Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: fwj7pGiZ1j0P1xTcReEq66Ezm3uu+C1vn2RdPJ94OMg=
Subject key identifier: 87:62:9E:C1:43:3E:4E:3C:C3:70:61:D6:32:90:33:3F:52:CD:CD:BB
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 019F18D6D02F393C0DAADB7ADCCB39B74242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 1964
Signing time: Tue 30 Jun 2026 14:02:38 +0000
Manifest this update: Tue 30 Jun 2026 14:02:38 +0000
Manifest next update: Wed 01 Jul 2026 14:02:38 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: maDTN1sa2ZG8dPxLTXp9/GXE15Sb02xjFMhuQhoY1Bo=)
2: I_klKsqV4Xc27UFkAneEsuB-gHk.roa (hash: AkW1e4Xf71kIFS8tvO/5F4giqlxcvlPyuHSMW67qHI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:d0:2f:39:3c:0d:aa:db:7a:dc:cb:39:b7:42:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Jun 30 14:02:38 2026 GMT
Not After : Jul 1 14:02:38 2026 GMT
Subject: CN=87629ec1433e4e3cc37061d63290333f52cdcdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:aa:3b:b3:65:e3:9d:56:81:ef:fb:97:cb:
7e:f5:5e:d4:5a:e8:9e:d1:dc:8c:a5:2d:46:db:e7:
22:37:63:a3:eb:b1:d0:c1:07:6e:ba:27:49:e2:4f:
41:07:af:46:17:d0:e6:d6:15:05:20:f0:ab:31:cf:
44:12:04:a9:d1:89:9b:f2:ff:e1:da:23:2f:d8:4e:
41:c0:75:06:e0:1b:b5:43:21:0c:c6:c9:48:cc:6e:
22:fd:7d:17:eb:b2:b4:71:aa:7c:98:73:f2:96:6c:
b5:08:ee:55:7b:6a:1a:9d:32:4a:cc:7d:f8:06:37:
d1:e3:04:7b:8e:95:e6:d0:30:f8:9c:cd:a1:25:83:
00:b3:35:e9:c5:6b:d7:3b:b1:e7:7e:10:98:82:c3:
b6:5d:6a:a7:96:13:32:a6:b1:10:bb:e0:0c:3e:e9:
c8:c4:95:77:2e:ab:12:e0:41:ce:6f:e6:96:08:51:
0a:bb:10:80:0a:ec:83:b1:cf:42:27:95:a8:a1:63:
88:ba:ef:fc:4b:e3:cd:9e:09:f3:64:09:5b:50:59:
17:34:5f:28:15:0c:d6:33:5c:e0:20:d1:15:f5:88:
bd:67:7f:8d:19:2b:44:20:34:9f:fc:fa:1b:64:e1:
4c:de:e9:8c:d2:32:cd:6b:71:be:00:16:ab:8c:55:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:62:9E:C1:43:3E:4E:3C:C3:70:61:D6:32:90:33:3F:52:CD:CD:BB
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1b:2a:20:1b:f4:c9:7e:41:dc:02:d1:68:85:53:1a:b7:5c:
57:a3:b8:02:bc:a5:3b:a9:39:74:fd:1e:38:71:a5:4d:7e:1a:
69:45:7c:b7:85:bd:9b:e8:60:e2:70:bb:5d:8e:1e:e4:7e:17:
9d:0d:e0:9e:dc:9f:ef:00:84:8b:02:7a:37:e3:52:67:f5:2b:
38:c3:28:2a:32:72:31:a4:ae:ee:4e:87:14:7b:05:87:87:7b:
09:d2:8d:e5:a4:a9:6e:f8:56:81:e3:a2:0d:20:f5:ab:e8:2e:
6b:1e:03:bd:4b:d7:d2:98:c9:77:e8:20:49:44:ef:98:50:c6:
bf:e4:97:40:60:07:d5:94:e4:b3:b4:7c:4e:76:7f:c4:dc:7f:
2e:61:e0:03:ef:f7:95:ea:de:5f:38:3d:df:80:e9:f6:aa:7a:
43:30:8b:01:5a:72:02:fe:d1:03:0a:fc:f3:74:b0:4c:83:08:
b4:00:6f:2b:a9:69:69:e6:49:c0:3b:cf:75:a3:b7:5d:c5:07:
8c:1f:3e:98:91:3f:be:4c:a8:bc:84:04:df:93:5b:4b:0e:74:
05:30:3b:ff:4e:a6:c9:b2:01:16:ef:18:9a:e5:c9:10:f4:a9:
9f:4b:f6:fd:ce:7f:88:fe:d1:cb:f1:2c:1a:3a:0f:9d:68:83:
70:32:b8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:42 2026 by rpki-client