Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: pSKYkP54xeTOBtTkXTwIvqWDEWhCak7/9kGOOibZGPY=
Subject key identifier: 2F:EA:84:7A:83:91:38:5D:3E:E5:B1:8F:2F:FE:1F:1C:FA:43:02:16
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 019EBEEC7B63FE0D61381D56C34A1F31BDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 1899
Signing time: Sat 13 Jun 2026 03:00:29 +0000
Manifest this update: Sat 13 Jun 2026 03:00:29 +0000
Manifest next update: Sun 14 Jun 2026 03:00:29 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: h4gjioy2uLmgXCCV5rXLlsBBA5IVYjX0szwi8ZVVPyk=)
2: xU2EDS3A1kqxHB5fmWawALQua5w.roa (hash: gy/kCjpuCiDHyb5854bh+q6WsJ4/S+45FLFM/o6soug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:7b:63:fe:0d:61:38:1d:56:c3:4a:1f:31:bd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Jun 13 03:00:29 2026 GMT
Not After : Jun 14 03:00:29 2026 GMT
Subject: CN=2fea847a8391385d3ee5b18f2ffe1f1cfa430216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:ff:c7:90:f5:e7:45:91:c8:c0:07:0f:be:
d0:95:12:61:06:47:92:e0:14:06:3b:83:56:2e:a2:
5e:6e:77:f8:68:29:c1:75:6e:af:01:2c:37:d5:06:
64:a1:36:48:db:7a:cf:31:56:f8:e9:ce:3d:8d:90:
db:b5:24:b6:33:a3:59:fb:70:8a:c3:80:67:0f:63:
32:20:19:7f:1b:f7:df:60:68:c9:85:0d:b2:ee:c6:
1f:0a:8a:19:77:7e:71:cb:93:b8:f6:9f:68:58:8a:
e8:2e:0a:28:23:22:25:59:18:2b:84:65:37:5a:8f:
9a:70:65:27:3a:35:2d:dc:d1:5b:97:00:9a:38:fc:
49:c1:8a:f9:f3:f6:3f:58:dd:51:38:80:4b:25:60:
4c:7e:5a:e9:04:93:29:5e:35:90:90:5a:7b:3e:b3:
1b:f0:70:1e:7f:b6:b9:71:be:f6:0b:8f:aa:f9:e6:
1e:eb:3e:df:50:ea:21:7f:92:d8:bb:db:33:39:37:
f6:7b:46:98:1d:a4:e7:3d:a2:06:28:b7:a4:22:03:
ac:15:cb:87:e7:1e:f9:c5:8a:08:b8:02:c9:80:43:
4c:7f:7b:e2:bc:93:56:c8:a7:54:5a:72:86:2b:7e:
0f:6b:dd:aa:3a:04:64:7c:63:04:02:6f:bb:01:f6:
ca:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EA:84:7A:83:91:38:5D:3E:E5:B1:8F:2F:FE:1F:1C:FA:43:02:16
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:41:ae:50:59:d0:fd:a7:77:d0:e0:3c:a9:1d:12:e5:61:c7:
23:51:73:02:be:31:6e:4c:9d:24:6b:79:80:27:c6:76:27:3f:
8f:6e:4d:82:a2:11:a2:68:9c:ac:0e:cb:b2:91:5d:4c:d0:73:
c9:eb:06:74:54:41:75:fb:23:0a:fa:36:e1:dc:db:0b:7d:be:
17:94:11:c7:84:91:00:ee:0a:5f:cb:87:08:76:98:55:c2:76:
ff:75:12:b3:c2:3e:25:ff:bb:02:8f:01:bc:39:6c:49:53:64:
54:ef:1f:ef:2f:cd:80:f5:14:45:81:fb:a3:dc:29:ce:33:cb:
16:f2:82:e0:fe:27:ea:9a:93:56:d8:8e:13:18:43:3e:c7:ff:
12:aa:8f:b0:a9:33:12:1f:96:0b:7b:db:e7:3f:81:97:ca:6c:
a7:1d:ab:a5:8d:88:fa:9d:1a:c3:23:6a:08:03:c4:66:f2:c1:
52:77:b0:0a:31:38:a4:f8:79:d4:bc:0d:5a:df:ff:27:80:aa:
da:37:e6:ca:11:9b:36:bc:2a:6a:d0:f3:40:82:1e:cb:5c:81:
72:22:59:28:08:84:14:ca:89:db:c5:12:89:04:1f:4f:91:7a:
e8:fb:c0:fd:47:b6:22:65:0a:02:1b:2c:02:d0:1f:56:75:6f:
fa:4a:9b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:27 2026 by rpki-client