Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier: CsNPyXztQ5ps15/i0A3F6biQ+OezKcG6qsShwOFLbN4=
Subject key identifier: AB:E3:70:74:7E:B0:59:D4:93:52:88:6D:2C:EB:13:6A:55:BD:5B:03
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 019F190C9122AAA12F8760C142E1BA845CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number: 08F1
Signing time: Tue 30 Jun 2026 15:01:21 +0000
Manifest this update: Tue 30 Jun 2026 15:01:21 +0000
Manifest next update: Wed 01 Jul 2026 15:01:21 +0000
Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: /83Yt2GONU5/QkwEz5knhGSblg2VFIShg8kDqfyq3U0=)
2: _sKUqr_T2WU5wpJt5pENqGxaGNg.roa (hash: 26WyPtt0JWgZh/PV/eTd/0WIUbfzzYa6z8NjLk7cJ+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:91:22:aa:a1:2f:87:60:c1:42:e1:ba:84:5c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Jun 30 15:01:21 2026 GMT
Not After : Jul 1 15:01:21 2026 GMT
Subject: CN=abe370747eb059d49352886d2ceb136a55bd5b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:d4:47:91:c0:8d:c0:43:8b:86:8a:7d:2f:
68:16:2c:64:d8:56:29:1d:56:94:9a:dc:43:db:25:
67:72:04:b7:86:f8:f7:68:91:cd:d8:b9:01:89:20:
80:2d:d1:65:cd:63:ec:28:84:6c:c6:4a:a7:b4:49:
06:62:71:32:e0:f1:a5:16:80:f0:03:bf:ac:77:f3:
3c:25:ff:ed:5e:ef:9f:63:a7:8c:4f:43:72:7e:48:
e7:df:d7:e7:66:5c:52:a3:6b:f4:78:db:09:b7:56:
e3:73:49:67:02:eb:83:4d:4e:c3:b1:42:11:8f:37:
e9:d0:6e:ea:dd:4b:94:63:a1:5d:21:9c:5f:22:63:
5f:a2:4b:46:6a:fc:1d:7c:5b:ee:8b:d9:d2:0f:b4:
b6:45:0e:69:57:40:74:ed:85:cd:d0:01:88:99:fc:
c3:d9:83:03:f3:18:d9:96:5c:84:98:4a:a2:35:ec:
e0:f0:42:44:15:b9:03:f4:c8:bb:78:f1:9c:e1:db:
bd:dc:65:40:44:c9:ba:c4:3a:90:ab:ea:e8:9e:cb:
fd:1c:f5:69:36:94:6e:f0:80:77:f2:f5:6f:c0:19:
bf:46:1e:15:58:29:93:a4:3f:aa:29:fb:ca:d2:b4:
19:75:6b:5d:c9:d5:3e:74:c4:87:94:b0:27:0b:d8:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E3:70:74:7E:B0:59:D4:93:52:88:6D:2C:EB:13:6A:55:BD:5B:03
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ce:2e:b1:33:fe:da:05:a1:a5:5e:99:94:14:02:23:f8:74:
f2:9a:77:fc:7a:66:93:a6:e9:3f:38:1f:10:92:9e:40:94:6e:
92:5d:3d:b8:ef:8f:05:c2:b8:37:98:03:c7:5c:43:44:00:d4:
ed:c6:43:59:35:84:f1:ba:7b:19:1d:97:79:34:53:69:41:f5:
72:0a:8b:03:16:62:7b:9b:81:a4:74:1b:34:d0:7d:96:37:a5:
8e:fc:f0:a1:c6:68:0e:b5:16:31:2e:fa:2e:e6:28:4a:d7:eb:
50:57:c6:7f:11:0f:5f:2f:99:17:f8:d2:a5:15:e8:ea:83:92:
e3:19:c2:46:f0:28:7b:0d:83:b2:17:f8:10:7e:3d:2f:2d:0a:
d0:f6:a9:f0:54:b3:d6:53:5b:43:71:a1:1c:06:e2:91:cf:13:
a4:90:aa:89:90:a6:8d:a2:bc:54:01:e2:c6:55:a2:e4:08:c7:
bf:22:49:f7:8d:4d:93:f3:d9:8d:d2:bf:7a:64:80:d0:2b:ce:
14:c4:ba:32:fd:07:1c:c7:3b:a9:fa:b0:c0:5f:6d:c1:50:81:
78:74:fe:08:f6:7c:9c:82:20:a2:a1:b8:27:f5:16:20:3d:c9:
65:bd:fe:6a:fa:a0:29:74:1a:12:5d:44:24:b5:76:e5:54:f8:
f5:de:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:57 2026 by rpki-client