Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: RPd40tvnIF263R1yHRp0R/Y4S+/ctJ+mqr7pG39O/9o=
Subject key identifier: 55:8B:51:BE:E1:8D:A1:42:1D:1F:0B:70:49:87:69:AF:27:3B:71:09
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 019EBF9124057268DBCF0D0BFA545A41C54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 0A53
Signing time: Sat 13 Jun 2026 06:00:20 +0000
Manifest this update: Sat 13 Jun 2026 06:00:20 +0000
Manifest next update: Sun 14 Jun 2026 06:00:20 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: e9Dk8ohNNZxGX2LrquP4aqTxbX/h8uvHdggDAF47kwo=)
2: d1jP90vciiSKp3aodWDKGnu38Bk.roa (hash: nxrJlRcagS8YYk40MdJDJveIMr4yj0rHLHg2nPrUsoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:24:05:72:68:db:cf:0d:0b:fa:54:5a:41:c5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Jun 13 06:00:20 2026 GMT
Not After : Jun 14 06:00:20 2026 GMT
Subject: CN=558b51bee18da1421d1f0b70498769af273b7109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:49:d6:5e:71:ba:b0:35:f5:8c:ea:92:1a:
5e:0e:97:6c:17:fd:b1:d5:f3:d7:5a:91:e2:bc:8f:
2c:48:18:75:1f:e6:9e:c5:ed:3d:fa:56:ff:50:5c:
be:5d:1c:2c:85:02:c0:bc:ca:e6:e7:e9:8c:0b:9e:
c0:dc:41:90:c0:b9:44:60:c9:de:b6:d7:ef:cc:b5:
12:e4:80:a5:ce:02:e4:f6:03:04:03:e6:eb:d2:91:
b7:d6:b8:a7:32:d3:72:cc:a5:76:70:cb:d3:31:57:
cf:7f:30:24:24:ec:da:8a:46:59:81:c8:11:c5:6f:
e1:9e:83:30:8d:b8:01:af:ba:e6:53:3d:00:04:a1:
ae:e5:70:f7:b9:4d:87:e6:0c:d2:54:d8:2d:ac:07:
ad:86:e8:9f:ed:ed:b5:40:05:9d:03:cc:93:99:13:
25:69:0e:1a:e4:af:b4:fb:7a:31:45:fc:a5:76:f7:
55:60:81:c9:f3:23:94:38:9a:5e:7d:8f:c2:43:f8:
88:2f:c0:85:fb:ac:e5:d1:c5:34:9e:3d:77:22:18:
f5:03:76:7f:18:36:ed:75:76:b1:0a:d7:df:b0:32:
93:23:7a:6f:21:41:e2:a7:98:53:66:b9:73:e9:d7:
b9:88:0a:4a:17:2e:96:b0:e3:55:79:b3:ae:b3:ea:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8B:51:BE:E1:8D:A1:42:1D:1F:0B:70:49:87:69:AF:27:3B:71:09
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9b:7c:da:50:d6:78:f1:60:65:84:b3:b3:2e:8d:66:e5:9f:
2a:4c:52:fe:cf:6c:35:91:23:85:b2:68:f1:96:8c:47:bd:fe:
ef:ed:19:b4:ff:68:bb:4d:29:f8:8c:1b:37:f4:7b:4b:49:b6:
01:49:9e:b2:cb:03:bb:8f:73:b3:da:95:9e:95:18:b6:4f:ea:
bc:cb:d2:87:e8:7d:79:31:c3:be:92:62:d4:90:04:a0:4d:6e:
37:da:51:88:24:b1:40:0e:21:83:42:41:89:f8:ab:70:4f:d1:
9a:c3:25:8d:4d:82:41:17:f6:48:a1:8b:cb:88:2c:4f:26:d6:
77:ae:a6:5b:f2:a2:ea:b5:52:90:da:f9:5a:d0:a8:06:4f:04:
8f:56:e2:b1:86:58:85:3e:6a:23:49:0d:0f:ae:bb:3b:4c:47:
ea:94:d0:bf:e8:a8:ec:9d:a4:8b:7b:2d:9d:55:2a:5b:5e:25:
cc:53:39:ef:04:a4:3c:76:a1:b6:b8:a8:a8:35:7e:68:4e:15:
4c:07:36:48:8e:c9:6a:61:3f:c2:63:6d:18:d6:a7:23:38:12:
fc:7b:80:eb:ef:32:ea:03:5d:35:f0:1e:1a:a2:c7:90:45:5d:
5f:5f:5e:9d:b1:42:78:3e:db:52:bb:c4:66:1c:70:8d:a3:4f:
3e:f4:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:57:18 2026 by rpki-client