Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: XaMGGrtm7prdVDCPSUYDAY365wLzJe/lXc++SUaYZG4=
Subject key identifier: FE:17:DD:25:0B:DF:CD:DB:E7:71:33:4F:FC:2E:52:60:A5:56:87:33
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 019F17C35BECF54C5F8630FFCA2E193EBFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 10B8
Signing time: Tue 30 Jun 2026 09:01:46 +0000
Manifest this update: Tue 30 Jun 2026 09:01:46 +0000
Manifest next update: Wed 01 Jul 2026 09:01:46 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: RjfMfLnZSqaI04NmcuudhrgaUpQYw1BCXDFCBKdb3tQ=)
2: TmN-dr45oTfR8pksVoCNgmVOGLU.roa (hash: vnALMBgUiF5Ge/N8pDhGThN8hB7OAP8KLzkie3WI7N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:5b:ec:f5:4c:5f:86:30:ff:ca:2e:19:3e:bf:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Jun 30 09:01:46 2026 GMT
Not After : Jul 1 09:01:46 2026 GMT
Subject: CN=fe17dd250bdfcddbe771334ffc2e5260a5568733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:99:2d:26:a1:76:d9:ca:9e:1a:ae:9c:f8:
4c:01:29:52:bd:f3:13:0d:5d:36:44:ea:d9:66:47:
98:b2:d8:f2:b0:cf:31:a6:50:c2:a1:89:38:5a:30:
e1:7f:d2:85:49:39:3a:2c:0c:55:20:ab:96:de:11:
fe:b5:7e:6a:4c:32:33:15:9c:f1:8e:33:47:61:f8:
12:19:6f:e5:62:79:9b:24:c6:e0:b9:1b:6d:43:5f:
e2:8b:2b:22:92:34:9e:7f:d4:32:45:cd:77:e1:cd:
35:c7:2d:2e:b9:11:61:ce:29:5c:99:78:8b:83:a7:
e9:4b:d3:78:8a:e0:2e:00:2d:b1:39:9e:5d:21:b4:
8e:f8:76:e7:15:27:db:03:5a:10:c7:9b:44:fb:30:
f3:6a:12:64:fd:2f:02:20:5c:de:a3:06:7b:55:83:
5f:82:47:e7:c2:3f:df:0d:03:74:de:35:61:71:cf:
f6:5a:a1:94:3f:38:1b:ef:84:89:fa:39:03:79:4a:
f3:0f:ad:43:07:a5:6c:61:e8:65:2c:14:27:fe:69:
0a:16:13:bd:0f:61:78:e7:10:d7:b5:16:16:a0:33:
0a:8f:75:a4:12:7c:81:60:f5:50:75:78:ea:c6:ab:
87:6b:c4:2a:df:02:25:24:ba:47:56:cc:d2:a4:a2:
bc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:17:DD:25:0B:DF:CD:DB:E7:71:33:4F:FC:2E:52:60:A5:56:87:33
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:44:44:00:db:75:f1:db:fb:78:45:c7:07:0f:8e:6d:a1:59:
f3:5e:30:c5:e2:6e:59:99:95:e4:2d:cf:39:f5:13:33:de:e0:
71:db:63:83:62:2e:b1:58:61:e3:2a:27:df:3e:9c:0c:21:b8:
9d:a1:8f:5b:50:ae:e8:49:42:c4:15:1d:fd:d5:04:bb:e3:96:
df:9f:06:56:a4:14:2e:16:ce:70:62:27:df:67:92:9b:a1:d5:
3a:ba:b1:1f:5d:3f:44:6c:2e:85:38:5b:a2:93:37:bf:fc:fe:
96:82:b8:eb:75:e2:b1:d7:a4:6e:3b:9d:c9:a0:7f:6f:b3:2e:
e9:65:34:d9:78:27:08:04:7f:be:6d:55:c6:02:6a:22:c0:8e:
fb:33:45:d0:74:8c:be:ec:79:73:8d:0b:48:17:d2:9e:2c:39:
1b:d8:8a:d3:b9:ca:49:a5:6d:9c:00:db:4e:e3:6b:01:d6:17:
11:9a:c5:9b:f8:90:80:ce:4f:3b:20:25:0e:98:97:3d:f3:cf:
2b:29:05:9c:31:cb:fa:ba:3d:db:1d:e8:ab:f6:52:ee:ef:d2:
ce:f0:df:24:7d:49:af:64:11:4e:f8:af:b9:a1:9b:d5:53:52:
ce:16:b4:db:db:85:2c:bb:fb:81:63:7f:6c:74:15:cc:f3:f3:
9c:47:3d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:51 2026 by rpki-client