Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: 1Bx8uXT1dnUvZEEvcV/ymaeEt7EdjpHmMDwdXjTQT2c=
Subject key identifier: D6:55:31:0E:7F:08:65:28:67:3F:C1:CC:25:2F:90:81:4D:0C:F0:3C
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019EB76A0A88FD29391132F77B924EC21D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 195E
Signing time: Thu 11 Jun 2026 16:00:40 +0000
Manifest this update: Thu 11 Jun 2026 16:00:40 +0000
Manifest next update: Fri 12 Jun 2026 16:00:40 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: WtSvoW0FdMpGyWW48HhhlP+sWcnfGCriL24L+KkzfCU=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:0a:88:fd:29:39:11:32:f7:7b:92:4e:c2:1d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Jun 11 16:00:40 2026 GMT
Not After : Jun 12 16:00:40 2026 GMT
Subject: CN=d655310e7f086528673fc1cc252f90814d0cf03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:87:73:8c:c8:ac:50:b8:ed:25:f4:25:0c:
20:e5:03:4e:23:93:b1:a1:0d:84:51:fc:e7:f4:95:
29:2f:91:1b:62:b0:2f:dd:3d:91:06:46:3d:1f:19:
b2:d9:96:8a:ff:11:64:a6:40:69:03:6c:ed:4e:1a:
ce:22:ec:42:58:b4:88:df:ce:f4:88:07:d2:b0:ea:
ee:07:2b:4a:f7:4d:b0:88:c7:d5:4a:be:a6:d7:61:
3b:17:4c:c9:74:0f:24:b3:26:e7:3c:2c:62:a9:63:
80:fc:14:04:ef:73:fa:22:63:17:7a:b2:6a:10:e3:
49:b3:bb:1c:ee:c2:ef:aa:35:d1:d6:29:f6:e0:7c:
37:f2:34:14:dd:cc:fa:bf:18:32:03:bb:78:fa:17:
03:68:7f:de:cc:78:ad:4e:1e:60:4b:1e:9f:57:ec:
93:fc:75:eb:da:02:37:9c:8d:52:91:73:15:df:89:
cc:bc:52:fd:f9:56:46:f8:f0:92:58:a4:aa:e4:06:
2e:39:44:ac:ea:09:84:df:f2:bc:11:80:6a:d2:66:
ed:68:81:ba:4c:95:10:2d:c5:28:c9:0a:e2:6a:87:
7e:22:f6:04:44:bb:c8:a2:59:a4:49:0d:bd:c6:bd:
df:58:af:13:5f:09:12:36:4a:26:d5:07:0d:ff:7f:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:55:31:0E:7F:08:65:28:67:3F:C1:CC:25:2F:90:81:4D:0C:F0:3C
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:82:e7:b7:f4:09:bf:13:2d:c1:90:fb:18:75:d4:43:92:f4:
f0:a9:3c:0c:ab:bb:6a:d2:1a:c6:70:ec:48:11:86:f4:aa:3d:
9a:10:ab:05:54:80:ba:c3:f5:79:ea:5e:1f:38:5a:9f:db:07:
c8:81:92:83:30:c2:6c:d6:67:c5:eb:34:f8:66:ec:2b:9c:05:
b8:81:de:13:3e:1a:61:49:9e:b5:68:ea:82:7d:01:87:54:50:
9e:9d:22:8d:80:24:8b:a9:a4:58:b8:e6:ae:bd:f1:9f:83:0b:
59:df:41:d7:79:bd:a0:c5:27:90:3d:bd:66:8a:f9:71:50:fd:
cb:f7:50:94:17:38:b1:39:84:27:ee:b6:40:f2:5a:b6:55:b6:
9b:ec:ff:37:1c:ca:8a:f4:82:0f:7c:41:13:c2:f4:91:b0:4e:
17:af:44:01:ce:6e:24:4c:72:a8:79:a1:f2:2c:e2:97:54:e0:
58:24:7a:4a:40:24:e7:c5:31:4e:20:45:a9:cb:a9:b8:2d:77:
de:bc:08:28:c0:63:b7:49:e3:bf:c2:3d:2d:bc:68:e3:a5:d5:
e7:00:36:96:93:f2:a8:78:6a:09:7f:3b:08:60:67:d5:fb:45:
93:7a:11:c9:f9:33:83:46:fa:04:99:c6:5b:d5:c5:1a:31:22:
40:ec:07:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:12 2026 by rpki-client