Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier: 1QsyGLXAEbfMAvH5n3TA0gkON9/gJz9mZNt+zJM4uZU=
Subject key identifier: D6:C1:AF:AB:9A:60:58:C1:3E:23:84:73:3A:04:85:51:C5:9A:D0:D5
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: 019F17550814CE82004382601EF85C70A6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number: 12C5
Signing time: Tue 30 Jun 2026 07:01:16 +0000
Manifest this update: Tue 30 Jun 2026 07:01:16 +0000
Manifest next update: Wed 01 Jul 2026 07:01:16 +0000
Files and hashes: 1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: RpLhEdBj5GjKY29jQLuO1wvm1keNEHYzDEQBy15vl4g=)
2: W3l5JRhPuthx-ykoXQXBD_xsWjQ.roa (hash: ZdAWG0LeOjORysxwVmV4ixsOS0/0z5BY+UNn11FxoO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:55:08:14:ce:82:00:43:82:60:1e:f8:5c:70:a6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: Jun 30 07:01:16 2026 GMT
Not After : Jul 1 07:01:16 2026 GMT
Subject: CN=d6c1afab9a6058c13e2384733a048551c59ad0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:df:bb:5b:96:cb:3c:60:07:91:6d:e9:4e:50:
ea:79:91:e5:88:27:8d:35:c1:fa:9f:be:af:02:85:
aa:da:a5:ab:8a:0f:53:01:5e:5d:e3:c1:5b:df:c5:
6f:f1:38:09:90:ef:82:01:99:fe:53:83:6b:4a:43:
12:e4:7d:63:df:4f:1d:c7:39:ec:01:78:84:e1:9d:
49:7b:32:cc:0d:34:9a:b0:83:8b:3c:ef:5b:9f:59:
13:0c:cc:d7:37:9b:9f:bf:a9:cc:13:d7:8a:11:4a:
44:fc:62:d0:e9:29:51:33:f8:bd:db:85:ae:84:4c:
4a:ad:a8:f9:ce:86:27:25:ac:4a:05:41:f7:e4:09:
eb:17:1b:3e:0f:04:c6:1e:df:0b:71:2b:92:14:e5:
54:c9:8c:72:da:e3:02:5e:ae:35:9a:14:c9:64:f8:
43:7d:fa:84:16:56:ad:3f:34:3a:57:78:9a:a0:3c:
fe:53:f1:bb:04:83:26:2a:bd:4d:ea:cd:aa:7b:c1:
c9:4a:68:91:2b:15:85:85:40:0e:4e:92:06:f3:41:
ac:cb:ac:c1:c8:fe:62:d5:86:fb:45:eb:d1:cd:f4:
46:9c:87:fd:d0:c3:f2:9e:3d:8e:f6:4a:5d:e8:47:
8e:7b:8a:79:b2:55:d9:31:70:e7:16:e3:8b:4f:1b:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C1:AF:AB:9A:60:58:C1:3E:23:84:73:3A:04:85:51:C5:9A:D0:D5
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0a:bc:cd:29:14:8f:09:c3:8a:2e:13:38:19:76:9a:1f:91:
33:23:bc:0b:2f:28:74:a3:d6:fd:bd:15:be:a1:37:3e:f2:85:
35:71:55:22:15:a0:6e:19:6d:6c:b4:c2:4c:02:31:c0:2f:1f:
54:bc:9e:07:43:4c:2d:d7:e5:87:b5:f4:ae:f4:9a:ad:48:41:
2d:0e:08:60:36:74:91:f9:4c:40:c3:2d:e8:01:ff:07:46:66:
98:eb:68:5c:44:31:0f:37:2b:99:85:29:03:1c:3c:46:40:f4:
ce:92:77:25:6b:d2:5f:65:be:03:21:1c:11:86:51:ae:de:38:
9b:2f:f8:fc:a2:4f:38:10:51:95:15:16:ab:b2:11:34:4f:63:
f9:04:1f:48:c1:21:97:74:03:b5:16:6b:79:31:58:7f:1f:c4:
72:ac:23:9a:1b:72:a9:12:db:d1:de:b2:5e:9a:53:2f:bb:85:
f9:bd:40:6b:12:67:01:4b:60:5b:9d:e4:52:a7:b2:37:3e:ef:
c2:d2:41:d6:9a:24:63:e7:7f:85:7a:ce:c3:ad:96:49:90:2c:
84:0c:c6:69:1f:02:6e:19:7d:33:b1:38:b5:3a:be:26:f0:63:
3d:9e:a2:d7:df:1e:e5:54:66:77:7c:00:aa:43:d2:19:b0:c0:
bb:e5:13:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:06 2026 by rpki-client