Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier: RsU/M5xhIJKtkGsClB7hpCjEyds0mr0fs4Hhb/FgcnI=
Subject key identifier: 1D:55:24:BF:D2:C3:46:B7:EF:54:E0:C6:CB:24:27:6F:DD:B9:03:BB
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 019F17F9E2188520ACEAF98E47E4A4AF4D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number: 165E
Signing time: Tue 30 Jun 2026 10:01:19 +0000
Manifest this update: Tue 30 Jun 2026 10:01:19 +0000
Manifest next update: Wed 01 Jul 2026 10:01:19 +0000
Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: RePVGKDsf0wWLQLIvv8S8SqmHQYreaTLTSJD1aF8hZ0=)
2: QkgMfGMyuSgoLTqRtj3rvepp9lM.roa (hash: SZyDNV8jKwjMVASMH9KvMwuDodmFVa99uOn85IdE4bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:e2:18:85:20:ac:ea:f9:8e:47:e4:a4:af:4d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: Jun 30 10:01:19 2026 GMT
Not After : Jul 1 10:01:19 2026 GMT
Subject: CN=1d5524bfd2c346b7ef54e0c6cb24276fddb903bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:8a:9b:e2:f9:b9:95:11:97:3d:5f:6a:82:
c6:92:cc:eb:44:8c:94:17:55:84:7b:d2:00:24:37:
4c:56:a0:1a:ca:c1:60:e8:35:f7:7a:a4:d0:18:b9:
a7:dd:26:63:b4:f2:cd:91:55:b2:81:71:7c:61:27:
43:bf:0e:b5:d6:c8:64:98:09:95:88:6b:77:7a:50:
2d:d4:c7:ae:00:fc:2b:e6:1f:01:62:14:b6:10:fa:
db:72:bd:2d:27:f0:55:41:b1:a7:65:a1:09:76:c3:
26:53:15:06:8e:0d:75:19:e3:c4:0c:7e:cf:1e:e8:
46:30:6f:4d:89:ac:19:58:9e:5e:0f:31:a5:34:8e:
20:f2:00:2c:97:a4:c6:dd:a1:a1:b3:61:1c:72:56:
65:ae:a7:92:c1:30:18:ac:b7:0f:65:a8:a4:f0:cd:
e6:b6:b2:ee:65:b9:9a:dd:e0:62:ed:b2:8a:fe:8b:
40:1e:d2:ba:a1:0f:14:48:19:02:8e:9a:84:45:ab:
b3:79:00:53:ba:5d:b5:cb:b5:96:3c:3c:79:aa:b8:
59:fd:4d:10:6a:bd:59:8c:ba:84:7e:b4:67:87:e6:
ed:0c:ba:a0:c4:96:8f:71:64:fe:47:2f:6b:8b:6a:
30:76:8f:44:6f:cc:5a:bd:ed:ae:53:0d:15:df:59:
1a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:55:24:BF:D2:C3:46:B7:EF:54:E0:C6:CB:24:27:6F:DD:B9:03:BB
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d7:c9:40:65:82:3a:e6:d2:97:3c:0a:e5:5f:74:d1:21:d6:
98:53:7c:1f:9e:e6:b3:6b:1b:aa:91:aa:e6:ec:fe:c5:9d:30:
ff:b1:f9:a6:12:c4:d9:ea:db:11:3b:56:62:cf:64:ec:da:19:
42:df:a9:b6:6e:df:07:f0:b0:be:6b:be:62:0c:06:a0:5b:8f:
00:4b:8c:c9:78:03:db:0d:f5:16:60:55:e4:02:36:46:c6:52:
f1:b5:61:d6:16:f4:c2:08:88:ba:af:96:6b:a8:4f:9d:21:f6:
b6:07:bc:56:2e:c4:15:e4:92:f7:51:6f:fb:94:81:c2:3c:aa:
1f:82:ce:9a:38:de:89:a4:9c:91:bc:83:3a:35:db:ef:af:ce:
e1:43:af:45:bd:b2:32:06:96:e5:49:dd:e6:52:77:86:ff:a1:
17:bd:ab:03:e4:b2:8d:50:98:af:de:1d:82:75:8d:3c:d3:10:
ab:ff:96:74:37:d4:a1:de:36:8b:e3:e5:c5:a6:71:0b:3a:23:
a3:48:5e:3a:cc:6e:22:a1:f2:7d:38:23:13:97:d6:61:1e:13:
53:06:34:84:2a:bc:8d:76:56:3e:8e:3c:38:d1:58:5f:1a:d7:
cb:85:82:7a:5b:bf:65:8d:f9:37:2c:ad:18:0f:4b:31:5f:3f:
ab:2d:b8:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+eIYhSCs6vmOR+Skr00dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOWZmNjE5NTA5NmEwOThjMTkyODE1NDhlNDEwN2I4Njdj
NzNhZmYwHhcNMjYwNjMwMTAwMTE5WhcNMjYwNzAxMTAwMTE5WjAzMTEwLwYDVQQD
EygxZDU1MjRiZmQyYzM0NmI3ZWY1NGUwYzZjYjI0Mjc2ZmRkYjkwM2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4KKm+L5uZURlz1faoLGkszrRIyU
F1WEe9IAJDdMVqAaysFg6DX3eqTQGLmn3SZjtPLNkVWygXF8YSdDvw611shkmAmV
iGt3elAt1MeuAPwr5h8BYhS2EPrbcr0tJ/BVQbGnZaEJdsMmUxUGjg11GePEDH7P
HuhGMG9NiawZWJ5eDzGlNI4g8gAsl6TG3aGhs2EcclZlrqeSwTAYrLcPZaik8M3m
trLuZbma3eBi7bKK/otAHtK6oQ8USBkCjpqERauzeQBTul21y7WWPDx5qrhZ/U0Q
ar1ZjLqEfrRnh+btDLqgxJaPcWT+Ry9ri2owdo9Eb8xave2uUw0V31kaIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1VJL/Sw0a371TgxsskJ2/duQO7MB8GA1UdIwQY
MBaAFN6f9hlQlqCYwZKBVI5BB7hnxzr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83MzY3OWEtY2IwMS00M2NkLTkyNDUt
YTI5YzZkYWUzNWMwLzEvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83MzY3OWEtY2IwMS00M2NkLTkyNDUtYTI5YzZkYWUzNWMw
LzEvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtfJQGWC
OubSlzwK5V900SHWmFN8H57ms2sbqpGq5uz+xZ0w/7H5phLE2erbETtWYs9k7NoZ
Qt+ptm7fB/Cwvmu+YgwGoFuPAEuMyXgD2w31FmBV5AI2RsZS8bVh1hb0wgiIuq+W
a6hPnSH2tge8Vi7EFeSS91Fv+5SBwjyqH4LOmjjeiaSckbyDOjXb76/O4UOvRb2y
MgaW5Und5lJ3hv+hF72rA+SyjVCYr94dgnWNPNMQq/+WdDfUod42i+PlxaZxCzoj
o0heOsxuIqHyfTgjE5fWYR4TUwY0hCq8jXZWPo48ONFYXxrXy4WCelu/ZY35Nyyt
GA9LMV8/qy24Ug==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:04 2026 by rpki-client