Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: Bqh5l3kXdW4EHmLoClMRKa9T4BDTXKGkys5391GB6OE=
Subject key identifier: 3B:73:D1:13:02:37:9F:76:E8:45:9E:7B:C6:63:52:38:03:EA:9B:16
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 019F1867CDDE39E817CE92EA4FBB484C55D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 12CC
Signing time: Tue 30 Jun 2026 12:01:23 +0000
Manifest this update: Tue 30 Jun 2026 12:01:23 +0000
Manifest next update: Wed 01 Jul 2026 12:01:23 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: kYFoIENXc3jn5GDVOUe4JHF9ETlvtEHyXwIt6WYn0A4=)
2: XOAJzQ9VwXh6TB5qa8PPijbh2aU.roa (hash: M8IPys/5UHBrIndSXlL2fp5Vz45fcZszjNzRdsRKs8k=)
3: wGffXotQutM5YPxgbpljeS3a9Gg.roa (hash: mICd/WsUOrkWcP68fCHD3+9zyqzcoi13I1Pp/yVs0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:cd:de:39:e8:17:ce:92:ea:4f:bb:48:4c:55:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Jun 30 12:01:23 2026 GMT
Not After : Jul 1 12:01:23 2026 GMT
Subject: CN=3b73d11302379f76e8459e7bc663523803ea9b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:28:2d:74:ee:e9:1b:8b:77:1d:80:ab:12:
e7:63:9e:e0:54:0e:97:6d:6d:96:0c:da:70:e7:b7:
16:f0:ee:4b:64:e3:83:4d:7f:36:e5:7e:6d:27:fc:
38:f1:14:4d:4d:bf:4e:9e:37:8b:b9:6d:a8:19:52:
d2:52:19:37:47:fe:69:f7:d2:f9:b8:13:d0:e7:38:
e1:90:a6:65:8b:b4:d7:b1:2b:eb:e4:ea:50:bc:e6:
53:1b:99:40:59:b0:af:3f:dd:a8:fc:fb:90:27:55:
f4:07:21:40:20:3b:94:1f:1d:4b:e9:82:9e:b4:30:
06:98:d3:b1:18:3e:d6:94:a9:93:c6:2d:fe:ed:b7:
9e:b8:5a:76:f3:8b:af:65:e2:aa:08:4a:81:39:a7:
05:32:06:17:7d:a9:ac:a9:35:b2:30:8b:9e:78:03:
27:c9:09:74:3d:17:0c:a1:f0:9c:cf:d6:34:ce:5a:
68:18:4e:3b:5b:39:4d:15:3e:57:c1:71:8c:71:30:
58:ae:6a:a3:a5:cc:64:44:8d:1c:a3:13:fd:d7:bf:
76:d8:74:53:7b:7e:63:1d:0b:c2:41:cd:5c:d3:72:
11:3f:d9:34:58:55:c2:87:ec:49:42:e1:81:5b:37:
44:61:92:b4:96:43:83:f9:3a:92:6f:9c:83:e1:02:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:73:D1:13:02:37:9F:76:E8:45:9E:7B:C6:63:52:38:03:EA:9B:16
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:84:ff:88:64:55:e4:eb:41:b3:98:71:b3:75:e1:aa:d7:ef:
8c:22:4e:3d:3f:04:88:36:6b:86:28:bd:0e:18:0e:9b:d4:7a:
82:29:a9:19:2a:51:4b:bc:50:2a:28:c8:1c:59:ff:8c:a3:db:
40:24:ad:ca:fc:41:b5:3a:85:4a:6f:16:71:fb:b4:f4:6c:ba:
bb:63:31:4a:5b:d5:6b:7c:5a:a4:04:66:98:55:07:a5:36:0d:
46:00:90:fe:b9:31:c5:1c:d2:26:c7:bb:cb:4e:5d:e8:7d:df:
7b:22:3f:d9:2c:36:94:e6:7f:26:82:76:51:80:3d:dc:9f:c7:
16:22:f8:29:0a:f1:24:37:2f:21:b0:de:4e:d8:e8:33:e7:4d:
a5:fa:69:70:b1:76:61:9a:95:d5:0e:b5:05:60:5f:64:db:e8:
a0:4a:77:70:3e:d2:05:33:b4:ed:87:ad:f0:e7:25:95:c6:48:
1b:4d:b5:a2:ac:88:b7:54:d2:af:9f:bf:5a:7e:11:38:37:e2:
6f:94:35:bc:8e:35:05:74:26:0e:6a:9a:e8:c4:fc:b7:ba:1b:
1a:a6:45:19:5e:8e:6a:93:69:bd:33:e8:86:e4:a4:23:33:ae:
b9:a8:18:4a:80:f8:50:e2:f4:90:e8:88:85:d7:4f:1e:fa:c9:
fb:47:64:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:08:44 2026 by rpki-client