Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
File: 3GbYudONW7Gc-gxGRLRSk9Hotvo.mft (raw, json)
Hash identifier: Ri9OBe7/SS/+vsSOZ6Di2Ryl8dFA7GHJDfcvPJ5ibh0=
Subject key identifier: 2F:E1:0E:F0:B3:2A:66:BE:46:73:45:57:DF:39:B8:70:B1:72:11:13
Authority key identifier: DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
Certificate issuer: /CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Certificate serial: 019EC1B75C7893DBAD72C4723A12A9ABE54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
Manifest number: 18EC
Signing time: Sat 13 Jun 2026 16:01:19 +0000
Manifest this update: Sat 13 Jun 2026 16:01:19 +0000
Manifest next update: Sun 14 Jun 2026 16:01:19 +0000
Files and hashes: 1: 3GbYudONW7Gc-gxGRLRSk9Hotvo.crl (hash: uQUPRQ+dt/GiDavioTx+UoaOM669hEtBq8rvdjmwhI0=)
2: FFrrJg1f7sBn9CMNkWOHWkncPKA.roa (hash: RRbiIEi7LB7ItO/8kZqYNCorz0xLwEEZeK7jHRHtAV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:5c:78:93:db:ad:72:c4:72:3a:12:a9:ab:e5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Validity
Not Before: Jun 13 16:01:19 2026 GMT
Not After : Jun 14 16:01:19 2026 GMT
Subject: CN=2fe10ef0b32a66be46734557df39b870b1721113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:98:8f:a2:55:c5:d6:2d:59:4a:59:46:1f:
71:7b:5e:3d:81:05:a2:7d:ce:09:a4:34:88:8e:66:
68:68:3f:d8:0f:7f:b4:17:84:44:53:e9:c7:f8:d8:
44:8d:b7:d8:d8:27:48:2d:9a:f4:cf:68:9d:d1:f4:
8d:fe:02:54:88:a8:f2:31:0d:f1:ee:50:0b:d9:b4:
b1:25:93:99:2c:fe:71:ca:fc:99:27:ed:c8:6a:e2:
a8:f7:58:8e:93:b7:2c:87:2f:ee:1d:04:11:b2:8a:
d1:f9:3a:97:bf:bf:78:17:cd:e5:af:39:d3:23:ee:
6b:5c:76:07:c6:46:7a:e6:a0:3d:82:a8:b3:78:07:
f1:1f:a7:08:0e:5d:a0:77:1b:75:e1:1a:ef:0e:d5:
09:d4:25:ef:2f:99:7d:08:f0:7c:19:34:30:3c:b4:
d1:c2:49:c3:7f:34:7f:0a:c2:3f:6b:7f:3a:73:09:
b5:a2:80:5d:30:8f:26:f0:a3:c4:c6:1b:33:e7:2d:
a9:a0:a8:6d:47:47:b2:d0:28:1b:08:e7:c0:b4:22:
4c:f6:8f:71:90:90:f3:3b:19:91:a3:2b:9e:f5:56:
a8:b6:d8:99:dc:a1:01:f6:d6:0e:5f:6b:3a:eb:31:
18:a5:e2:03:b4:e0:ac:5d:a9:02:5f:07:93:c9:15:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:0E:F0:B3:2A:66:BE:46:73:45:57:DF:39:B8:70:B1:72:11:13
X509v3 Authority Key Identifier:
keyid:DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4b:11:4a:00:c7:8f:ef:0c:a9:fd:f2:d4:25:a5:7c:54:89:
f1:50:63:95:99:ae:3f:eb:4b:9e:4d:a2:41:6f:9b:7a:cf:73:
09:97:c1:ac:cb:03:14:44:34:48:42:d5:cc:ec:57:f0:95:fe:
93:7f:6b:f0:65:13:94:f7:a1:bb:9d:ca:03:c5:31:60:ed:e8:
fe:7f:2f:58:91:39:b5:9f:3f:03:99:2b:06:a8:91:6c:25:d9:
ef:e0:1c:1b:a1:1e:e8:9b:ae:86:0c:e5:48:d3:d6:60:46:8e:
44:65:60:64:3d:5d:64:49:12:76:ee:2f:78:d7:08:23:d0:e0:
af:a8:e6:87:fb:e0:4b:42:33:0e:24:65:b2:e3:80:89:bc:2f:
6a:e1:18:c1:8a:7a:4d:63:65:81:b6:56:3e:a2:05:10:1a:a0:
0a:9f:55:91:32:43:9d:5d:cd:c1:59:f5:b7:cd:97:fc:55:93:
b9:0b:31:7e:ab:b1:bd:c3:88:4d:4f:9e:ff:15:04:ac:04:33:
67:14:a4:e5:4f:3c:ae:2a:bf:55:46:b5:89:47:1a:8e:4e:28:
65:80:f3:08:6a:88:fb:e6:ce:80:ff:00:62:26:6a:e8:bc:d8:
8c:22:bb:00:39:8a:b9:71:91:d9:8d:2f:7e:b1:94:5c:eb:ea:
f8:e0:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:40:00 2026 by rpki-client