Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json)
Hash identifier: cyOseGjZKwJWmQC1RaSm8IZa5HfMGiXK9AoK2CRGYDs=
Subject key identifier: 86:F9:48:FC:C4:D1:B8:62:7B:FE:B5:B6:80:B2:5E:45:41:CB:FF:58
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 019F129C3983AABBCEB46B07AC4CCD706E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
Manifest number: 1997
Signing time: Mon 29 Jun 2026 09:00:55 +0000
Manifest this update: Mon 29 Jun 2026 09:00:55 +0000
Manifest next update: Tue 30 Jun 2026 09:00:55 +0000
Files and hashes: 1: 2WGl8G8pi8oMegi8RKRiyyTcfBY.roa (hash: eFPA6RWwauuX6BAg0wBN5keK8VZL6vRlLkve+VSJ0ZE=)
2: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: h/7yS1YGlurq/ygauDEMWCyD5EaQW3kJuBxowd3R0JM=)
3: K3NmFuOPAddd8mCVtQYOCkx1jh0.roa (hash: SrLTNGPGVS2F82EZUaVR6hJ6RB2NsvkrSon85JqFkV8=)
4: WSkrs1ltbglcOvmgNNdKDlpJVJo.roa (hash: EfPSiAnXovgs9qwouEhgN4C060q6TwU5BAOhp7sYuHU=)
5: _xnVn4Z2mdrwXIaogX13bELVsCM.roa (hash: ApqTNIYHPR2DmL0Vq3O1QjPD2Uk/9+5OvGzlqh5bBUk=)
6: fhRyE_K269sQWrdJhqkhEA-v5ko.asa (hash: 9+eBnbSBimBu4HwMZ224XRHi7r8hcPQzKz3/KA+alHc=)
7: p04FvvBEHzMTXVoNNN3LSmN2jSQ.roa (hash: HB8efpVA3BHYu9Zn4BAQKGXl8PNjjJD4B4das4y3Wnc=)
8: ygo3H5OHWrmMxmaU3h9Trr2iclQ.roa (hash: 3KarnZJsM1oC9NHKT7Yavsz5aIphKie2KhT0LQNo1gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:39:83:aa:bb:ce:b4:6b:07:ac:4c:cd:70:6e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Jun 29 09:00:55 2026 GMT
Not After : Jun 30 09:00:55 2026 GMT
Subject: CN=86f948fcc4d1b8627bfeb5b680b25e4541cbff58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:db:1d:31:20:4b:fa:65:c9:a5:56:ff:9d:
89:3b:e8:9e:cb:35:40:ba:91:29:13:a1:5d:e8:fb:
6f:42:2e:9a:78:23:3c:db:52:5f:69:fe:a7:d1:a7:
4d:4b:44:03:ed:3a:91:fa:a2:d7:43:7b:a6:72:3f:
f1:cf:c3:a6:b1:df:fd:ca:43:e3:32:f5:ce:a4:7e:
b8:f1:5b:6c:8c:64:9e:24:4b:69:45:06:34:52:0e:
d6:4e:65:d2:d9:9e:fb:b6:7e:be:6b:12:f5:b8:77:
a0:36:21:ae:13:13:80:46:aa:e5:43:de:17:8f:b4:
52:cf:12:dd:03:26:75:2c:b0:8b:b7:0d:ed:d1:5c:
47:c5:b1:f9:66:8e:23:91:f4:e4:12:05:bd:3b:5d:
53:a4:74:2b:2b:d6:a5:c7:f2:a6:aa:49:d9:99:26:
42:f3:09:f3:d6:3f:22:69:ff:6e:8e:77:a0:94:51:
1d:f7:32:93:0a:c8:1e:bf:8e:d0:d3:6b:bd:da:b3:
c6:67:d0:f4:d8:23:54:d9:3a:58:a3:8d:58:6f:cf:
c4:ff:50:2d:08:88:fa:5e:87:98:60:7e:f5:58:eb:
e9:4b:c1:7d:e5:b5:f6:4e:6b:8d:89:90:35:9e:99:
5a:07:2c:8b:6f:d2:ff:d3:85:27:0c:9c:12:88:2b:
09:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F9:48:FC:C4:D1:B8:62:7B:FE:B5:B6:80:B2:5E:45:41:CB:FF:58
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:06:87:80:da:60:3c:1c:7f:44:85:19:9a:d5:c1:d4:14:98:
8c:a3:b0:82:fd:c4:3f:8d:34:11:20:37:37:40:c0:c3:bb:b1:
d1:63:7e:92:d2:b6:65:3c:3f:f4:9a:e9:e5:43:1c:98:b1:9d:
1e:97:85:04:d9:c5:b9:4d:4c:3d:f7:69:b2:4f:e0:8d:98:73:
ab:72:ef:da:32:82:8c:d3:84:18:a1:2f:ed:8a:d2:a9:ea:64:
9e:71:ff:ca:c2:4d:f1:17:d5:7f:53:3f:73:ad:6b:fc:9d:54:
60:dd:cb:21:36:5c:d2:ea:61:d0:42:96:dc:a9:bc:ca:6a:55:
11:dd:dd:7f:d5:26:fd:2b:56:b4:60:37:a9:a3:f1:f5:f7:93:
bc:5a:b6:ea:be:27:bd:c2:ae:89:d1:b8:1f:03:bf:e2:8f:8c:
06:23:98:d0:d2:06:5b:19:45:fd:fc:12:29:d9:54:17:db:77:
11:91:9f:e7:d6:e6:56:92:ee:dc:e3:02:00:97:ff:89:2a:6c:
ce:57:bf:86:0d:7e:b8:77:8a:4b:43:49:97:3d:22:89:d1:32:
c7:ff:71:a2:d5:58:1c:d0:7d:6e:78:ed:a8:c3:aa:44:b2:fe:
e5:30:90:76:9f:74:f8:d9:3d:f7:21:7b:8d:7f:6a:c4:0d:f9:
ee:dc:23:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:41 2026 by rpki-client