
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
File: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft (raw, json)
Hash identifier: FO5VXV+M4JUsGkqSNx5LJctFuG0ez8t+4WBuXENLJQI=
Subject key identifier: 9B:F6:98:EB:D0:E9:5D:8C:BD:2B:BA:E9:D8:F5:1E:EA:25:33:8B:3D
Authority key identifier: DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
Certificate issuer: /CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Certificate serial: 019EC06D248071F599D6A68871196D4B1232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
Manifest number: 0142
Signing time: Sat 13 Jun 2026 10:00:38 +0000
Manifest this update: Sat 13 Jun 2026 10:00:38 +0000
Manifest next update: Sun 14 Jun 2026 10:00:38 +0000
Files and hashes: 1: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl (hash: qSLHsSAwnBcVtZmEfCMhxeuy0rWm36AloMRWYEXQUcw=)
2: FiJY_f6GKm6veDvPVDNX9LWOSRU.roa (hash: SMTBlb+NpQPNeXGuJJJYcwSp8wfNIzukvM7Bw3VT8hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:24:80:71:f5:99:d6:a6:88:71:19:6d:4b:12:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Validity
Not Before: Jun 13 10:00:38 2026 GMT
Not After : Jun 14 10:00:38 2026 GMT
Subject: CN=9bf698ebd0e95d8cbd2bbae9d8f51eea25338b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:b3:dd:d6:29:f0:13:ad:63:74:4f:4e:aa:
4b:ed:9e:3c:0f:67:97:63:4c:3e:db:33:8e:8c:3c:
b2:ff:53:63:a5:33:40:7a:1d:ae:88:a7:57:c7:3e:
cf:38:8c:53:eb:86:8b:f5:c0:2a:70:d4:25:38:78:
30:c8:e0:89:17:81:6c:77:00:e5:e0:79:46:b3:ed:
16:66:5f:9c:67:bc:46:14:8d:6d:81:99:11:a0:8f:
01:cb:22:62:ce:c1:8f:47:56:10:d0:c2:cc:69:67:
23:9e:38:3e:e0:63:29:f4:d1:a2:83:8f:5a:ff:e7:
cf:57:f9:cc:cb:f6:27:c2:22:e3:16:b1:b6:43:2f:
b8:95:30:5a:29:8a:3c:29:d8:e7:93:65:c4:52:29:
e0:50:f9:cf:3f:98:e9:31:a4:2e:b2:9c:20:be:c4:
16:98:50:cf:34:a4:bc:f4:07:7c:f2:83:9a:e8:65:
1b:06:e6:9a:98:c4:bf:43:05:75:f1:0d:aa:5e:56:
ea:66:35:45:21:e0:99:4a:fb:cd:ad:1c:0c:1d:e7:
12:60:4d:69:31:46:74:3f:a8:90:2f:86:cf:f3:7b:
be:28:53:83:a0:25:22:cc:17:3a:87:83:dd:57:29:
8a:17:d0:42:24:f1:7f:ca:27:2f:37:fa:be:d8:df:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F6:98:EB:D0:E9:5D:8C:BD:2B:BA:E9:D8:F5:1E:EA:25:33:8B:3D
X509v3 Authority Key Identifier:
keyid:DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3c:ac:62:0e:0f:82:be:ef:b7:fb:89:ae:91:f5:ed:7f:02:
d8:d7:78:3d:71:fb:04:11:83:b4:84:88:07:7f:ec:38:01:f3:
6f:bb:36:71:a5:b3:08:6d:c7:a0:16:38:cf:b8:1e:8d:83:95:
0e:5e:e3:6e:66:6c:2b:8e:f7:76:f8:c1:ed:87:8b:5b:43:21:
bb:a8:ea:85:b1:bc:77:fe:bc:7e:1a:22:13:37:c7:f6:6d:bd:
1b:7a:99:63:2e:ef:ce:c1:0c:6e:98:bf:89:a0:33:21:6d:e7:
32:ba:16:ce:5a:5f:b2:a6:b0:ea:22:e4:87:f5:98:22:06:e8:
0a:78:85:67:6b:59:e4:6e:13:6b:fe:b8:c0:c9:c0:59:9a:46:
75:be:e7:32:76:52:01:95:62:4f:ee:96:60:07:80:f6:8a:2e:
d7:9d:a3:33:3c:f0:30:00:84:e2:2a:2b:49:d1:01:56:a5:17:
15:7b:cd:fc:ee:f7:01:43:7d:d1:4b:7a:47:60:e8:32:a7:f1:
87:cc:44:9f:54:35:f1:d6:fc:c6:d7:85:36:a3:a6:a9:73:a9:
9c:31:7a:11:da:f0:aa:b1:f3:aa:4d:36:7c:40:0e:15:2d:43:
31:45:1d:bb:a2:bd:dd:50:af:07:13:70:00:6d:4a:3d:7f:2f:
d2:c6:94:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:47:47 2026 by rpki-client