Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: EMBr5E1UMjW5poFXESDZ0IRvZVpSRwVRWQ/CjykuDfE=
Subject key identifier: D9:86:F8:C6:E0:0C:89:A5:F5:CA:16:4F:FA:D5:14:A9:ED:8C:80:46
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 019F18D67683D278AB45F737599C35E041B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 14:02:15 +0000
Manifest this update: Tue 30 Jun 2026 14:02:15 +0000
Manifest next update: Wed 01 Jul 2026 14:02:15 +0000
Files and hashes: 1: 1YkIJofGDPbAKhB5ldovfVVJQaQ.roa (hash: ft15usCMKxpuecv7eKItu1OCSt1aYNUn7zhbarfUJ4o=)
2: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: b8VxqJ5GSg+zUFGaUNkqZoqc70wdey7WlZ+83/V9/Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:76:83:d2:78:ab:45:f7:37:59:9c:35:e0:41:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Jun 30 14:02:15 2026 GMT
Not After : Jul 1 14:02:15 2026 GMT
Subject: CN=d986f8c6e00c89a5f5ca164ffad514a9ed8c8046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a8:86:74:f2:82:c8:61:f0:20:ed:b2:48:4e:
ed:ce:e2:93:64:1d:60:8a:8c:dd:24:09:63:cc:5f:
66:6b:d1:67:00:56:15:72:a1:c4:5e:d1:8e:20:dc:
71:d3:2b:f9:5a:dc:54:96:ca:df:6d:e1:4b:50:1a:
e3:c8:89:31:09:ec:9b:e8:9c:a1:56:d5:a0:b5:99:
3c:59:ba:22:12:db:bf:c2:30:93:d6:4a:b0:f3:d2:
ec:d4:17:39:76:ad:e7:31:55:b6:d5:d3:bc:c7:30:
1d:35:30:db:6e:ab:48:d7:54:42:59:3a:0e:db:eb:
c8:c1:12:37:20:97:7e:41:da:27:00:e6:af:b1:66:
01:ea:3e:1e:3c:73:85:bc:f6:ec:5e:c0:ee:c7:43:
af:95:c1:5d:bb:53:70:4b:fa:c8:e0:95:97:33:51:
5d:d4:39:b0:d5:2d:e3:fc:e4:84:44:41:7d:eb:4e:
f8:2e:75:1b:86:95:50:ca:09:51:e8:6f:6d:37:c0:
ef:bb:3c:96:b8:92:9d:22:62:9f:50:a6:22:3b:f1:
3c:8b:7b:90:60:e0:9a:a2:cb:71:d1:bb:b4:65:bf:
1a:48:13:5b:c5:8e:5a:36:61:74:c4:65:ec:c0:8b:
5c:7f:16:4f:63:a3:5d:11:c6:31:25:9e:b6:09:72:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:86:F8:C6:E0:0C:89:A5:F5:CA:16:4F:FA:D5:14:A9:ED:8C:80:46
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e0:78:5e:b2:90:14:a8:84:6e:8f:7d:3b:69:fd:46:1a:2a:
d8:32:00:ab:b4:dc:a7:5a:bc:44:7a:64:8b:97:da:54:66:46:
7f:39:c8:91:ce:e3:be:e4:fe:a0:79:43:bb:c4:19:8a:f8:b6:
6f:10:1c:1a:d3:0a:ed:8d:a4:f1:b4:4b:e2:9b:eb:c7:95:9c:
f4:37:47:13:62:c8:3c:4d:91:a2:06:a9:0f:d5:6d:5d:a1:b8:
ec:25:bb:b9:78:84:fb:ea:4e:a1:9a:d3:92:fa:dc:8c:f9:a0:
e2:14:ec:cd:b2:29:8b:d4:d6:52:0f:af:e3:40:a5:ab:46:ec:
c4:32:c0:b7:7d:a4:02:d6:6f:7a:8c:1a:b3:0b:92:3e:f8:ae:
4d:6f:e4:42:e0:e7:90:fe:f0:55:c7:6f:53:76:6c:c8:a0:cd:
6c:a9:00:75:e7:9b:13:b4:a4:5a:3d:45:98:45:6b:b8:36:00:
eb:73:7e:cb:64:d9:39:81:e8:a1:60:0f:c8:11:4c:eb:85:38:
e5:e1:6c:fd:9d:5d:34:40:87:20:e2:7d:33:4e:05:8a:02:bc:
ec:26:b2:09:c5:bf:3d:c9:00:81:34:86:a0:c5:d0:17:c2:f2:
78:37:e2:94:4a:2b:80:b6:d8:14:df:fe:5d:e7:c3:ea:4b:b2:
b5:3c:eb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:33 2026 by rpki-client