Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier: DiTj1bcXOAOGJP6G5QelxJLeNxH+8XXXHdomUR2jCZk=
Subject key identifier: 39:F7:71:C8:1C:70:A5:B5:D8:8D:6D:65:71:80:42:45:47:7A:8F:9C
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 019F186761A235D5BE8C773A225709E46976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number: 120F
Signing time: Tue 30 Jun 2026 12:00:56 +0000
Manifest this update: Tue 30 Jun 2026 12:00:56 +0000
Manifest next update: Wed 01 Jul 2026 12:00:56 +0000
Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: qIVPYonqhUkQuy3xZXJ6nLJmByUguZbCTHM4PFwzUwc=)
2: dteAII4Iq7XySyzr-x5j1Z9seS4.roa (hash: h1f5SaNN80CBxnaeqEfAaP7RXxTuX9SBPLL5E40G9hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:61:a2:35:d5:be:8c:77:3a:22:57:09:e4:69:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: Jun 30 12:00:56 2026 GMT
Not After : Jul 1 12:00:56 2026 GMT
Subject: CN=39f771c81c70a5b5d88d6d6571804245477a8f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:3f:64:b5:a4:81:9c:2f:12:a7:99:04:99:
25:93:0e:18:43:0f:21:58:74:19:58:8b:82:2f:85:
1b:87:7a:f7:81:5f:a2:c1:dc:9e:c7:96:94:4b:7f:
73:f0:dc:83:f6:4a:f7:6b:d5:2a:36:fe:da:56:b4:
f3:43:51:2e:88:43:f0:29:42:d4:ca:68:8a:08:75:
b4:2e:78:16:42:dc:89:43:7a:f3:f2:56:a7:1f:ac:
d9:8d:85:85:56:e9:7b:b3:40:b4:82:bd:df:4b:67:
47:a2:37:a1:a9:af:b3:4a:0b:f0:74:e6:4b:6e:08:
e5:8e:6c:d3:0d:2a:c7:71:4c:33:a3:f5:5b:ea:a9:
be:3a:6f:46:2a:5d:9d:d7:39:47:92:88:62:7e:89:
60:c3:4a:50:40:37:0a:3f:81:f2:f9:8e:9f:0b:19:
56:0a:6e:38:84:dc:b7:fd:b8:aa:60:8d:31:02:c8:
a0:37:5e:fc:a5:36:e3:62:a3:c9:64:c9:66:54:6a:
e5:22:cd:44:de:45:76:7e:2e:ac:10:dd:70:4a:6b:
84:08:1f:c4:e7:43:dd:65:78:4d:e1:c6:fe:cc:1b:
73:c2:fc:0d:03:8e:14:09:70:84:24:86:ca:e4:ad:
56:d2:5b:5b:f0:3d:b9:5e:43:a3:30:a3:ef:ea:65:
dd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F7:71:C8:1C:70:A5:B5:D8:8D:6D:65:71:80:42:45:47:7A:8F:9C
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:07:39:c1:de:01:64:c6:7b:7d:63:71:c7:9c:72:3d:2e:24:
7f:6d:a3:9c:10:b1:56:aa:30:8d:17:37:b7:0d:8c:35:46:e0:
a8:e5:dc:33:54:ee:c0:f7:d0:eb:09:1f:1d:cf:92:8f:db:fb:
0c:ca:69:56:d6:ad:5b:82:8e:17:62:d8:2e:e2:c5:cd:44:17:
33:2b:74:54:cf:eb:e4:39:47:6e:a9:a2:03:71:19:68:93:cd:
d4:06:1d:5a:96:0d:82:7c:68:6a:c8:f8:03:b0:6f:9f:5d:a2:
37:d6:fa:87:bd:2b:a9:ad:83:72:9b:f9:c6:b8:0e:33:08:4c:
36:8c:ef:7f:bc:aa:29:2a:ae:67:f2:a1:80:2c:b9:30:cb:fb:
d4:75:47:c2:bc:14:c6:4a:94:98:eb:e8:de:d7:3c:04:81:b2:
ee:b6:2d:7c:9e:0a:43:11:4f:fa:af:18:fb:37:3f:70:48:2a:
82:0a:1b:19:08:31:78:d4:4d:07:ce:84:18:a4:02:d4:52:de:
b3:0c:56:46:cf:43:c8:31:fd:85:2f:7a:5d:86:d6:bb:5d:0a:
9c:8d:36:2d:3e:43:3c:66:e2:df:0a:04:b5:85:b1:d7:72:9f:
2d:88:be:38:cd:9b:a6:79:8c:9e:30:82:7b:f3:36:ca:b0:35:
d6:41:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:30 2026 by rpki-client