Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier: w+katuxqLQG6lgB3P+oRXa/8d2gOpL5MqUGG568B5zo=
Subject key identifier: C1:F1:B2:55:07:2F:84:53:49:BA:F6:9A:54:5A:09:5B:46:08:41:88
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial: 019F17F90E0A8E677A0A9A3520FEACF263A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number: 0CA6
Signing time: Tue 30 Jun 2026 10:00:25 +0000
Manifest this update: Tue 30 Jun 2026 10:00:25 +0000
Manifest next update: Wed 01 Jul 2026 10:00:25 +0000
Files and hashes: 1: 3eK1ZL7O23CEW3-d4NQhqQce6UE.roa (hash: MyvSzm1E1BuNXsJH9y2br5JSC+bFdaTi0xbtRaMTOVk=)
2: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: aGvXf9RX3D4dVu/zQoISWJVodvL5fGiwbXvBKwtK+FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:0e:0a:8e:67:7a:0a:9a:35:20:fe:ac:f2:63:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Validity
Not Before: Jun 30 10:00:25 2026 GMT
Not After : Jul 1 10:00:25 2026 GMT
Subject: CN=c1f1b255072f845349baf69a545a095b46084188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:77:ee:ed:5b:75:96:34:91:c8:59:0a:e8:
27:d7:b1:5e:6f:fd:30:22:5c:04:2c:8f:c2:8d:b9:
35:bd:b2:90:8b:9f:e4:10:ca:79:47:f6:cf:33:04:
91:25:40:f0:ff:04:ba:74:02:4e:76:b7:96:aa:24:
c6:4c:11:62:f4:a2:1f:70:59:d6:3f:a9:87:a0:7e:
ce:b9:8a:4f:23:be:67:0a:37:19:b5:6c:89:a1:58:
4f:41:cb:ac:87:4d:cc:6d:2b:f6:4e:1f:a1:fd:27:
ee:cf:db:51:60:fc:6e:d3:bd:16:4a:fa:81:ad:db:
9f:7b:6b:c8:9c:84:40:e0:71:0a:94:a9:d5:a3:20:
30:46:df:6b:96:1c:89:8e:ec:cc:b5:36:1b:92:d0:
93:47:d7:a6:57:9e:cb:94:70:23:f2:a3:2a:ee:60:
87:d7:08:e6:7b:5c:db:1b:79:55:bb:1b:98:fa:96:
83:71:19:03:25:3e:3b:ae:a9:5b:17:4f:1a:45:d0:
28:cf:91:ae:e9:5d:51:82:7c:03:d2:32:81:f5:a8:
82:78:bf:ad:61:8b:68:14:94:5f:02:4a:f2:0f:0c:
9a:73:05:16:ef:30:c3:e7:f9:fa:e8:ba:e9:11:f5:
87:ec:e7:a6:02:a7:f1:e1:6a:d0:64:fb:c1:b3:61:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:B2:55:07:2F:84:53:49:BA:F6:9A:54:5A:09:5B:46:08:41:88
X509v3 Authority Key Identifier:
keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:79:08:6d:73:5a:6a:3c:ce:1d:09:2c:8f:c5:d8:69:7d:ed:
d2:bd:79:db:19:fe:80:65:67:1f:1e:ca:b3:00:fb:6b:50:de:
3d:a8:a7:14:c8:5e:61:c6:28:a0:c6:5a:38:fd:2d:98:05:c8:
ad:bd:d9:17:36:f7:b8:1c:9e:fd:58:2c:99:f8:bf:4a:6b:45:
87:32:ae:23:00:3f:79:62:46:48:f3:5c:c9:0a:ca:1f:cf:87:
67:39:c2:48:35:fc:71:06:b3:43:77:74:f2:59:af:e3:8f:25:
c9:fd:34:e3:f7:2b:e2:8c:4e:2c:6d:78:74:35:ad:36:85:34:
ad:e4:4e:ec:b6:5f:42:df:f3:2a:55:4f:49:23:f0:91:93:98:
bd:6d:8f:1c:ba:79:af:05:64:ff:d2:6e:db:46:66:a4:6b:5f:
30:07:70:7a:6f:20:cb:92:c1:e6:ff:76:c8:47:d7:49:72:7d:
82:70:78:16:60:89:82:6c:29:46:c5:fa:18:7f:d6:79:fe:70:
3e:67:d1:5d:16:fd:1a:79:6f:1a:8f:84:8f:83:b7:85:b3:0c:
f5:77:ee:92:14:11:ef:54:11:f6:13:99:d3:55:fc:84:cf:b1:
dd:cd:20:07:5f:34:5b:a9:cf:ba:83:0a:e8:f7:e5:fe:e8:b3:
0c:cb:ce:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+Q4Kjmd6Cpo1IP6s8mOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjIwYTA2ODViNmZlOTc1NGNhMjI0ODY3NzViMmQ4YTdl
OWMxMWUwHhcNMjYwNjMwMTAwMDI1WhcNMjYwNzAxMTAwMDI1WjAzMTEwLwYDVQQD
EyhjMWYxYjI1NTA3MmY4NDUzNDliYWY2OWE1NDVhMDk1YjQ2MDg0MTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT137u1bdZY0kchZCugn17Feb/0w
IlwELI/Cjbk1vbKQi5/kEMp5R/bPMwSRJUDw/wS6dAJOdreWqiTGTBFi9KIfcFnW
P6mHoH7OuYpPI75nCjcZtWyJoVhPQcush03MbSv2Th+h/Sfuz9tRYPxu070WSvqB
rdufe2vInIRA4HEKlKnVoyAwRt9rlhyJjuzMtTYbktCTR9emV57LlHAj8qMq7mCH
1wjme1zbG3lVuxuY+paDcRkDJT47rqlbF08aRdAoz5Gu6V1RgnwD0jKB9aiCeL+t
YYtoFJRfAkryDwyacwUW7zDD5/n66LrpEfWH7OemAqfx4WrQZPvBs2HlxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHxslUHL4RTSbr2mlRaCVtGCEGIMB8GA1UdIwQY
MBaAFN3yCgaFtv6XVMoiSGd1stin6cEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTRjNzgtNGJkMC00M2Q4LTgxNGYt
NTgzNDlmNzQwZTk2LzEvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS81OTRjNzgtNGJkMC00M2Q4LTgxNGYtNTgzNDlmNzQwZTk2
LzEvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHkIbXNa
ajzOHQksj8XYaX3t0r152xn+gGVnHx7KswD7a1DePainFMheYcYooMZaOP0tmAXI
rb3ZFzb3uBye/Vgsmfi/SmtFhzKuIwA/eWJGSPNcyQrKH8+HZznCSDX8cQazQ3d0
8lmv448lyf004/cr4oxOLG14dDWtNoU0reRO7LZfQt/zKlVPSSPwkZOYvW2PHLp5
rwVk/9Ju20ZmpGtfMAdwem8gy5LB5v92yEfXSXJ9gnB4FmCJgmwpRsX6GH/Wef5w
PmfRXRb9GnlvGo+Ej4O3hbMM9XfukhQR71QR9hOZ01X8hM+x3c0gB180W6nPuoMK
6Pfl/uizDMvOfw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:49 2026 by rpki-client