Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: 25bJmrw2uce3zKSCjvlc8PFmeQZSFFPklAiD3AAXmGk=
Subject key identifier: 40:E8:99:97:34:CD:F7:27:B4:70:48:08:F7:35:EF:5F:1B:0F:3C:A9
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 019F190CABEFB46E2435C2343B0D5312C94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 15:01:28 +0000
Manifest this update: Tue 30 Jun 2026 15:01:28 +0000
Manifest next update: Wed 01 Jul 2026 15:01:28 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: YU5Z7aIzosp45pDGsv5prGrFSJ2IM980JBXCGgSisKU=)
2: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (hash: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I=)
3: qsdjnJflN-hqMusJ8mRO3QvIelE.roa (hash: SE6UiCw/dJG6vG+istEe6e9u75qYp7RLjIy5NUM722g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:ab:ef:b4:6e:24:35:c2:34:3b:0d:53:12:c9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Jun 30 15:01:28 2026 GMT
Not After : Jul 1 15:01:28 2026 GMT
Subject: CN=40e8999734cdf727b4704808f735ef5f1b0f3ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:55:90:71:e7:1f:42:d1:52:d4:2c:3a:44:
63:4b:69:56:6f:b5:3e:1e:84:af:14:20:c3:91:fd:
44:a1:c3:da:62:bc:f2:80:b8:8b:4f:1d:41:f5:e7:
e5:27:d3:ff:94:be:0c:ef:e1:ab:0e:ae:fa:e4:03:
f0:92:54:45:f7:98:68:84:4c:42:4e:f8:ba:05:05:
df:07:c0:05:85:12:bc:c9:67:4b:a4:bc:fb:e1:e8:
08:52:e3:c5:6d:a8:0e:98:48:0e:df:98:1b:05:49:
f8:87:7b:5a:1b:cb:a7:96:0d:d6:15:25:7a:34:80:
13:98:39:ea:9d:27:b1:1a:29:86:bf:e3:96:a0:5f:
3f:f0:2c:4c:39:09:35:a7:9e:ed:73:bb:f2:af:ba:
e4:c7:1f:03:cc:e2:35:2f:17:ae:66:d2:8a:3e:f7:
50:a7:06:24:9d:a4:7e:b8:48:93:09:3b:44:1c:c4:
37:23:94:65:18:8b:ee:34:d0:31:dc:97:41:df:0f:
6f:30:a4:5a:a8:0d:e2:48:c7:bd:2b:28:e2:c8:89:
fb:ff:b3:57:07:9b:77:1c:a6:e0:19:ba:45:c1:96:
05:49:4f:56:6c:a3:18:6b:b2:1f:0e:8a:40:d6:55:
0e:c4:d6:74:43:4b:d5:03:f6:a7:64:fe:86:e7:bc:
8b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E8:99:97:34:CD:F7:27:B4:70:48:08:F7:35:EF:5F:1B:0F:3C:A9
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3b:0d:b4:45:cc:1f:ee:e3:5f:b6:62:66:0f:a0:5d:1c:3f:
f1:13:e9:52:17:d0:23:e0:7c:bd:f0:09:ee:39:77:7d:be:24:
b3:15:f8:8c:03:cd:26:03:0c:1b:d4:03:e2:2a:fc:67:b8:92:
e6:e3:57:51:bf:41:e2:23:66:4d:71:0e:ae:11:33:45:d4:05:
ba:1c:52:be:ac:b0:20:12:2f:9a:dd:54:c0:a6:e2:1b:ab:4f:
a4:f7:bf:91:0a:70:5a:d6:aa:18:d1:38:3d:5c:c0:b1:8e:47:
29:ea:2d:cf:85:8e:ea:68:d1:a0:dd:21:33:16:64:dc:a7:fb:
f6:07:f5:71:a3:50:f4:1d:5e:aa:08:21:1c:08:aa:26:89:c4:
44:c5:ca:b3:f7:e8:07:4b:23:89:6b:b8:11:15:69:a2:f9:bc:
b6:92:76:8f:f6:55:bc:bf:88:7d:2b:0f:02:10:ce:90:69:2d:
73:9e:ed:a8:61:43:11:9b:8d:ab:ab:2f:40:12:a9:11:f2:c4:
f3:13:ab:f8:ff:e8:f6:f1:a8:7a:a4:75:9d:c2:fc:1c:4e:c5:
ef:49:e1:15:83:6f:53:a3:37:eb:f5:fc:19:3c:1d:34:3a:f0:
be:3b:0f:5e:ce:30:71:a6:21:77:3a:62:21:7d:4f:99:d3:2b:
81:2c:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:43 2026 by rpki-client