
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier: /VKfZ6qiSNGoCi/EKoVirCxgrmCuWJWoYY/sXP+nhpo=
Subject key identifier: 16:8C:31:79:32:63:C2:C4:50:2F:58:A4:40:0C:99:98:4D:4D:2F:DA
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial: 019F186787C3A9CBDDB66CD7CCBCC360D970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number: 167A
Signing time: Tue 30 Jun 2026 12:01:05 +0000
Manifest this update: Tue 30 Jun 2026 12:01:05 +0000
Manifest next update: Wed 01 Jul 2026 12:01:05 +0000
Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: mcLL3Ak8jQwtbjFJBYsm7qMcKAKP31LNE4cghPHfRDI=)
2: 8cfj4AnF2yhGPptSyF2jUpxr_S0.roa (hash: DzmUzilMBBgQsPSM2fLdsvW1h+o9QZQZ1zF5bMN9CFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:87:c3:a9:cb:dd:b6:6c:d7:cc:bc:c3:60:d9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Validity
Not Before: Jun 30 12:01:05 2026 GMT
Not After : Jul 1 12:01:05 2026 GMT
Subject: CN=168c31793263c2c4502f58a4400c99984d4d2fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:e4:ac:01:85:60:e5:bf:1e:7f:0a:8c:5d:
b2:73:fe:08:d5:c4:87:e0:e5:c3:0b:ed:e3:7a:8c:
8f:bc:4d:dd:8d:f9:4c:e6:11:6a:a8:2d:cd:5e:d6:
bf:61:7f:5e:b4:71:a3:ee:fe:bf:72:86:58:2f:f2:
c4:9a:f2:61:de:56:55:af:43:69:26:13:bd:21:cc:
b8:14:d7:9f:00:9a:59:95:2e:f3:4b:f6:2c:52:81:
78:cc:e2:25:42:2c:25:3b:c8:26:c4:21:47:f5:31:
5b:ed:f9:d3:5c:2c:c7:4e:5f:36:a6:11:33:ef:53:
39:7e:cb:6f:9b:ff:10:b8:bf:89:e8:e6:c4:25:02:
0a:be:31:3d:69:d0:6d:98:3b:67:58:06:ca:bf:11:
92:3a:28:35:4d:cb:ee:c2:2a:ac:3b:bf:f5:f9:28:
e4:0b:83:d4:83:ad:22:01:72:70:e9:c2:5e:be:86:
1f:f9:cd:f8:af:7f:da:f3:05:ae:b8:8a:f7:a4:e4:
5e:50:2f:a0:3f:c1:c8:5c:15:04:77:59:7b:77:f9:
be:ee:38:59:3b:e6:6d:f2:7f:8e:f7:7c:d9:38:d8:
1e:ff:3a:4e:35:3c:24:8b:4d:96:2a:fe:59:d0:64:
e9:43:63:0c:95:11:db:0c:7c:64:79:04:90:a7:f7:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8C:31:79:32:63:C2:C4:50:2F:58:A4:40:0C:99:98:4D:4D:2F:DA
X509v3 Authority Key Identifier:
keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ad:31:5f:70:b8:37:a7:f8:95:f3:19:4f:6b:5c:15:71:a5:
7a:3d:19:fc:9b:d2:e2:b2:aa:a3:ce:4b:48:fe:3e:dc:81:49:
77:ee:60:a7:99:cb:c7:8f:9e:af:1a:13:4c:32:63:91:51:5c:
ab:b0:d0:c9:64:0e:27:90:99:64:57:e2:84:9a:25:d9:52:17:
0f:dc:50:cf:24:d6:2c:ef:5f:69:cf:91:09:4d:b0:1d:3d:0a:
28:ff:61:97:b4:d0:31:fb:1e:16:02:ef:d3:72:01:f5:97:99:
30:db:7f:6d:52:77:46:32:0e:55:a2:fe:3a:c1:c0:d5:4a:48:
06:43:21:0f:f5:ba:44:10:dd:f3:84:d6:e4:60:01:58:c3:a7:
41:72:58:2e:9d:4a:80:5f:7f:7d:40:d2:7d:fb:21:3e:08:ca:
27:8f:28:01:7e:84:21:e8:b2:9e:01:00:5a:a7:df:16:d4:3f:
fb:5f:95:75:bb:e2:bb:ab:aa:82:3c:ad:bb:e5:bb:c3:6f:52:
42:b5:9e:5a:5d:ec:54:e8:c7:66:54:47:bb:ce:82:e9:e3:1f:
00:b7:ee:03:0b:19:83:36:7f:10:59:b3:c5:b1:4e:25:f3:a8:
6b:8a:6e:7d:9b:d0:15:25:a8:7d:1e:1f:8f:e5:d0:26:21:04:
0b:69:86:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:18:29 2026 by rpki-client