Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
File: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json)
Hash identifier: cyTfP51vIUlily4EWJsZxLJSPChOPa7Yzy0F/nhY6pY=
Subject key identifier: AC:25:5C:A5:BE:3F:16:A9:9A:A6:94:38:A3:6B:65:E5:10:0F:30:59
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial: 019F17C2DB86CFC72FCF60BB55C67A78CC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
Manifest number: 18A9
Signing time: Tue 30 Jun 2026 09:01:13 +0000
Manifest this update: Tue 30 Jun 2026 09:01:13 +0000
Manifest next update: Wed 01 Jul 2026 09:01:13 +0000
Files and hashes: 1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: Zh6A6tbwarVVXzYb8wjIUiamPfWCvadI7lj3FEiXi5g=)
2: dypMPP_xvoxJHktjo8O416uma_g.roa (hash: f+g0dUATJyTuyFHPoe+0S/etj6BvEAVqOF7MMl9w8nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:db:86:cf:c7:2f:cf:60:bb:55:c6:7a:78:cc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Validity
Not Before: Jun 30 09:01:13 2026 GMT
Not After : Jul 1 09:01:13 2026 GMT
Subject: CN=ac255ca5be3f16a99aa69438a36b65e5100f3059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:e3:20:fe:4e:60:d8:0e:ff:5e:7f:36:97:
e7:7a:b2:b0:c5:8e:5f:3f:de:65:cc:73:cf:af:54:
43:18:52:c8:73:b2:0a:11:f3:ab:9c:04:43:40:25:
7e:67:b3:97:0d:6f:4f:e8:a6:ef:5b:5d:5c:31:a7:
42:74:47:35:26:58:a5:ed:b3:e8:de:0e:38:6b:23:
18:d7:17:76:53:e5:62:7b:0e:02:f9:a7:82:3a:db:
b3:9d:76:d1:f3:8d:4a:85:e9:4b:4e:02:48:0e:1d:
d1:bc:69:99:2d:75:3c:71:40:c3:63:ff:07:1d:28:
fa:c8:28:63:ba:db:5c:b1:48:7f:ff:c0:42:6a:0b:
64:54:4a:db:b7:5c:11:45:67:8b:4e:f0:e8:f1:f6:
0d:54:10:99:66:31:4d:04:88:3e:e0:4f:7b:23:be:
96:73:e2:17:d9:1b:fc:b5:4f:1f:71:a8:ef:18:3b:
03:70:85:44:76:1f:42:c5:69:98:8b:67:43:d4:71:
9f:7c:72:d7:f2:0d:d3:02:3e:f1:14:ef:d6:64:fe:
ab:de:3d:27:ad:d0:cf:01:4c:e1:5b:05:c3:23:65:
5c:2d:28:de:b7:ee:06:47:98:3c:fb:b6:40:b7:ea:
57:52:64:95:8c:27:9b:f7:be:64:c8:0e:c9:71:e1:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:25:5C:A5:BE:3F:16:A9:9A:A6:94:38:A3:6B:65:E5:10:0F:30:59
X509v3 Authority Key Identifier:
keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:31:b3:f8:3e:ba:00:8c:a5:bc:13:81:f3:96:52:04:bd:a3:
cb:32:be:f5:45:86:c1:51:93:68:77:aa:9b:e9:c9:83:1e:e9:
33:32:27:e3:a9:55:c3:f3:51:8a:61:98:b5:40:ee:f9:5e:da:
9b:4a:95:4c:5f:a3:a5:41:8c:5e:63:21:45:87:46:1d:42:12:
1e:1d:72:86:8b:b9:58:1a:05:76:9e:57:02:64:e8:3d:5b:40:
3f:e4:9c:7d:cc:ff:64:b3:07:ab:e7:d0:e0:6c:a1:30:2b:12:
02:e1:d8:38:fb:9b:89:67:c8:a6:90:c2:30:de:8b:c1:b7:cf:
1a:4a:61:6e:ba:76:62:ca:4e:1f:21:57:f9:b3:c8:45:af:1f:
46:dd:8b:9a:8a:3a:f7:01:ec:57:dd:0e:80:72:5e:d3:19:2d:
94:88:f7:5d:7d:36:c6:e7:24:19:60:19:be:0f:fb:36:2e:fd:
3c:5d:ba:16:5f:23:c5:df:4b:55:ce:38:6c:df:4d:20:2b:39:
af:60:a2:09:5e:2d:0d:e2:87:94:fe:de:37:59:17:23:f4:47:
81:a1:2f:39:9c:d8:9c:6b:03:03:d6:82:a8:24:a1:cb:53:10:
52:77:d0:81:36:9b:37:a1:f3:c0:7d:d4:38:92:b7:42:31:6e:
ba:b1:f2:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwtuGz8cvz2C7VcZ6eMw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjM2YyNjM5ZmZjNzg4NzFhZDY0YmZlZDcxYjc5NTRiYzkw
ZGVhYjUwHhcNMjYwNjMwMDkwMTEzWhcNMjYwNzAxMDkwMTEzWjAzMTEwLwYDVQQD
EyhhYzI1NWNhNWJlM2YxNmE5OWFhNjk0MzhhMzZiNjVlNTEwMGYzMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8DjIP5OYNgO/15/NpfnerKwxY5f
P95lzHPPr1RDGFLIc7IKEfOrnARDQCV+Z7OXDW9P6KbvW11cMadCdEc1Jlil7bPo
3g44ayMY1xd2U+View4C+aeCOtuznXbR841KhelLTgJIDh3RvGmZLXU8cUDDY/8H
HSj6yChjuttcsUh//8BCagtkVErbt1wRRWeLTvDo8fYNVBCZZjFNBIg+4E97I76W
c+IX2Rv8tU8fcajvGDsDcIVEdh9CxWmYi2dD1HGffHLX8g3TAj7xFO/WZP6r3j0n
rdDPAUzhWwXDI2VcLSjet+4GR5g8+7ZAt+pXUmSVjCeb975kyA7JceHD6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwlXKW+PxapmqaUOKNrZeUQDzBZMB8GA1UdIwQY
MBaAFNw/Jjn/x4hxrWS/7XG3lUvJDeq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDct
OWNmZjNmZTA1MTgwLzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDctOWNmZjNmZTA1MTgw
LzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDGz+D66
AIylvBOB85ZSBL2jyzK+9UWGwVGTaHeqm+nJgx7pMzIn46lVw/NRimGYtUDu+V7a
m0qVTF+jpUGMXmMhRYdGHUISHh1yhou5WBoFdp5XAmToPVtAP+Scfcz/ZLMHq+fQ
4GyhMCsSAuHYOPubiWfIppDCMN6LwbfPGkphbrp2YspOHyFX+bPIRa8fRt2Lmoo6
9wHsV90OgHJe0xktlIj3XX02xuckGWAZvg/7Ni79PF26Fl8jxd9LVc44bN9NICs5
r2CiCV4tDeKHlP7eN1kXI/RHgaEvOZzYnGsDA9aCqCShy1MQUnfQgTabN6HzwH3U
OJK3QjFuurHy0w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:38 2026 by rpki-client