Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json)
Hash identifier: WpEHfWqS5S+30PiwJiIVmJL1WyaeCigWNJhgdYwzykU=
Subject key identifier: 96:36:C2:EA:5E:56:BC:A0:74:83:97:20:F0:A2:86:F6:C5:38:0D:94
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial: 019F141CDDCB2541A63BADE1A2D3BD8AEBCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
Manifest number: 1983
Signing time: Mon 29 Jun 2026 16:01:03 +0000
Manifest this update: Mon 29 Jun 2026 16:01:03 +0000
Manifest next update: Tue 30 Jun 2026 16:01:03 +0000
Files and hashes: 1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: QHgmBsLhkiDdX0eY8wkMiiBOjNVBuP79Hc9cAZaP2VA=)
2: gF9egdIcd91P1OP4RPz2DkEHDD8.roa (hash: JDz8GS+aZf4wXrBiyWB1Bck1IR0dmoeHU/KEMVi1Ghc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:1c:dd:cb:25:41:a6:3b:ad:e1:a2:d3:bd:8a:eb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Validity
Not Before: Jun 29 16:01:03 2026 GMT
Not After : Jun 30 16:01:03 2026 GMT
Subject: CN=9636c2ea5e56bca074839720f0a286f6c5380d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:a9:49:e9:f5:30:53:5f:d1:6d:96:0a:36:
9f:a8:80:db:11:43:61:8d:cb:31:dd:f9:f1:d9:d2:
4d:d8:fa:72:60:c8:9e:79:8e:e8:01:a3:d1:40:30:
71:a6:56:6d:8c:29:4a:7a:93:55:31:12:5f:61:87:
2f:2c:32:48:cc:28:e3:d6:93:81:49:97:72:f9:f6:
09:01:07:5b:e9:cb:e7:26:c5:4b:bd:90:04:a6:b6:
ff:09:63:e8:79:08:e8:79:85:1d:df:e1:84:e3:3e:
d5:29:bf:3e:14:81:bc:81:bc:a8:4e:be:e1:53:92:
56:35:7f:9b:c2:12:11:de:2b:83:43:cf:78:69:1c:
87:13:9e:35:d8:50:ae:07:3a:62:82:87:07:dd:d4:
6d:c7:fe:b2:7b:c7:7e:05:13:18:54:1d:e7:8c:ef:
6d:22:c8:ff:d1:f8:af:2f:3d:66:90:76:b1:5e:95:
96:2a:ec:cf:91:6e:7a:a3:c8:3e:a6:17:58:77:16:
78:db:b7:98:aa:73:f3:1f:a0:73:9c:14:0b:73:da:
81:02:12:46:32:c4:8f:0f:34:b7:52:7c:ca:51:ad:
c4:0c:6a:f6:20:f3:6a:12:2c:06:87:bb:4b:9e:27:
7d:fd:40:43:80:5c:b5:a9:0e:17:5e:28:e9:c4:8a:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:36:C2:EA:5E:56:BC:A0:74:83:97:20:F0:A2:86:F6:C5:38:0D:94
X509v3 Authority Key Identifier:
keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1c:98:3a:97:da:cd:9f:3b:ad:f6:ff:a6:02:4e:98:dc:0c:
ac:97:49:72:49:6c:fb:ca:74:7f:23:bf:40:b5:c6:ed:14:5d:
88:2c:07:28:46:c7:99:75:3c:14:9f:cc:5c:61:23:ea:ab:d8:
5f:18:43:63:02:61:be:45:7d:cd:ee:05:95:96:96:d8:9d:3d:
92:ec:e0:08:62:84:68:7e:8d:a1:35:0a:5a:70:98:d7:83:ba:
c8:5c:03:27:65:a4:ab:61:f7:5a:1b:aa:2e:bc:e3:1a:aa:cd:
d9:d9:78:d5:f7:37:24:bd:57:a0:70:57:74:64:59:56:62:92:
38:3d:d9:95:1a:26:cd:46:87:39:b7:52:2c:1f:73:d0:f3:47:
02:c6:74:b9:26:dc:37:a4:2a:6f:7b:50:68:66:64:c3:70:71:
f2:ca:b4:ab:9d:f3:09:03:bc:da:13:94:50:06:72:e7:72:cd:
d7:1e:ec:55:39:e2:20:56:d2:b4:9d:0d:16:f0:82:09:5f:9c:
93:2f:3a:e0:a0:24:82:ee:b5:f4:5f:88:79:6c:16:3e:7e:35:
6a:00:a9:08:75:f9:8d:13:47:5a:ef:bc:16:96:3f:af:1e:68:
e1:91:a9:5b:b2:37:eb:99:b7:95:53:b1:1c:9e:af:64:99:f1:
9f:5a:c8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 02:10:58 2026 by rpki-client