:60:47:b6:15:89:5f:5e:79:37:89:0b:9f:7a:
e9:b7:e2:87:36:d7:3c:cb:d5:09:f9:35:5b:c4:3d:bb:1d:64:
94:f4:5a:d7:28:7e:5d:2b:83:cb:00:fb:39:60:b5:ef:b9:ce:
78:ed:d6:f8:fc:b7:c5:03:92:68:a2:ec:8f:f5:b4:64:7f:8d:
cb:20:ce:0d:a9:ae:03:45:7f:23:35:f5:86:bf:41:98:d8:ad:
99:3c:b2:5d:9f:df:cf:1b:eb:9f:b3:e0:64:f4:38:38:cf:6d:
cf:94:a1:b1:95:be:30:5e:6a:2b:3c:b2:cf:15:da:b8:6c:c1:
a0:38:b8:24:1f:74:b2:c9:3b:4d:dd:ab:b2:6b:f4:ca:21:69:
35:09:94:34:41:a7:ba:db:91:25:5d:4b:82:2c:2f:6b:70:39:
e0:33:4b:79:fc:22:21:72:17:e4:55:55:e5:56:aa:14:cb:f9:
4b:43:bf:78:af:0c:45:da:fb:9a:d3:7f:94:5c:fa:d6:70:01:
f0:8d:b9:bc:ec:55:db:a6:56:1c:d6:6d:a9:8d:e4:ca:39:1f:
e0:45:47:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:07 2026 by rpki-client