Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
File: d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft (raw, json)
Hash identifier: qF9RFCA1eUWmuC/wdG4eADimngD/hXjRpaY4lN3xAIc=
Subject key identifier: F3:75:75:FE:94:02:4F:A5:41:E0:70:BF:34:33:F7:95:AE:BD:DE:45
Authority key identifier: 77:85:37:BD:CB:35:32:0C:78:D5:98:19:A5:0B:36:1E:B9:58:20:B7
Certificate issuer: /CN=778537bdcb35320c78d59819a50b361eb95820b7
Certificate serial: 019F1A5604F84E9754249B7766C502C89136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
Manifest number: A3
Signing time: Tue 30 Jun 2026 21:01:12 +0000
Manifest this update: Tue 30 Jun 2026 21:01:12 +0000
Manifest next update: Wed 01 Jul 2026 21:01:12 +0000
Files and hashes: 1: K2Dc5OBuZ-3GVexCh6zp51MBUis.roa (hash: c29k2Uu3E6+pH0/RU1RBK1xurercCYLwxnC+Kb8waAo=)
2: d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl (hash: O3ZLW73UOldN9KIMlJyq7A4pu6HofPYc3BaITLz7bsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:56:04:f8:4e:97:54:24:9b:77:66:c5:02:c8:91:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778537bdcb35320c78d59819a50b361eb95820b7
Validity
Not Before: Jun 30 21:01:12 2026 GMT
Not After : Jul 1 21:01:12 2026 GMT
Subject: CN=f37575fe94024fa541e070bf3433f795aebdde45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:26:c2:e4:7d:f6:e1:20:7f:6f:4f:f3:18:
3b:04:f5:49:22:45:0d:d3:fc:5b:ef:2e:8d:79:8c:
34:4c:60:80:2f:b9:58:61:46:5d:e7:31:a8:07:1f:
1a:05:4f:91:59:83:e2:31:e6:15:30:7d:ea:96:40:
9e:2e:8b:0d:a3:97:cc:ae:30:3e:f8:0c:44:18:00:
6f:82:dc:2f:84:3e:b5:2d:84:10:d8:69:d9:49:28:
25:fc:e6:86:ff:22:b6:42:29:d1:b1:31:ff:24:3f:
0a:de:a3:8f:75:09:3b:c7:4b:7c:cb:10:9a:f9:e0:
37:85:89:d8:f0:7a:f4:d0:55:e2:30:23:14:71:65:
9d:95:9e:67:61:f2:e9:c7:a0:fc:af:06:1b:f0:41:
70:f9:71:6f:f7:0c:d2:78:63:f1:f9:79:d4:7e:a1:
98:90:aa:06:08:f4:ca:d5:59:2e:61:7c:e5:c0:50:
8f:c7:79:10:04:a8:0f:9b:5f:3f:7a:2e:45:fb:0c:
d0:0b:1b:d0:66:94:6a:b4:63:3b:91:2a:2a:a8:36:
59:cf:e8:ec:6d:e8:17:2c:a6:37:71:5f:fb:00:12:
49:72:5f:9c:ef:9a:68:3b:19:1d:c4:68:3b:20:69:
40:21:ca:1c:2e:f8:02:f0:86:99:98:0f:a4:f4:35:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:75:75:FE:94:02:4F:A5:41:E0:70:BF:34:33:F7:95:AE:BD:DE:45
X509v3 Authority Key Identifier:
keyid:77:85:37:BD:CB:35:32:0C:78:D5:98:19:A5:0B:36:1E:B9:58:20:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6a:3b:8f:11:c4:65:2d:e7:8f:d9:9f:06:da:62:6c:d7:cf:
f8:17:df:d0:73:c8:69:26:6c:31:a0:46:de:35:7f:5b:ed:9e:
f8:e8:e9:90:b8:24:54:a5:0f:5c:bf:bb:cc:86:64:d5:82:57:
b9:6a:d1:61:71:2e:b7:95:e6:5a:ff:53:4b:09:21:7c:68:cb:
a2:e4:b4:89:47:c5:8a:11:56:b8:2e:d4:bb:4e:3e:bb:01:a4:
64:23:bf:92:fc:71:85:a9:9f:91:a8:6f:50:ae:1c:cb:87:3d:
3c:81:60:7d:f8:d4:72:db:13:95:25:4a:08:d7:a4:bf:47:00:
75:04:f0:82:5f:98:01:8f:ea:6c:55:30:11:01:fc:6d:32:d4:
b7:f5:04:db:2e:22:f9:ee:f8:66:4b:a1:90:eb:31:2e:ae:d6:
44:86:40:65:28:de:5e:a2:08:8d:84:07:b9:4f:a8:77:99:0d:
4e:03:d9:57:92:cc:48:aa:38:ac:4e:4b:c7:35:1c:8f:64:df:
65:22:bb:71:b8:94:ec:30:ac:9c:c3:72:1a:04:f2:cc:3f:38:
3f:a9:28:98:68:7f:4d:33:24:ca:44:4c:22:a0:47:9c:a2:7c:
0e:a1:49:f2:5d:cd:44:aa:fb:08:bb:44:6e:cd:84:a9:d1:57:
d8:92:0d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:34:09 2026 by rpki-client