Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: kb2n8E42aRXtZWMxBNQABy5Ri0z4SAST8zuH31CUN/8=
Subject key identifier: A7:F2:4E:75:19:4D:82:90:31:AB:9C:51:AC:55:47:C6:AF:8F:63:BE
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 019EB8EAE0B9FD29FB7168ABE77522C0F1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0CD4
Signing time: Thu 11 Jun 2026 23:01:00 +0000
Manifest this update: Thu 11 Jun 2026 23:01:00 +0000
Manifest next update: Fri 12 Jun 2026 23:01:00 +0000
Files and hashes: 1: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: DJgSoJsEG4mnkfEIy5VLr6SmSPy1oiamTVwDjNg2gAI=)
2: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (hash: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:e0:b9:fd:29:fb:71:68:ab:e7:75:22:c0:f1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Jun 11 23:01:00 2026 GMT
Not After : Jun 12 23:01:00 2026 GMT
Subject: CN=a7f24e75194d829031ab9c51ac5547c6af8f63be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:32:8d:64:ca:ba:22:0c:25:49:9e:89:56:
2a:b9:01:3f:67:ce:c5:a8:5e:50:25:ae:6a:10:88:
24:76:3b:52:ac:30:5e:83:9b:87:75:d4:45:ec:80:
7c:8e:41:e1:55:72:a5:14:0d:79:97:2c:8a:99:3f:
ae:ee:ac:01:e2:e5:f5:2f:41:6f:54:fd:ef:60:e7:
60:e6:5d:99:90:d2:ad:9e:01:0a:8e:1a:dd:f0:13:
de:d0:b9:d1:c2:47:bf:b4:62:ae:05:7e:96:58:24:
bc:e2:9e:90:a5:a0:50:18:c3:cb:f1:f3:22:05:08:
85:bf:8f:fb:ca:41:03:90:8e:9e:b1:bb:d7:6b:5d:
30:32:ad:f6:0c:f5:d0:fb:06:0d:48:fd:a3:6e:31:
30:99:3c:92:5a:f9:2b:fc:c4:b7:23:f9:74:ba:11:
3c:81:6c:0e:76:30:80:1c:80:3e:f6:bd:b4:77:48:
36:eb:e0:1f:49:0d:f2:d1:68:e9:8c:a0:ea:8c:8d:
0e:ea:d5:6c:7f:c2:8e:d3:82:9c:ca:69:18:a8:9f:
46:96:6c:ce:76:3d:19:95:14:c1:4b:6c:ea:6a:6f:
36:91:ea:49:5c:28:53:20:73:a7:65:2a:c0:6c:d9:
39:6f:a2:3b:13:63:c6:16:55:83:cf:7f:8e:db:05:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F2:4E:75:19:4D:82:90:31:AB:9C:51:AC:55:47:C6:AF:8F:63:BE
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:37:3d:0e:e5:ee:c2:ee:0f:70:01:07:28:37:1c:c8:a4:dd:
90:a0:94:1b:e5:c4:5e:fc:f8:2b:a3:8b:f9:35:77:89:bc:7b:
a9:91:1d:2f:e8:d2:74:2d:86:c0:3f:02:aa:be:3e:f4:b2:51:
6b:59:66:c6:9c:f1:c3:79:86:09:7d:49:b1:02:10:d4:d9:5e:
aa:c5:45:fe:e3:0e:19:29:0f:f2:02:80:3c:69:b0:1c:71:24:
f0:f6:42:fe:84:d8:b4:0a:d9:8f:10:a8:af:52:dc:8f:56:4a:
4c:61:d6:cb:8d:2d:eb:bb:be:13:3b:23:c6:40:fc:6e:94:37:
dd:9b:8b:83:5d:cf:8c:17:27:5b:cf:9a:6b:61:3c:ab:45:70:
09:fb:fd:39:cb:75:e4:ec:58:48:83:54:10:12:19:ed:e0:bc:
6c:22:07:fb:c1:27:00:af:2f:12:86:43:7a:3f:9a:9b:d3:84:
50:ea:43:f9:ea:1a:9e:e3:91:8e:5c:73:7d:9b:ae:88:95:13:
d8:2c:7a:67:64:01:6f:89:6a:10:17:7b:e4:3b:4a:c0:3f:ac:
8d:48:71:2f:f5:5b:1f:38:4d:0a:79:86:08:46:8e:cc:2c:7e:
2f:ca:d6:bf:d1:c1:ae:35:be:5d:a6:85:64:11:a4:ae:13:c7:
b9:19:5d:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ646uC5/Sn7cWir53UiwPHoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlY2JlZjM1MmNhYzcxYWQ1YmFlMGU4YjFjMDIyNDZlM2I2
NTAyNTAwHhcNMjYwNjExMjMwMTAwWhcNMjYwNjEyMjMwMTAwWjAzMTEwLwYDVQQD
EyhhN2YyNGU3NTE5NGQ4MjkwMzFhYjljNTFhYzU1NDdjNmFmOGY2M2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWcyjWTKuiIMJUmeiVYquQE/Z87F
qF5QJa5qEIgkdjtSrDBeg5uHddRF7IB8jkHhVXKlFA15lyyKmT+u7qwB4uX1L0Fv
VP3vYOdg5l2ZkNKtngEKjhrd8BPe0LnRwke/tGKuBX6WWCS84p6QpaBQGMPL8fMi
BQiFv4/7ykEDkI6esbvXa10wMq32DPXQ+wYNSP2jbjEwmTySWvkr/MS3I/l0uhE8
gWwOdjCAHIA+9r20d0g26+AfSQ3y0WjpjKDqjI0O6tVsf8KO04KcymkYqJ9GlmzO
dj0ZlRTBS2zqam82kepJXChTIHOnZSrAbNk5b6I7E2PGFlWDz3+O2wWbwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfyTnUZTYKQMaucUaxVR8avj2O+MB8GA1UdIwQY
MBaAFN7L7zUsrHGtW64OixwCJG47ZQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWIt
NTQxZjlmY2JhNzQyLzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWItNTQxZjlmY2JhNzQy
LzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzc9DuXu
wu4PcAEHKDccyKTdkKCUG+XEXvz4K6OL+TV3ibx7qZEdL+jSdC2GwD8Cqr4+9LJR
a1lmxpzxw3mGCX1JsQIQ1NleqsVF/uMOGSkP8gKAPGmwHHEk8PZC/oTYtArZjxCo
r1Lcj1ZKTGHWy40t67u+EzsjxkD8bpQ33ZuLg13PjBcnW8+aa2E8q0VwCfv9Oct1
5OxYSINUEBIZ7eC8bCIH+8EnAK8vEoZDej+am9OEUOpD+eoanuORjlxzfZuuiJUT
2Cx6Z2QBb4lqEBd75DtKwD+sjUhxL/VbHzhNCnmGCEaOzCx+L8rWv9HBrjW+XaaF
ZBGkrhPHuRld+w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:17 2026 by rpki-client