Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: OoSpUglIeLftti8YUFASwgq3FTDeqqGsKt/xtrx2xO0=
Subject key identifier: B6:6A:7F:1A:C1:A0:8B:F1:A1:5B:9F:C4:F2:D5:C3:FE:02:D8:87:8A
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 019EC148926F2EA2174E4752B3DB7353A915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 149E
Signing time: Sat 13 Jun 2026 14:00:19 +0000
Manifest this update: Sat 13 Jun 2026 14:00:19 +0000
Manifest next update: Sun 14 Jun 2026 14:00:19 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: 5DVlj1uozuebrdmR6slcPPRzcREEAswlrua7huNyqaY=)
2: 6TUuFWgBkm98OJlIkhqINWWAoI0.roa (hash: GA9PdoKCJE0Uq5wLiSfj1Mw/gZ339oU3m0s7B3MQNRA=)
3: _qA7-iuYEvTbfVREYl9q7tay4Bk.roa (hash: Z/glgCy5dfzogAACVBlWtKvnqFreHrzxfTJl0PSlZgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:92:6f:2e:a2:17:4e:47:52:b3:db:73:53:a9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Jun 13 14:00:19 2026 GMT
Not After : Jun 14 14:00:19 2026 GMT
Subject: CN=b66a7f1ac1a08bf1a15b9fc4f2d5c3fe02d8878a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:57:22:10:5c:7c:95:78:1c:3c:1b:af:62:
de:c3:5e:7f:7b:99:5c:d3:bf:4f:fb:07:1f:e3:59:
a7:8b:7d:1e:62:57:3f:9a:96:9a:80:bc:e3:34:4f:
b0:5e:d6:c2:c4:25:48:c9:25:fe:a8:a8:4b:d9:01:
30:b7:9d:c6:00:6f:a5:86:d9:db:b3:bb:b3:a1:a3:
59:20:5e:af:99:3b:bd:79:37:ee:5e:4b:ad:7d:1e:
1d:93:a2:5d:67:ec:2c:06:31:ad:33:f1:d5:15:eb:
62:2d:97:a2:3e:83:c7:48:bd:85:54:da:e1:95:e5:
90:0f:c2:e8:6d:c8:1d:cd:57:75:7a:c2:7f:3e:48:
92:be:3b:ca:47:35:44:5d:20:d2:83:d3:50:9a:e0:
cf:48:0c:3c:60:cd:6b:54:c7:92:bf:d5:5b:01:c7:
1d:cb:52:15:82:e4:4b:86:79:f0:03:a5:8e:3b:39:
d9:8f:62:be:e8:72:45:c2:b5:49:f5:cb:4c:17:5f:
ff:cd:8d:4c:55:86:28:3c:2e:02:97:bf:bb:1b:90:
a8:c1:0b:46:6b:19:93:a2:1f:88:c4:05:6a:b9:d8:
9b:6c:34:8b:84:63:f0:01:18:c1:c7:d1:63:6d:39:
b7:e7:c3:ea:53:6c:56:31:f5:69:4d:26:0b:cb:c8:
ee:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6A:7F:1A:C1:A0:8B:F1:A1:5B:9F:C4:F2:D5:C3:FE:02:D8:87:8A
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7c:a8:ac:2d:92:e7:de:00:9a:29:eb:9d:0e:4e:98:40:8f:
03:d8:67:da:a6:7f:43:31:ca:09:bd:22:cb:ad:24:05:79:95:
10:a8:1a:36:b7:6d:0b:39:6e:5f:7d:06:c5:1b:7b:d4:f9:99:
12:f7:1d:b5:fa:0b:c1:eb:18:3a:7a:6e:40:0b:8b:8e:49:88:
07:04:bf:5e:32:7f:8f:5b:78:9a:ed:63:97:12:ce:77:00:b3:
dc:a5:85:29:61:ab:40:d4:a6:69:ef:7e:bd:a6:2f:79:ab:12:
33:67:8a:9b:8a:c2:32:80:bc:9d:9d:8d:8b:b6:32:d4:0f:49:
d5:22:63:43:67:f6:ca:30:7c:09:96:57:23:ae:c5:5d:6f:14:
8a:99:b7:1c:09:07:83:df:8c:2e:10:f6:74:79:65:10:66:bc:
81:02:f3:9a:72:73:a1:6e:0e:cb:9c:42:b6:9b:19:4d:f1:ff:
a4:c2:3d:ed:b7:50:6a:11:b0:8c:de:87:a5:77:1d:a8:8d:49:
c7:e8:7c:be:bc:de:95:b5:ed:dc:cb:ab:63:07:3b:0a:30:71:
3f:e1:63:23:36:1f:e7:81:f3:a9:94:ef:f3:4f:67:9d:4a:8c:
53:6e:a0:73:59:83:df:59:a0:5b:ac:3f:9f:16:0e:45:1d:a7:
74:a5:67:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:56:59 2026 by rpki-client