Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
File: 3dBY7vGdEboOq68EbnKibl5XJkM.mft (raw, json)
Hash identifier: fO72viwfO+vlsVNO5knc5iFZWDGGtn6bcxXK1oAfNT4=
Subject key identifier: 42:65:3B:BB:EB:E3:32:2C:FE:42:5B:7D:BE:67:C2:FA:43:02:BF:2A
Authority key identifier: DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
Certificate issuer: /CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Certificate serial: 019EB6C50FB5EBAF92DBAB9C1F6DC262C6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
Manifest number: 016D
Signing time: Thu 11 Jun 2026 13:00:28 +0000
Manifest this update: Thu 11 Jun 2026 13:00:28 +0000
Manifest next update: Fri 12 Jun 2026 13:00:28 +0000
Files and hashes: 1: 3dBY7vGdEboOq68EbnKibl5XJkM.crl (hash: i1vM/wopsU8mz7aiCsmiGHT0bnghNTp8Ktk+++dVCMQ=)
2: 6w_LmvhXnOF2ik3DDNvsrEWVCI8.roa (hash: 6W4Vav7RSMNSHDF7FWCiUK0cI2saEqhD9eRkDI4fbG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:0f:b5:eb:af:92:db:ab:9c:1f:6d:c2:62:c6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Validity
Not Before: Jun 11 13:00:28 2026 GMT
Not After : Jun 12 13:00:28 2026 GMT
Subject: CN=42653bbbebe3322cfe425b7dbe67c2fa4302bf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:fb:12:7a:bf:24:e9:be:71:f8:3f:f7:72:
68:fa:3a:b3:30:c5:5f:fe:c6:fb:e1:33:b4:1e:9b:
7e:2a:02:b4:ff:ea:78:28:94:e6:ea:65:35:8c:e0:
92:18:95:78:32:9b:2a:1f:a4:1b:16:3f:a7:f4:b4:
12:99:6c:da:9c:14:a5:ab:74:c8:ef:62:1f:41:82:
a6:b6:c1:ac:1b:bc:7d:33:55:6f:fc:43:ab:17:eb:
75:33:cc:5d:c0:75:1b:f5:6b:f9:d7:50:c6:65:ac:
61:0f:24:58:f1:99:33:de:62:cd:7e:e8:fc:f0:5f:
d5:5f:a6:ad:a7:26:00:cc:3e:97:7a:fc:d8:75:65:
52:b3:fe:5d:43:0d:8c:80:2d:32:61:9d:8d:22:42:
40:db:78:28:7a:e9:f8:2f:d3:42:f4:61:71:b2:4a:
1c:54:bf:30:7d:5f:70:9f:88:47:bc:99:aa:89:0f:
12:54:4c:18:d6:1b:ed:61:f1:43:97:52:b3:02:cc:
00:c7:25:e9:93:e5:40:f5:6a:d2:99:b8:b4:6f:47:
95:2e:de:b7:6a:9c:ca:04:e4:81:89:a0:ae:a7:11:
ec:fb:dc:a5:b9:30:59:38:26:ba:aa:e1:49:c7:00:
bc:f9:ed:ee:42:9a:2c:d1:94:da:0b:ad:c6:aa:5e:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:65:3B:BB:EB:E3:32:2C:FE:42:5B:7D:BE:67:C2:FA:43:02:BF:2A
X509v3 Authority Key Identifier:
keyid:DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a0:fb:da:65:a0:0e:29:54:e6:18:61:4e:38:a7:ff:82:3a:
3b:a0:ea:5d:7c:81:93:ce:74:ab:12:6f:6f:af:14:c5:b7:e4:
78:4f:a8:51:c0:a8:2d:45:c2:27:40:03:51:00:f1:be:28:19:
86:79:26:f1:15:9d:4e:b0:86:5e:5d:cb:1e:74:d1:94:e4:45:
62:76:25:3b:4e:b1:f2:33:79:d9:96:2b:a1:b7:77:db:5e:67:
2a:9c:bf:2b:6b:e1:f9:7f:b1:84:f0:38:07:e8:02:2f:35:3b:
a2:f4:c5:fd:1f:fb:22:77:9e:33:70:d8:e4:11:9f:b2:83:94:
47:ef:40:21:96:62:8d:d8:32:33:e4:45:c1:99:84:4c:cd:40:
f0:30:f0:05:57:9c:d6:7d:af:12:68:67:cc:19:fe:d8:cc:32:
73:86:8d:28:56:bf:8a:e9:64:35:a4:c3:ed:b7:0b:05:e4:6f:
fa:6d:f3:ca:80:ad:60:bf:12:bc:6b:23:b3:91:1f:85:72:72:
4e:c5:9c:d5:98:e4:f5:48:17:ac:c5:1a:47:0c:c1:cd:b3:b0:
e4:38:01:61:16:c0:58:87:70:b8:2b:3e:47:81:72:38:2a:94:
ef:e8:da:1a:94:44:5b:14:b7:9c:39:8d:7a:4b:ed:9d:95:50:
e3:b0:71:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:26:16 2026 by rpki-client