Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier: as+p4Rl0hrNypEtU49GMH8TY4YJX6tbwM1eqYWkJMvk=
Subject key identifier: 81:E2:65:D4:E5:76:D2:19:DA:B2:76:4E:19:BA:47:C0:D4:C3:EA:5F
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 019EB733943D6DA0067A438747A8F8A64C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number: 08F0
Signing time: Thu 11 Jun 2026 15:01:11 +0000
Manifest this update: Thu 11 Jun 2026 15:01:11 +0000
Manifest next update: Fri 12 Jun 2026 15:01:11 +0000
Files and hashes: 1: LwqXAM6lPGk_PmFvOULH64ObLAs.roa (hash: MrcdOxOshx/gVLtXaalP4jwQbNYdpAAfBt14JuVSsXw=)
2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: 1+5FroPdXxx51iKEAFkO9i9UsxEejkP4GrKxKx0ra6w=)
3: s-1hinZK4tY9bZC4k9BOYyXjqxk.roa (hash: qbBIxBxOXTtMEXXkSI4yM3F77zIR/XL9wvzMoK2RSOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:94:3d:6d:a0:06:7a:43:87:47:a8:f8:a6:4c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: Jun 11 15:01:11 2026 GMT
Not After : Jun 12 15:01:11 2026 GMT
Subject: CN=81e265d4e576d219dab2764e19ba47c0d4c3ea5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:05:70:87:af:91:5e:0b:bd:3e:27:c6:e9:
a8:60:5c:5f:15:fe:d4:71:57:9c:f4:1e:ae:f3:3e:
61:2f:d8:80:08:41:35:3c:27:91:f7:19:c5:d1:2a:
8f:c1:e8:89:b0:84:c0:f5:59:dc:b0:fa:c8:0a:be:
bd:2f:a6:b3:4a:71:7d:09:a5:0e:0c:43:87:a9:f1:
7c:0a:c4:0e:08:70:53:ca:02:18:71:7a:90:56:30:
53:3b:16:8d:6e:13:6b:c4:c9:cd:e5:ad:29:c3:a7:
04:86:d3:60:0e:36:11:81:f6:12:42:f5:3d:bb:b3:
fb:f9:50:e8:4a:2a:01:6b:09:d3:c3:a0:29:6b:15:
90:9f:e3:8e:ac:e1:8b:c5:71:c4:fa:cd:c5:f2:17:
96:ff:bb:da:15:93:a8:e2:5a:4a:f8:15:49:f6:45:
25:c0:c7:77:72:19:5f:51:d4:39:37:6d:eb:84:c0:
c7:dc:84:7d:10:25:8f:e0:69:e2:d3:e9:dd:4f:d6:
56:02:1d:d3:ca:51:86:b7:f4:39:99:2c:75:e3:9b:
eb:b0:25:ee:bb:5d:7f:60:ad:d1:45:df:7c:f4:45:
c2:50:36:58:70:28:47:9b:e6:f3:46:68:61:45:c3:
ff:84:c4:94:1e:25:0e:3b:07:68:da:c4:36:54:64:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E2:65:D4:E5:76:D2:19:DA:B2:76:4E:19:BA:47:C0:D4:C3:EA:5F
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f3:60:f7:ba:69:00:0d:56:03:d9:fc:1e:2f:51:68:19:47:
be:f8:0b:29:2a:bb:4a:0b:21:1e:31:b9:40:f8:7d:ba:d3:ae:
65:6d:d4:34:4d:60:db:65:ac:0e:a9:5b:8b:b4:a9:40:9d:f2:
4e:9e:54:34:5b:ca:22:1e:7e:17:73:b8:52:ed:91:c1:7e:86:
92:36:da:da:e4:e9:b6:3c:88:c6:e3:8c:c7:a0:5a:d6:b4:64:
89:99:df:9a:a4:d7:bd:51:97:2b:68:f3:0a:bf:f9:84:d8:f8:
30:da:f0:0e:f9:af:20:3f:b1:88:2f:85:ba:15:dc:8f:18:fc:
2f:49:4f:1d:92:18:c7:04:6e:2e:e3:30:0c:56:48:95:14:43:
bf:3e:8c:27:d7:08:3c:ff:81:b2:91:15:06:ad:2e:6a:fd:6d:
8d:5c:cf:ca:db:fd:65:f8:b9:6a:ce:f3:0e:30:6d:f8:00:92:
e9:70:55:a5:58:f0:cc:a6:63:95:86:d8:af:06:fe:08:0f:c2:
05:83:36:ee:9a:f9:ae:54:27:0c:24:d4:8d:7e:21:b5:88:23:
42:49:88:63:99:2d:27:70:1a:76:90:67:c5:ed:50:cc:0a:6a:
a7:65:d8:4b:85:fc:62:99:bc:c3:3b:e1:5b:48:64:73:09:0d:
75:24:4d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:56 2026 by rpki-client