Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: gKiJaAyW/ZnGcykv8r0z0KCZIeXwEmX0wWoH39l2gGo=
Subject key identifier: 36:20:B7:58:23:E1:0C:87:A2:B8:07:B1:37:E8:8E:F6:8B:DD:C2:DF
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 019EB62077B1598888B4D8253CC792CADE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 04FA
Signing time: Thu 11 Jun 2026 10:00:41 +0000
Manifest this update: Thu 11 Jun 2026 10:00:41 +0000
Manifest next update: Fri 12 Jun 2026 10:00:41 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: wCLONRHIVwQnGfCXlFMQ7llNXqHLjcSHWvV5/MxRjWg=)
2: RwZ9F-pdINA65vVgGDGApgyfhto.roa (hash: eZaWhNjBT1qB/UTcePoZ/N6A45ILygXPpUHwGv0YfOw=)
3: SFQQoJg97TGHjrgzii8KpRT8xfc.roa (hash: iv/LMo2P0Oa29pglyapnh+eYTODXjJUku1HA9y8udbA=)
4: sOAijZZYpwie6wu7M4Wlx6kerB4.roa (hash: H5sz+pWO9A1d2Sg5RORtCUGJSuWJhTFvhX/iRzLdtRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:77:b1:59:88:88:b4:d8:25:3c:c7:92:ca:de:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Jun 11 10:00:41 2026 GMT
Not After : Jun 12 10:00:41 2026 GMT
Subject: CN=3620b75823e10c87a2b807b137e88ef68bddc2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:7d:b2:33:ca:fe:82:08:f7:7a:1c:f6:f0:
56:09:87:38:71:ec:b7:bf:4c:e2:d6:32:6a:95:94:
e5:8b:8e:c7:2c:d7:4e:89:28:3d:c1:55:c2:61:51:
7a:82:09:7b:1c:7e:19:46:74:a2:d0:dd:06:42:37:
75:d9:29:f9:94:ca:1e:d6:37:ae:ac:ea:9f:ef:ca:
c9:fc:cf:dd:26:63:df:a6:63:50:6d:f6:c3:15:3f:
57:0a:86:e5:70:03:50:d7:ee:79:b9:da:b0:c6:70:
71:0b:be:64:4e:60:cc:76:fc:ff:5a:95:f6:af:ef:
7a:7f:97:99:2b:ef:38:09:f6:45:d9:4d:a3:d7:d7:
55:f6:32:f3:a5:da:fc:d5:93:4c:a1:1b:bd:cb:20:
06:a8:ad:ee:f4:90:6b:5f:53:ad:28:12:85:e4:7e:
77:52:36:2e:58:4f:98:fd:93:d0:fd:b6:09:66:43:
da:2f:22:1e:63:23:a6:79:89:b5:6c:15:c2:0c:63:
e5:25:0a:07:d8:16:41:3a:ee:9a:9f:02:0e:36:9f:
50:f8:66:51:7e:1a:1b:b1:0a:44:dd:35:90:a4:84:
a9:ca:b4:95:c8:66:3e:c2:13:56:7b:db:d9:d3:81:
7e:4e:00:44:b7:02:a9:ad:e8:bc:07:73:74:c1:d2:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:20:B7:58:23:E1:0C:87:A2:B8:07:B1:37:E8:8E:F6:8B:DD:C2:DF
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a3:33:a9:3d:d4:e0:3a:43:23:1b:33:bc:07:bf:eb:dd:df:
06:6a:af:7a:22:c1:76:d3:68:c9:ef:ac:53:14:2f:62:ea:9d:
cd:3a:2f:bd:c1:57:c0:18:f5:87:90:bb:1d:7c:ef:5d:6c:78:
83:a8:3f:28:ff:be:f9:61:77:e8:fd:18:79:53:fc:24:b4:47:
ed:18:b2:f6:d7:66:21:eb:64:06:d7:55:b1:35:64:ad:a5:74:
86:4e:1f:cb:f2:e3:87:a3:6f:2d:66:0c:5d:b5:c5:73:67:a6:
4d:a1:7f:dc:f2:7f:f4:5e:00:e8:a2:1c:8a:99:21:df:36:61:
e6:da:7b:bf:1a:2f:ba:32:87:05:9a:cd:08:c0:5d:bb:09:0b:
d8:c1:7d:dc:b2:a2:e5:b7:bc:0a:1f:76:f2:d5:d8:99:d6:31:
9b:21:ad:90:e8:75:03:d7:9c:14:f8:6d:c0:10:7e:ab:ee:6c:
d9:b6:f5:38:d1:9d:03:98:56:6d:e2:85:fa:96:67:a3:9e:41:
71:f1:c3:b9:9b:a8:68:a6:11:9e:bf:c2:34:a2:ed:fb:8b:7c:
12:59:e4:38:e9:39:41:1c:68:4c:99:3b:84:af:b9:96:17:db:
73:00:af:b7:94:a3:8b:9b:cd:28:d7:25:d6:db:1f:df:d2:28:
c6:0c:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:24:02 2026 by rpki-client