Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
File: 3-KkwH5N3j8ePKw5ujshNTGsy7k.mft (raw, json)
Hash identifier: KREBpcWFK7rNH18pw4ITghjczhiYhZWXDRMK7n2pf0Y=
Subject key identifier: 71:E1:C6:62:AF:C0:35:08:FB:3A:0F:B3:7F:E6:CE:F3:9A:3B:09:50
Authority key identifier: DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
Certificate issuer: /CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Certificate serial: 019EC1B6B4690DBBFD43647B9A50397B9A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
Manifest number: 010A
Signing time: Sat 13 Jun 2026 16:00:36 +0000
Manifest this update: Sat 13 Jun 2026 16:00:36 +0000
Manifest next update: Sun 14 Jun 2026 16:00:36 +0000
Files and hashes: 1: 3-KkwH5N3j8ePKw5ujshNTGsy7k.crl (hash: vcpuIRS7PWFH+XqnvVni5iBzFVv+AoEsA6NW5ya+t74=)
2: Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa (hash: FRvotk1GU1c0bgTGRLjQpv9XYU8csQF9vIzVahVu7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:b4:69:0d:bb:fd:43:64:7b:9a:50:39:7b:9a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Validity
Not Before: Jun 13 16:00:36 2026 GMT
Not After : Jun 14 16:00:36 2026 GMT
Subject: CN=71e1c662afc03508fb3a0fb37fe6cef39a3b0950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:7d:20:00:ef:87:f8:eb:b0:c7:b3:34:bb:
e5:cb:60:a6:fa:3c:68:ec:b2:89:93:bd:ad:f6:74:
25:3f:9f:55:d7:a8:70:94:51:92:3b:c8:73:cb:98:
ee:15:eb:f8:c1:11:2d:52:9b:c8:eb:0d:47:09:1e:
e6:03:65:a1:d1:a0:1e:37:53:75:91:95:3c:03:34:
51:d0:1a:9f:b4:97:b3:8d:8f:5b:52:e2:e4:d3:a7:
96:a7:e7:a7:17:35:bb:54:d2:fb:de:71:ce:2b:e3:
9a:73:56:c1:9d:37:28:11:d0:b6:05:18:29:f8:de:
f2:cd:ad:6c:23:f1:ff:4c:3a:94:8c:31:7f:95:f8:
9b:fc:88:35:f9:d3:fd:e7:52:6c:7e:c0:44:e5:c9:
ba:9e:2e:26:a4:ae:45:5f:f0:43:3c:64:d4:f2:59:
2a:ca:3f:ec:e4:bf:63:25:eb:18:23:97:6c:87:38:
e9:b4:2b:90:3b:96:43:12:fa:0e:a7:d4:27:87:c1:
5c:d9:23:20:7f:ed:25:63:ee:68:2b:98:fe:ae:97:
e7:c6:35:c1:28:3e:6a:43:00:40:63:a3:9b:38:76:
6b:03:6a:e1:c1:ca:55:10:9b:7c:4e:ea:88:59:57:
10:3d:b5:3e:34:59:04:61:ea:4d:79:1c:f2:1d:0c:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E1:C6:62:AF:C0:35:08:FB:3A:0F:B3:7F:E6:CE:F3:9A:3B:09:50
X509v3 Authority Key Identifier:
keyid:DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:49:9e:b4:22:87:1f:08:de:6c:6e:63:76:c9:a0:73:39:2b:
06:eb:7a:3a:cf:90:e0:87:bb:93:75:14:f4:52:12:01:29:11:
cb:e3:80:29:89:4e:2d:58:b6:50:51:44:57:84:69:0d:4d:ce:
9a:bc:16:e6:08:a7:82:a4:78:ac:78:d6:6d:2e:3c:22:ab:f3:
91:f7:82:5c:7e:79:03:b3:be:cb:e7:5c:fe:ef:5d:99:5f:b1:
23:75:59:82:d9:cd:0f:3f:0a:c4:22:bc:9b:a7:e3:46:0b:17:
db:51:5d:6d:2c:29:c9:ac:6e:e0:cb:db:de:85:64:c6:e5:1f:
91:1a:87:9e:39:9e:15:ce:a4:72:85:b3:f8:ea:80:9c:49:48:
1e:86:dc:f8:aa:93:d3:23:07:fb:34:fe:d3:76:0b:6d:41:0b:
17:db:d1:70:f7:05:f3:7c:93:10:e8:df:20:d6:43:19:31:e0:
5d:de:b1:1d:d4:ca:cf:49:92:9f:7e:8c:35:3e:23:74:f2:2d:
df:b0:97:31:8c:52:e1:c7:9f:b6:04:79:90:0e:d6:79:e5:93:
cf:fc:7d:3d:af:73:47:e1:c2:0d:25:3a:97:73:5f:46:7a:43:
56:84:f8:7c:a8:54:25:77:13:30:1b:29:c5:ea:e6:62:93:25:
49:24:5f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:36:33 2026 by rpki-client