Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: O2gHIn51cN4DMikhXfjYMOBA+GNluMrVBT1fMfSYfPw=
Subject key identifier: 5F:71:0B:9A:A9:F5:21:12:97:3D:5F:F2:33:B2:78:72:81:26:67:61
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 019EBEED37C5BDA94A37A912677EE0F10F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 0F89
Signing time: Sat 13 Jun 2026 03:01:17 +0000
Manifest this update: Sat 13 Jun 2026 03:01:17 +0000
Manifest next update: Sun 14 Jun 2026 03:01:17 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: lLuMCY45SpGU1fcGHPhN1o6PwcrlGiOSQK4Dc/6biTw=)
2: FvI2CfBEqCGxOU9VxVGUHdHpoa4.asa (hash: ap5sRIAkxp5GHqQokYSc9SeMBeiP5/U/kzY0Z/xAVTA=)
3: H5QErsI5RrGZOHFY6_FrSzEPwsg.roa (hash: BTdVxM8rbJfdiUp2j6fzsOE0ajTe0wntltZ6HVxnZpM=)
4: UtbWjP8TosULXxgOwSpGBsXAj1E.asa (hash: e7BKC4GZaIVKdGVBnnQIPsiQuksngCu2TeIqsWJLAi4=)
5: aAEGzSQAFN3XfOJTKzynLK0MJWQ.roa (hash: HGx+oxdetMBYVjpIjo60Q4M2urPI2bwYBUq579gQfFA=)
6: b7KDZwK5R28lE5M6tD1UYAgLTs0.roa (hash: chq9h/QyXrEES2o8hWXwMO8b44fg7JP3nOh0+1DILZ0=)
7: iTAqvs2G1UdUfx5Fmn2Z7H7-Wuo.roa (hash: L18Wb/sBRdrTPyOX3b7ZSqqO81GWE2YfQWPbOKytco8=)
8: n8wKAbeQwoniSlzobzWQkZPFQ90.roa (hash: gAASzqy3Nb3k3RF3IE7AiqoPFAF8THLrgzOMP+9Awr8=)
9: rxo-kMSJfYbIjml0McyLHchnJKw.roa (hash: 6yBdVD63LgbBLLvhVAYIbiNVvZCYYH7FdQZFXoIkCTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:37:c5:bd:a9:4a:37:a9:12:67:7e:e0:f1:0f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Jun 13 03:01:17 2026 GMT
Not After : Jun 14 03:01:17 2026 GMT
Subject: CN=5f710b9aa9f52112973d5ff233b2787281266761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:cb:de:5c:5d:30:fd:2a:44:1a:17:22:e4:
be:97:28:2f:c5:37:9c:d7:e4:01:79:61:ce:f2:cf:
23:b7:45:06:27:3f:b2:2a:cb:6f:bb:df:de:d8:80:
ae:95:9d:03:9d:52:f9:97:7d:2f:90:e6:67:72:54:
63:bc:59:97:c1:56:ad:33:72:93:ec:81:4c:79:49:
60:f8:47:e5:b4:20:32:b0:fc:18:d2:19:b1:b2:9c:
23:6e:cf:d5:2c:06:a9:4e:3a:04:8f:f3:72:8a:4d:
07:6e:52:03:09:a4:7d:b1:77:a2:a4:6a:b0:53:b8:
08:d6:9f:da:b6:01:ba:41:0e:60:50:c4:fe:cd:8f:
2e:f2:15:42:a8:ab:2c:d9:4f:0c:fd:94:03:26:40:
ea:46:ea:91:fd:d1:b7:ab:e1:35:04:6d:b6:13:70:
15:9a:30:1c:6a:19:51:35:3a:4b:ff:84:f3:0e:89:
11:c4:a0:6f:9c:b9:17:a4:7e:07:d2:84:8b:de:39:
39:1e:92:e7:96:e1:75:ae:87:7d:b0:36:82:fd:cc:
32:2d:42:2e:41:83:ca:c1:0f:cf:43:50:9f:7e:50:
70:0a:2a:8b:13:7b:ca:d5:25:19:c7:e7:fb:ef:ac:
4d:ef:ff:26:e2:b4:d2:3e:6a:f4:fc:94:02:32:9b:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:71:0B:9A:A9:F5:21:12:97:3D:5F:F2:33:B2:78:72:81:26:67:61
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:37:35:76:bf:1f:f7:0f:76:db:4b:d0:11:82:69:c2:8d:15:
31:36:bc:8f:96:fb:db:6e:39:54:70:45:d8:ee:fa:48:69:d1:
18:05:f8:ca:67:ee:32:82:41:dc:8c:dc:ca:63:da:f9:a1:35:
92:ae:2c:c5:1a:03:f1:d0:e0:fb:88:e4:4d:b3:5b:48:15:0a:
b5:3b:b1:35:0d:25:71:8e:00:98:18:a6:c1:d9:3d:95:c7:5f:
39:fe:48:44:15:14:58:f4:6b:49:d5:b7:da:d7:5e:44:bb:0a:
af:b1:5e:d3:17:0e:96:12:be:3a:d5:f1:ce:e9:eb:98:dd:4f:
7d:85:25:53:68:98:45:40:33:91:e7:68:42:26:b3:be:ac:fc:
5a:00:d1:a9:7c:dc:4e:95:58:20:5a:be:c5:f8:86:5c:45:3d:
ef:0e:9b:15:55:61:fc:75:ac:0d:60:01:ef:6b:15:a1:35:84:
df:06:a5:ef:57:39:ba:1e:be:9b:a2:a2:bc:d9:80:bf:52:9f:
f5:4f:2e:41:21:0d:19:c7:b7:c3:9e:3e:a3:a8:08:da:09:ca:
0b:5c:6f:cc:1b:aa:d2:bd:c7:2a:36:b9:36:14:d3:c0:29:49:
07:8d:f3:ff:c4:d1:30:8f:8d:e0:1d:12:a5:69:16:f2:73:86:
84:7c:91:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7TfFvalKN6kSZ37g8Q8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2
NGZhYTUwHhcNMjYwNjEzMDMwMTE3WhcNMjYwNjE0MDMwMTE3WjAzMTEwLwYDVQQD
Eyg1ZjcxMGI5YWE5ZjUyMTEyOTczZDVmZjIzM2IyNzg3MjgxMjY2NzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzzL3lxdMP0qRBoXIuS+lygvxTec
1+QBeWHO8s8jt0UGJz+yKstvu9/e2ICulZ0DnVL5l30vkOZnclRjvFmXwVatM3KT
7IFMeUlg+EfltCAysPwY0hmxspwjbs/VLAapTjoEj/Nyik0HblIDCaR9sXeipGqw
U7gI1p/atgG6QQ5gUMT+zY8u8hVCqKss2U8M/ZQDJkDqRuqR/dG3q+E1BG22E3AV
mjAcahlRNTpL/4TzDokRxKBvnLkXpH4H0oSL3jk5HpLnluF1rod9sDaC/cwyLUIu
QYPKwQ/PQ1CfflBwCiqLE3vK1SUZx+f776xN7/8m4rTSPmr0/JQCMpvVPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9xC5qp9SESlz1f8jOyeHKBJmdhMB8GA1UdIwQY
MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt
MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3
LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzc1dr8f
9w9220vQEYJpwo0VMTa8j5b72245VHBF2O76SGnRGAX4ymfuMoJB3IzcymPa+aE1
kq4sxRoD8dDg+4jkTbNbSBUKtTuxNQ0lcY4AmBimwdk9lcdfOf5IRBUUWPRrSdW3
2tdeRLsKr7Fe0xcOlhK+OtXxzunrmN1PfYUlU2iYRUAzkedoQiazvqz8WgDRqXzc
TpVYIFq+xfiGXEU97w6bFVVh/HWsDWAB72sVoTWE3wal71c5uh6+m6KivNmAv1Kf
9U8uQSENGce3w54+o6gI2gnKC1xvzBuq0r3HKja5NhTTwClJB43z/8TRMI+N4B0S
pWkW8nOGhHyR9g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:14:59 2026 by rpki-client