Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json)
Hash identifier: oytp35W4M2ll1Cw4ia5TSb9yrFo+Dolol8oB7Rms5RA=
Subject key identifier: 17:20:75:FE:81:C8:D0:C5:B7:BF:FB:15:1A:7B:9F:53:D2:10:E1:AD
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial: 019F160AC94448E6F548336C0F04C9E63B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 01:00:33 +0000
Manifest this update: Tue 30 Jun 2026 01:00:33 +0000
Manifest next update: Wed 01 Jul 2026 01:00:33 +0000
Files and hashes: 1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: tYYLgOMVickLae1ijCbC0hqh+jitirxbMPzyfkMkfSE=)
2: gF9egdIcd91P1OP4RPz2DkEHDD8.roa (hash: JDz8GS+aZf4wXrBiyWB1Bck1IR0dmoeHU/KEMVi1Ghc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 21:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:16:0a:c9:44:48:e6:f5:48:33:6c:0f:04:c9:e6:3b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Validity
Not Before: Jun 30 01:00:33 2026 GMT
Not After : Jul 1 01:00:33 2026 GMT
Subject: CN=172075fe81c8d0c5b7bffb151a7b9f53d210e1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:27:30:f0:79:79:52:16:8a:f3:8e:b3:7e:
7f:e9:6b:48:7e:f5:2e:60:3e:c2:c0:7d:2e:18:e2:
e6:4c:49:a3:5c:ed:bd:d8:36:22:b5:37:55:a4:73:
d1:10:3b:ff:7a:6b:26:1e:b4:a5:6a:de:7d:f8:bf:
89:28:de:29:0a:9f:20:e7:e2:c2:af:9c:a1:30:ce:
c7:38:97:cf:c5:86:d9:01:3b:62:3e:7d:1d:4b:e4:
d6:ef:9a:97:b6:08:7d:15:1d:4e:59:d0:d6:0c:30:
75:0c:ca:0a:02:d7:ed:e6:3f:95:76:1a:04:74:f8:
c3:fc:22:f2:50:a7:04:d2:dc:bc:93:f7:ac:bd:4c:
71:bf:35:87:03:5e:fe:2b:50:6e:4c:bf:98:20:e0:
f6:a2:11:59:ba:a2:09:bd:59:95:73:77:87:76:da:
f2:52:43:3f:f8:5b:40:22:d8:dd:e8:40:e5:3a:95:
7e:17:55:91:ee:c7:83:f3:85:6d:e0:13:31:7f:47:
98:76:fc:6f:99:7d:84:db:7e:aa:8c:54:85:7e:0d:
a2:56:b6:91:29:ea:98:3b:eb:c3:ea:11:7e:2e:42:
01:01:c9:a6:dc:44:32:d5:58:40:47:8d:45:fe:2d:
d0:63:e9:aa:60:85:c4:52:7e:91:16:22:a9:64:ec:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:20:75:FE:81:C8:D0:C5:B7:BF:FB:15:1A:7B:9F:53:D2:10:E1:AD
X509v3 Authority Key Identifier:
keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fc:86:3d:f7:73:ac:8f:2b:a5:a5:9f:13:09:8b:02:a4:5e:
06:60:47:d7:c0:9d:49:3e:47:4a:62:6b:63:5b:04:b1:3f:ae:
61:d6:11:80:0e:8a:4e:61:83:7d:2f:ef:9b:31:0e:10:64:61:
ac:9d:65:6c:f2:65:3e:ab:1b:91:3b:b5:b6:bb:ea:c0:0b:b5:
f2:af:77:6e:7d:36:03:2d:2f:35:f0:22:5d:93:1f:74:6f:2e:
b7:41:12:fa:2c:69:f1:67:0e:98:b6:e2:04:e7:e3:27:6d:47:
26:76:41:45:97:71:c1:4e:ca:29:4c:77:1b:3e:3b:8c:ac:7b:
f8:42:74:0a:98:14:e5:9f:88:ad:c2:a0:71:0c:75:8f:94:f2:
db:1c:41:43:2c:90:5c:a5:7f:7c:58:ae:ef:a5:11:04:70:3b:
dd:6f:f4:cf:b6:ad:aa:70:f8:dd:8c:e9:fb:0e:b0:45:68:39:
01:df:0d:0d:58:f2:62:c3:a4:ac:cf:1e:e0:1d:83:d0:d5:9f:
8c:3b:67:da:14:69:ff:54:cf:f4:3a:28:40:e6:81:6b:5b:e2:
c6:98:f9:73:ac:af:d8:1d:d2:d3:b2:72:4c:c4:c5:b7:70:bb:
45:35:a9:c3:f3:0b:33:bf:f5:7f:ad:21:42:3d:02:98:e0:cf:
96:0e:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 03:11:52 2026 by rpki-client