Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: g1F3I9NUNPzllvY45iUlwLuGMRvzWB2YYjvs1q5wCLo=
Subject key identifier: BB:75:B1:9B:9D:18:94:5E:35:00:9A:BB:CA:C0:27:75:7C:D1:75:2C
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 019EBDA3072A47EE55BA84DCB7DCFE440595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 195B
Signing time: Fri 12 Jun 2026 21:00:38 +0000
Manifest this update: Fri 12 Jun 2026 21:00:38 +0000
Manifest next update: Sat 13 Jun 2026 21:00:38 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: g0N6J/UcpwWLe8zGWb8t7syTnyQoxURgtt0FVwyFllY=)
2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:07:2a:47:ee:55:ba:84:dc:b7:dc:fe:44:05:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Jun 12 21:00:38 2026 GMT
Not After : Jun 13 21:00:38 2026 GMT
Subject: CN=bb75b19b9d18945e35009abbcac027757cd1752c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d8:6e:fd:46:9a:cb:24:de:15:ec:28:1d:c2:
18:62:45:37:59:58:ad:97:18:50:d2:73:7e:f2:88:
dd:83:54:19:83:ae:63:c6:84:6a:d5:e1:86:47:f7:
bb:bc:1f:f9:f8:56:af:14:8a:38:04:96:98:0c:b2:
bf:41:0b:ae:94:39:1b:01:d7:32:1a:aa:09:6d:5e:
be:a4:02:5b:4d:ce:5c:cc:eb:74:ea:78:05:f8:06:
d0:07:71:8a:4e:e9:b5:6e:30:16:cc:53:58:09:bb:
82:60:04:15:a3:d6:57:a0:e8:39:d8:47:e1:ed:65:
e9:9b:51:fe:4f:42:08:05:37:15:e7:e7:91:7e:76:
ed:6e:a9:15:19:8b:ba:8e:03:e0:ab:f8:db:2e:62:
37:7c:e7:a7:4f:61:20:df:f3:01:b3:74:a5:92:cb:
2d:ef:26:17:40:8f:03:e5:cd:da:23:9a:da:86:82:
a1:71:16:9d:c9:19:54:8d:36:57:73:c6:b7:bc:df:
7b:32:64:e1:26:26:a2:65:bd:f8:f5:d6:07:18:ee:
0e:87:b1:ad:08:a6:0a:66:b6:6f:98:62:51:fd:38:
16:30:58:e8:dd:b6:76:a0:25:54:df:fc:09:07:9a:
5b:e0:2f:68:43:17:27:f3:12:06:00:44:09:b8:66:
be:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:75:B1:9B:9D:18:94:5E:35:00:9A:BB:CA:C0:27:75:7C:D1:75:2C
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:43:1c:f8:0c:86:ff:2e:ef:36:bc:d5:ee:6e:8b:24:7a:04:
43:4c:fb:99:b8:59:96:42:f1:54:f3:ed:1a:9c:98:1e:b5:49:
87:76:ad:cb:64:d8:4c:c0:5c:fe:40:73:f1:64:9b:a8:79:bb:
b9:fb:0d:dc:63:bf:d5:65:33:90:24:f9:c1:4b:e3:9e:e9:a0:
a9:18:ec:d5:d9:9b:ab:f2:98:ed:4e:10:9c:e8:f9:6c:db:e5:
e6:1b:06:8a:3d:1e:9a:62:3b:99:e3:1f:ab:c3:4c:6b:22:dc:
2c:bd:b5:9b:b8:b8:f0:9c:eb:53:17:f4:2d:f2:69:8b:f0:77:
0e:97:ef:d6:9a:fd:2c:64:88:6b:80:2d:e5:f3:76:94:38:52:
63:50:46:62:5b:ee:cd:39:34:43:3a:57:df:66:dd:a1:7e:d0:
fd:35:a5:b6:53:22:45:f8:94:8c:67:40:8e:67:1c:ee:46:f3:
e1:64:f6:36:fb:e8:ce:b6:a7:75:c6:95:e7:05:3a:26:6d:88:
00:fe:42:9e:09:eb:68:54:85:c3:16:20:9a:cd:0c:bd:14:be:
19:fa:39:a1:e5:a5:de:00:c6:75:92:f4:fe:b3:bd:b1:e4:cd:
da:7d:01:cb:82:18:c7:2b:2f:27:c8:a8:79:17:3e:3a:bd:28:
be:e3:eb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:23 2026 by rpki-client