Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: kcpK4p4gSYzgNvidKd0f4Zlz97Y5DtP6Gax0c5ExBU8=
Subject key identifier: FB:69:79:8F:69:86:34:D0:FF:73:89:93:C7:36:06:D5:B5:BF:1C:D4
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 019F183106F8EEDD49A137E4DF26E4A490BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 133C
Signing time: Tue 30 Jun 2026 11:01:33 +0000
Manifest this update: Tue 30 Jun 2026 11:01:33 +0000
Manifest next update: Wed 01 Jul 2026 11:01:33 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: UFDuIMNXKuflJyVkFipxvEpLwxJsQXWUFKIzqcy3RiU=)
2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:06:f8:ee:dd:49:a1:37:e4:df:26:e4:a4:90:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Jun 30 11:01:33 2026 GMT
Not After : Jul 1 11:01:33 2026 GMT
Subject: CN=fb69798f698634d0ff738993c73606d5b5bf1cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:e1:75:03:84:96:e3:bf:92:1e:85:89:5b:
7a:e1:9f:94:8a:a2:da:c8:9c:b5:a1:bd:59:9b:19:
a4:c8:54:a8:c3:1c:47:74:cd:74:b1:a3:c5:69:f3:
99:f9:44:93:54:63:ce:4f:08:06:d5:a5:b9:db:9b:
a3:f8:8b:73:f8:98:6c:85:9f:47:db:55:24:b3:65:
af:f8:22:f9:a1:2a:eb:ad:94:03:db:fa:19:ff:70:
60:5f:99:96:76:6b:00:1a:b4:fe:28:f5:4a:9f:fb:
e2:cc:21:17:fe:f9:a6:ac:13:67:66:74:0a:7a:fa:
6a:ed:83:79:49:d9:83:c5:65:91:d9:e3:4f:25:b6:
7d:0c:70:da:79:cf:00:db:31:20:0d:fe:55:6a:d3:
d8:b8:ae:0c:2d:d2:b9:51:12:cb:78:ed:ec:25:c1:
8b:af:28:f3:b4:3d:f2:78:1b:87:d0:45:5a:67:be:
06:5e:12:9d:e5:7c:5f:d6:89:5a:5f:1a:18:15:8e:
12:64:2c:2f:95:ea:7a:59:b5:8c:d2:ca:06:a8:85:
1d:6a:1b:a9:d8:98:10:b9:90:62:9d:ac:08:c1:26:
12:8b:da:3c:85:bb:a3:90:fa:57:d2:16:f8:4f:a6:
29:d4:07:79:8d:8c:6e:fb:65:e9:49:1b:e5:03:15:
0d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:69:79:8F:69:86:34:D0:FF:73:89:93:C7:36:06:D5:B5:BF:1C:D4
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b4:ed:7c:e2:96:41:e8:2a:28:dd:df:c2:5f:e7:97:79:92:
56:5b:59:e7:d4:42:c1:5d:29:7b:25:5b:ca:c7:9a:7e:f4:2e:
09:49:2c:0d:1d:31:bd:0f:37:c6:e2:ad:02:c4:74:26:b6:c3:
25:a2:6a:69:f2:e7:72:a6:c4:b2:8e:46:bf:47:80:88:5a:84:
ed:bf:22:df:c2:b5:53:24:c8:1b:d6:5c:e7:b7:3b:fa:94:1d:
a6:65:1a:d5:a6:eb:fa:05:de:84:60:4b:01:80:b2:72:7b:4c:
15:b4:27:89:97:5f:94:83:0d:a7:bd:4c:d6:9e:1b:6f:5a:50:
3e:b3:b9:4b:2c:a4:f7:db:2d:ae:78:a8:0f:7c:49:72:8d:41:
c6:43:6c:7f:dc:00:ff:a2:db:f9:a8:32:57:af:8f:b0:9f:f7:
00:17:df:c8:80:75:00:9a:6c:af:fd:1d:c4:cf:4e:8e:47:4f:
38:a1:20:63:28:38:50:64:9a:3b:e0:3a:94:dc:f0:9c:15:a4:
d6:e7:89:1c:3c:b2:d8:06:d0:3e:6d:f6:ab:2b:52:39:ca:75:
2d:48:64:ab:5c:8a:cf:60:f9:b4:73:10:f3:e5:14:e2:b9:9d:
0d:dc:78:47:04:2e:2c:d4:32:36:24:f8:cc:9d:87:cb:da:dc:
55:30:4a:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMQb47t1JoTfk3ybkpJC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWM1Yzk0NWQwMzUzNWQ5NjczMDk1MTEwNTQ2YjFjOThl
NjE4NjAwHhcNMjYwNjMwMTEwMTMzWhcNMjYwNzAxMTEwMTMzWjAzMTEwLwYDVQQD
EyhmYjY5Nzk4ZjY5ODYzNGQwZmY3Mzg5OTNjNzM2MDZkNWI1YmYxY2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tnhdQOEluO/kh6FiVt64Z+UiqLa
yJy1ob1ZmxmkyFSowxxHdM10saPFafOZ+USTVGPOTwgG1aW525uj+Itz+JhshZ9H
21Uks2Wv+CL5oSrrrZQD2/oZ/3BgX5mWdmsAGrT+KPVKn/vizCEX/vmmrBNnZnQK
evpq7YN5SdmDxWWR2eNPJbZ9DHDaec8A2zEgDf5VatPYuK4MLdK5URLLeO3sJcGL
ryjztD3yeBuH0EVaZ74GXhKd5Xxf1olaXxoYFY4SZCwvlep6WbWM0soGqIUdahup
2JgQuZBinawIwSYSi9o8hbujkPpX0hb4T6Yp1Ad5jYxu+2XpSRvlAxUNDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtpeY9phjTQ/3OJk8c2BtW1vxzUMB8GA1UdIwQY
MBaAFN/sXJRdA1NdlnMJURBUaxyY5hhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYt
ZGRkZGVmMjQxMjE2LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYtZGRkZGVmMjQxMjE2
LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbTtfOKW
QegqKN3fwl/nl3mSVltZ59RCwV0peyVbyseafvQuCUksDR0xvQ83xuKtAsR0JrbD
JaJqafLncqbEso5Gv0eAiFqE7b8i38K1UyTIG9Zc57c7+pQdpmUa1abr+gXehGBL
AYCycntMFbQniZdflIMNp71M1p4bb1pQPrO5Syyk99strnioD3xJco1BxkNsf9wA
/6Lb+agyV6+PsJ/3ABffyIB1AJpsr/0dxM9OjkdPOKEgYyg4UGSaO+A6lNzwnBWk
1ueJHDyy2AbQPm32qytSOcp1LUhkq1yKz2D5tHMQ8+UU4rmdDdx4RwQuLNQyNiT4
zJ2Hy9rcVTBK2A==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:22 2026 by rpki-client