Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: RzNbYVxGOhSZqJpbtnLeuKg+5Nx0p07LxHQ7PHaD1f0=
Subject key identifier: 6B:96:E3:59:9D:C6:FE:3E:C7:03:9A:7E:AD:F4:D9:75:3C:05:2D:A0
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 019EBDA3088367BE5B0C0CFBE3A3CE8FA945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 1968
Signing time: Fri 12 Jun 2026 21:00:38 +0000
Manifest this update: Fri 12 Jun 2026 21:00:38 +0000
Manifest next update: Sat 13 Jun 2026 21:00:38 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: /8dGzP+QmL4tJ9OUubeM4y2Bi05WEBu5DFuMjtkLgWs=)
2: 9zaCEl1SgGOc-A7zIR9SmhOUbCA.roa (hash: eFtzjl4+/9tlA7bC6sKrJsHMLsAxLeLlfmditC5aZTs=)
3: _QaXkGOzguH_3SYFNe1d3y7B2Tw.roa (hash: KztSdz5ODte8K6guWxzrXZlYDG1F2rVO/Vqml3J+Q0o=)
4: fsnKswSMyeM4OK2o8J_ZzwwYiiI.roa (hash: tWk+nFmUcDykdNhoUyVPw1UFkRx/3AJQMBQrLxH1g5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:08:83:67:be:5b:0c:0c:fb:e3:a3:ce:8f:a9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Jun 12 21:00:38 2026 GMT
Not After : Jun 13 21:00:38 2026 GMT
Subject: CN=6b96e3599dc6fe3ec7039a7eadf4d9753c052da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:f7:5c:7c:1b:fe:48:37:31:dd:ba:7c:87:
ea:b1:05:eb:e8:9f:ea:e9:66:3b:78:f7:68:fa:47:
34:2a:68:54:ce:9a:70:8c:e8:17:72:4c:a4:33:e2:
95:8d:30:33:89:89:5c:f1:bc:7b:d2:a3:e7:13:f5:
16:8b:7b:50:a9:00:5c:98:99:01:2b:be:0e:0b:4b:
61:e6:5c:e9:63:e4:7c:98:f1:f5:7f:42:2c:ab:59:
3d:ab:3c:84:c4:27:bd:f7:8d:0e:b3:97:63:9a:03:
de:ed:14:c7:40:f9:2c:7f:7f:55:18:e9:43:3a:02:
10:cf:c2:dc:00:56:ab:e9:61:90:de:3a:78:03:2e:
db:59:07:d5:4c:18:d9:bc:6a:e7:73:f2:79:27:36:
f9:23:c7:cd:65:d0:5f:f7:25:5c:c1:83:10:0d:e2:
6b:00:a0:f6:00:f8:c1:56:68:ab:47:52:30:16:ab:
e2:79:57:88:6c:ff:ed:d4:a3:bd:db:92:a1:c2:69:
8e:a2:76:35:4a:0f:ff:6c:a9:76:1d:8b:7c:c0:21:
24:b7:c0:ee:10:1f:06:06:d9:56:a8:10:40:13:a2:
a8:64:cb:17:c6:e6:cc:61:6d:4f:47:91:03:1d:55:
65:4a:b4:b3:a2:4b:d5:c3:6e:c2:66:53:19:d8:1b:
3a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:96:E3:59:9D:C6:FE:3E:C7:03:9A:7E:AD:F4:D9:75:3C:05:2D:A0
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d8:ea:88:90:07:0f:75:73:77:34:46:d4:41:7a:61:95:46:
2b:cb:93:69:cd:23:d3:1e:cf:0c:c2:dc:e0:ac:c4:fa:57:1b:
e3:04:2d:bd:a1:ce:13:0e:96:1f:f3:20:81:48:d9:f1:bd:c5:
e0:ab:c7:38:74:51:77:64:54:bd:a7:e5:f9:17:c7:af:14:14:
c3:fc:68:0b:6a:ae:d1:65:96:4c:3c:58:b5:05:ab:b8:b6:37:
4f:fd:1d:5a:9f:78:36:71:e7:99:94:fb:65:47:b9:1d:8d:1f:
67:52:06:e5:f4:89:c1:73:fa:d8:4b:90:4f:81:1d:32:31:32:
f8:3e:7f:a3:76:ef:b9:3a:99:65:c9:0d:3b:45:88:22:c9:d6:
61:e5:bd:ae:ab:17:0e:04:9e:83:9e:43:f9:22:85:e2:3e:e1:
e8:ac:1f:d2:bb:46:ab:4f:de:a9:d3:26:4b:3c:4f:32:a2:e2:
b0:91:0e:36:ab:f3:ef:cf:21:b1:1b:5a:05:c2:84:a7:3c:f6:
20:00:79:4d:9e:60:c6:cf:d6:e4:43:1c:78:d5:7a:4a:96:4a:
65:3f:7d:79:65:dd:bf:7b:e2:6c:a2:10:23:ab:7d:e7:47:00:
23:f1:bc:ad:b4:62:0f:0a:09:30:d4:d1:48:d6:d7:86:fa:f2:
28:9c:06:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:06:08 2026 by rpki-client