Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
File: 3-ytVuquEjX6eI5OrTkiwpbig6U.mft (raw, json)
Hash identifier: DkJU9NrOnugsiBjiiHiJNYQSwwVQKyu8CEkHwMTx4io=
Subject key identifier: DC:51:D9:60:96:3D:1A:A8:50:BC:E8:A2:BE:8F:9B:F9:0D:07:16:40
Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Certificate serial: 019EB98FCEB0226900949AD05939412B538F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
Manifest number: 0493
Signing time: Fri 12 Jun 2026 02:01:09 +0000
Manifest this update: Fri 12 Jun 2026 02:01:09 +0000
Manifest next update: Sat 13 Jun 2026 02:01:09 +0000
Files and hashes: 1: 3-ytVuquEjX6eI5OrTkiwpbig6U.crl (hash: zKxslH6zwdqpz/x3KB6l02bbvIIBs8As9B6wB18SY+s=)
2: THfbU74ywtQ8sKspPoGoe7QN1LQ.roa (hash: cZXszgxvNHrOfZXBgPIvxUmNlIbSPNniYOHYtr5et54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:ce:b0:22:69:00:94:9a:d0:59:39:41:2b:53:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Validity
Not Before: Jun 12 02:01:09 2026 GMT
Not After : Jun 13 02:01:09 2026 GMT
Subject: CN=dc51d960963d1aa850bce8a2be8f9bf90d071640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:84:a1:ac:ed:61:19:88:e2:2a:31:ba:0b:
4f:93:5e:9b:b9:eb:7a:37:d9:db:e2:ef:da:bb:5e:
31:dc:91:b2:40:c5:ac:cc:7c:77:48:41:85:b5:7e:
ec:27:fc:5f:46:0d:26:0b:5e:34:06:0b:38:c9:b3:
fc:a0:a3:48:54:52:9f:d4:75:de:67:a6:05:7c:dc:
b6:0d:f4:2d:32:3d:a0:45:9d:69:87:a9:a9:f6:8b:
44:09:00:12:8f:5c:cf:2e:aa:de:5e:af:33:7b:e1:
bc:99:ba:3a:d8:a8:58:f5:a5:38:30:77:19:9b:df:
e3:da:dd:29:9f:ec:cb:be:b7:ee:08:a7:ab:11:da:
c6:86:4a:c7:1f:4f:61:00:00:6d:ea:09:ef:54:68:
22:e9:d3:d4:f4:ad:fe:f6:b8:5f:b6:5e:da:f6:21:
89:9c:86:dd:d0:c8:38:6a:cc:c1:60:47:7e:8a:f5:
a2:31:72:6d:9d:5e:b6:c8:1d:58:34:21:c0:c0:e2:
55:7d:68:e1:4a:f2:ed:8c:54:d3:4f:bc:42:24:d6:
1d:b3:a0:18:56:0f:61:1a:35:c1:06:cf:12:ca:7e:
27:65:83:9d:4c:dc:ff:dd:25:ca:3b:45:a6:53:18:
a2:47:e6:6a:78:94:d0:93:e6:e5:0b:b8:17:2b:0f:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:51:D9:60:96:3D:1A:A8:50:BC:E8:A2:BE:8F:9B:F9:0D:07:16:40
X509v3 Authority Key Identifier:
keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:68:02:da:fd:28:45:bc:6b:44:e7:2c:91:42:5e:91:8d:65:
cb:a2:ba:04:06:9b:ee:24:0a:00:43:9a:e2:d2:46:ea:12:10:
cc:d0:65:1b:90:74:1f:ac:7c:24:d1:87:4c:71:e2:e2:b4:58:
8e:a7:77:67:4a:13:d6:36:1d:d5:48:9a:a5:77:e0:aa:4a:b6:
7e:0b:8b:4e:f3:06:60:3c:c9:16:73:45:9e:99:d8:be:54:0f:
07:43:50:69:a3:51:d5:5d:8d:69:e9:8b:72:db:6e:7c:cd:85:
ef:b8:64:8d:65:c4:2d:21:b8:20:a7:6c:25:ff:b1:12:57:ea:
1a:18:51:89:73:90:a1:9c:95:a2:74:05:8e:fa:4c:5c:63:09:
60:56:09:43:7e:ec:d0:e3:cc:6b:66:75:85:93:fa:bd:05:51:
f8:24:77:d0:45:c9:a0:13:bd:25:18:45:87:36:ff:93:8b:cb:
71:b9:01:d6:60:54:c2:06:5c:26:75:13:95:98:e2:d7:38:d3:
a1:22:ef:d0:f0:d1:71:63:d6:98:d8:8b:39:16:d4:33:b6:08:
8b:90:26:89:06:29:8c:3e:61:e9:4f:60:68:69:81:d1:6c:c3:
dc:d2:f0:42:5a:4d:19:c5:2f:2d:fb:71:bb:f7:91:e9:25:a6:
b3:7b:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:54:53 2026 by rpki-client