Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: g1pqxQSf4ciJ8vc0WZ/5gUWWDMWEdpveFRydWlL/X0E=
Subject key identifier: 46:C4:17:56:78:5E:07:65:C0:D2:D5:F8:7E:D2:3D:C4:EE:69:E2:19
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 019F1943D260CBDB8594ECE549F1AD112324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 106D
Signing time: Tue 30 Jun 2026 16:01:42 +0000
Manifest this update: Tue 30 Jun 2026 16:01:42 +0000
Manifest next update: Wed 01 Jul 2026 16:01:42 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: x8AcUZ4gcIMPtBxk91JqWzK5vakilIScGGNGAYeb33s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:d2:60:cb:db:85:94:ec:e5:49:f1:ad:11:23:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Jun 30 16:01:42 2026 GMT
Not After : Jul 1 16:01:42 2026 GMT
Subject: CN=46c41756785e0765c0d2d5f87ed23dc4ee69e219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e6:14:92:b0:f7:b6:a2:9f:39:19:08:b8:e1:
aa:7b:b8:42:14:e2:da:76:c9:9e:54:d5:3f:8d:8c:
98:ae:97:e4:0c:98:52:56:83:58:46:b1:39:7e:8c:
ef:9d:73:de:72:d1:e7:30:2f:37:f2:de:12:d2:7f:
aa:56:3f:42:1c:3c:11:ed:72:8a:69:2c:d8:3c:54:
73:0a:69:54:93:d7:f8:3f:4a:44:57:8b:1c:74:b3:
05:2a:ee:02:14:b5:3f:23:7a:bf:4b:c3:a8:fa:b4:
ac:43:c8:34:55:32:ac:e4:2c:90:17:8d:bc:bf:f6:
e9:27:cb:6e:f6:bf:a4:df:c4:15:f6:9d:88:80:41:
14:a6:fc:4a:74:d2:bb:55:44:a4:3a:c3:71:cf:22:
cd:6c:73:ca:5e:1d:56:3f:3c:75:8f:f0:b9:9b:89:
02:e6:c1:48:7d:0e:f6:ee:64:30:ed:17:f9:4b:3d:
ec:9b:bd:26:da:73:4a:7a:e0:4f:46:25:ff:95:c0:
52:d7:9a:4e:cf:b7:75:e0:05:d5:19:64:0b:3a:30:
f2:70:98:2d:a7:db:ce:21:63:b4:4f:63:cc:3d:a8:
43:6a:e7:f0:6d:16:93:55:04:94:f5:0b:60:3c:b2:
5c:69:a4:e4:8f:86:f0:de:86:8b:f6:82:e3:55:70:
91:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C4:17:56:78:5E:07:65:C0:D2:D5:F8:7E:D2:3D:C4:EE:69:E2:19
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e9:8e:3f:72:22:00:49:36:e4:60:3c:7c:02:0b:b1:2a:17:
44:bb:e4:66:1b:bd:59:06:24:7e:35:67:f5:7f:85:c8:72:00:
f8:82:25:3f:b6:ed:3d:55:f7:7c:51:5b:b2:22:f7:2a:9c:b6:
c7:8b:fe:c9:cd:d7:49:27:4b:5e:5e:e0:0d:48:4f:24:97:d8:
d4:4c:80:66:f4:30:d9:aa:78:d3:68:d9:be:13:26:35:c5:05:
82:6f:28:91:1f:c5:b3:dc:c2:12:12:2f:f4:18:6e:91:a2:7a:
4c:15:74:6a:c9:b5:19:c1:af:9a:13:d2:f1:d9:16:4c:a7:4f:
57:b7:00:e3:b4:92:59:c2:db:7a:e1:b4:8a:f8:20:31:9b:e2:
66:7a:42:38:0c:27:dc:18:2c:9c:c9:ad:14:06:d1:b2:b6:de:
7f:ea:25:74:f8:17:c1:ca:53:9c:da:85:7c:a9:d0:b2:a5:ee:
32:91:8c:83:88:ca:33:23:cd:f3:b3:3a:37:eb:56:ce:a3:93:
55:6f:33:fc:80:d8:1f:99:de:ce:f3:5c:b5:f1:f0:68:c7:56:
05:63:66:b5:ac:22:88:ec:7a:59:f5:55:2a:e2:67:9e:85:9e:
46:66:ef:35:dc:1a:93:73:13:8b:6d:93:ad:23:7f:a0:b9:2c:
8f:57:7d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:55 2026 by rpki-client