Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: DdchDRfSOJQcTSjYerdigsu9/yx81UOWbuz6/jPFdqc=
Subject key identifier: 23:04:B8:0A:D3:5D:13:A9:93:E9:66:2A:A4:22:0E:A6:01:24:F8:ED
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 019F189E38E45B3F9185386CB4E671A1DB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 13:00:50 +0000
Manifest this update: Tue 30 Jun 2026 13:00:50 +0000
Manifest next update: Wed 01 Jul 2026 13:00:50 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: YnHyPkeUWnKZJwv2glqykYtV50nwSpEpsvcoOQC27WA=)
2: SIrHAW8-wlZDKzvy2I8a6ATw1Os.roa (hash: J87HrMwqHtHS9Z8HI1NmmjUGTf0po2q7EzVGTEZtP5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:38:e4:5b:3f:91:85:38:6c:b4:e6:71:a1:db:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Jun 30 13:00:50 2026 GMT
Not After : Jul 1 13:00:50 2026 GMT
Subject: CN=2304b80ad35d13a993e9662aa4220ea60124f8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f2:30:11:dd:1d:74:3a:0f:a6:8c:3a:d9:16:
be:68:13:11:34:a4:0a:c8:4d:8b:77:7e:cc:d8:67:
f2:17:76:b5:2b:e0:1b:b1:20:6c:c7:c1:22:6b:f7:
fc:a6:62:f3:a7:09:01:af:9d:46:f9:b5:f1:37:dc:
be:47:53:f7:b1:e8:7e:eb:c9:c2:c9:2e:98:fa:8c:
d8:cd:7f:d8:aa:c1:ad:59:e2:23:c7:51:95:45:71:
0e:e7:a2:02:eb:8c:8c:9e:fa:fe:48:95:46:85:bf:
13:08:01:5c:44:f8:57:10:f1:18:c4:d4:8a:54:13:
69:c2:b5:8f:99:6e:d6:86:da:4b:81:d5:96:7b:64:
1c:cb:30:c3:20:9d:27:89:67:19:5a:e3:6a:dd:ec:
00:05:f4:80:ec:d9:67:b9:a7:62:ed:8f:5a:5a:72:
75:60:01:ea:02:88:f7:f2:48:8f:f4:ce:bc:e0:5c:
a3:08:2b:50:5f:e9:77:61:3c:12:9f:d8:97:54:81:
60:3f:3e:1b:0c:2f:b5:3b:a1:c3:9b:41:b2:ba:4e:
6a:0b:20:66:23:74:f4:9b:5d:09:15:83:ed:8f:73:
97:a0:bf:e6:d7:b6:69:9c:a5:9b:4e:8b:6a:bf:f1:
1e:4e:c7:b8:f0:b0:6f:c1:fc:e4:9d:4b:96:24:90:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:04:B8:0A:D3:5D:13:A9:93:E9:66:2A:A4:22:0E:A6:01:24:F8:ED
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fb:bd:d3:7f:35:04:14:19:fe:1e:32:4e:cf:c6:78:32:ce:
e1:83:4b:88:62:b1:79:69:47:42:d6:95:aa:8c:58:4f:af:f2:
b2:e0:0c:4d:a7:e7:5a:21:86:39:77:0a:48:9d:70:66:ce:77:
5d:50:80:8e:d7:60:27:1e:39:cf:48:b4:00:3c:23:d9:aa:f5:
48:fd:bd:9a:f6:c6:52:08:8b:85:eb:88:29:f6:a7:7c:25:4b:
ae:5c:c5:d6:74:90:07:fa:0c:8e:b0:34:c5:62:cb:a3:3e:ff:
a9:33:bf:ca:c1:9e:b1:cf:74:9a:75:e9:28:3f:e8:ce:50:09:
b0:6e:58:bd:13:14:69:88:ec:1c:2a:f5:6c:f3:cf:80:86:7f:
5d:4e:98:42:b4:98:29:7c:a7:3a:54:15:5a:40:6c:c6:f9:0d:
7f:27:a9:cc:f0:b1:60:35:8f:8c:c6:22:a5:6d:6e:53:fa:77:
c7:d9:d8:84:4d:e8:02:42:26:88:c2:d4:0c:d7:4f:2e:cd:9d:
24:d9:4e:6e:85:7e:6d:b3:ea:3c:62:a8:0f:06:12:da:ea:97:
f5:a1:a6:d1:fa:20:82:b7:92:8b:78:a1:d2:84:cc:fb:b1:ec:
1b:7f:f5:44:fa:bd:ce:36:54:df:5e:86:14:c6:53:77:c4:5d:
d1:65:07:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnjjkWz+RhThstOZxodtlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTEzOTIxOGM1MmU4ZmU3ZjdjMzE0YjY2MzllN2Y4N2U1
Njc5YzgwHhcNMjYwNjMwMTMwMDUwWhcNMjYwNzAxMTMwMDUwWjAzMTEwLwYDVQQD
EygyMzA0YjgwYWQzNWQxM2E5OTNlOTY2MmFhNDIyMGVhNjAxMjRmOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PIwEd0ddDoPpow62Ra+aBMRNKQK
yE2Ld37M2GfyF3a1K+AbsSBsx8Eia/f8pmLzpwkBr51G+bXxN9y+R1P3seh+68nC
yS6Y+ozYzX/YqsGtWeIjx1GVRXEO56IC64yMnvr+SJVGhb8TCAFcRPhXEPEYxNSK
VBNpwrWPmW7WhtpLgdWWe2QcyzDDIJ0niWcZWuNq3ewABfSA7Nlnuadi7Y9aWnJ1
YAHqAoj38kiP9M684FyjCCtQX+l3YTwSn9iXVIFgPz4bDC+1O6HDm0Gyuk5qCyBm
I3T0m10JFYPtj3OXoL/m17ZpnKWbTotqv/EeTse48LBvwfzknUuWJJDHFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMEuArTXROpk+lmKqQiDqYBJPjtMB8GA1UdIwQY
MBaAFN4ROSGMUuj+f3wxS2Y55/h+VnnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUt
MzhhMzg1ZjM1ZTNiLzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUtMzhhMzg1ZjM1ZTNi
LzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvu90381
BBQZ/h4yTs/GeDLO4YNLiGKxeWlHQtaVqoxYT6/ysuAMTafnWiGGOXcKSJ1wZs53
XVCAjtdgJx45z0i0ADwj2ar1SP29mvbGUgiLheuIKfanfCVLrlzF1nSQB/oMjrA0
xWLLoz7/qTO/ysGesc90mnXpKD/ozlAJsG5YvRMUaYjsHCr1bPPPgIZ/XU6YQrSY
KXynOlQVWkBsxvkNfyepzPCxYDWPjMYipW1uU/p3x9nYhE3oAkImiMLUDNdPLs2d
JNlOboV+bbPqPGKoDwYS2uqX9aGm0foggreSi3ih0oTM+7HsG3/1RPq9zjZU316G
FMZTd8Rd0WUHag==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:01 2026 by rpki-client