Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
File: vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft (raw, json)
Hash identifier: hoy5V7k1rDnk0EXa9K9QJTduv2zQk5AEpnqxxIdp69g=
Subject key identifier: C3:AC:94:17:A0:D0:F6:B9:A1:30:A6:58:00:E7:67:C6:D5:32:23:52
Authority key identifier: BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
Certificate issuer: /CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Certificate serial: 019EBF9121B946098D9ACAA8B36D9A92924F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
Manifest number: C8
Signing time: Sat 13 Jun 2026 06:00:19 +0000
Manifest this update: Sat 13 Jun 2026 06:00:19 +0000
Manifest next update: Sun 14 Jun 2026 06:00:19 +0000
Files and hashes: 1: QjlLqXwrKuX4WWijKXyWQlrwzSI.roa (hash: RrqtKaSOGqQ6cVJgOKK900pw+4nXE4aG5H706/A/L7s=)
2: dBuZbSPKal6c4zm6YNTPS1fr3GQ.asa (hash: ogSY4EAD3D6IaYFiG2filgxMUAq2W39XeRjlBqtFTic=)
3: vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl (hash: sw0To7lYA4gRrze6bWOhmRB+WMNhm7jriQXVp6w7lg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:21:b9:46:09:8d:9a:ca:a8:b3:6d:9a:92:92:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Validity
Not Before: Jun 13 06:00:19 2026 GMT
Not After : Jun 14 06:00:19 2026 GMT
Subject: CN=c3ac9417a0d0f6b9a130a65800e767c6d5322352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:67:9f:e2:97:29:81:1b:4e:1e:0b:4d:81:
11:8f:fc:7f:81:59:c0:10:7f:36:17:67:29:c2:fa:
c0:d4:7c:86:7c:6e:f4:66:ae:3e:1a:db:44:6a:8c:
74:d2:0f:a7:1f:a4:ab:44:11:41:c1:ea:de:b3:6f:
50:49:d6:dc:11:19:92:73:a2:02:66:e3:26:4e:b3:
35:6b:43:76:2d:d9:0d:3a:f7:46:fd:52:ea:b6:63:
3c:b2:0b:e4:37:bd:4d:ff:b7:63:bc:1f:b1:2b:eb:
5e:0c:39:e9:47:24:13:28:5e:96:aa:dd:b2:e0:d8:
aa:f1:bc:47:34:3c:c8:32:1d:a6:de:76:65:0c:ea:
45:d9:b1:a7:94:07:84:4f:ff:ff:af:c9:76:df:c8:
29:d5:b9:cc:00:1a:3f:a1:b9:6a:c0:7f:23:e1:bb:
22:5a:68:20:6f:46:ff:ac:e3:ff:b1:d4:95:67:f9:
58:0b:84:53:de:52:6e:50:0d:2b:23:ff:44:52:90:
d1:4a:0a:88:bc:db:ce:ad:db:00:00:5b:dd:dd:2e:
1a:d5:3e:83:3a:e2:e7:cd:3f:00:2f:c7:22:86:5a:
7b:be:17:86:16:13:9e:ef:79:88:48:ca:ff:c4:09:
c5:29:55:d1:3e:73:58:ce:b0:6f:b9:eb:26:77:64:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AC:94:17:A0:D0:F6:B9:A1:30:A6:58:00:E7:67:C6:D5:32:23:52
X509v3 Authority Key Identifier:
keyid:BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:be:df:54:c5:e2:af:f7:66:64:46:10:a0:41:b8:0a:3a:82:
c8:ca:9c:b8:9e:cf:30:27:ba:59:41:cc:70:90:d9:64:96:73:
ed:5e:3e:2e:c2:1a:fc:90:4f:90:c1:b8:91:37:83:93:59:68:
ba:e6:f7:7b:64:18:34:8d:50:71:c7:d3:76:ac:9c:e9:05:8b:
a8:66:b7:5e:bd:77:f8:99:01:da:79:cd:88:2d:cd:a2:da:93:
7c:ed:09:20:a4:4e:2a:44:85:84:4f:87:75:45:a6:27:93:74:
14:60:43:87:be:dd:19:b0:b1:cd:a8:44:cd:87:ee:8d:f6:e5:
24:17:e2:b4:db:b9:26:44:78:51:20:b0:37:96:fb:5e:6e:0e:
16:34:a6:3c:3c:08:e1:f5:09:2a:6d:87:95:f7:a7:16:57:b9:
3d:6a:0c:21:ee:7e:0b:b4:fa:34:8b:1d:f6:e8:6d:5d:0a:6b:
12:60:c2:b0:59:ac:2c:e4:c9:e6:2d:96:02:a3:6e:85:b5:ea:
9c:cf:e3:ff:86:1e:00:a0:bc:9f:98:9b:a7:a0:39:e2:13:df:
e4:f1:fa:d6:40:90:48:3d:41:8a:d9:5a:4c:21:f2:27:ec:96:
6d:3e:c8:0e:d4:5b:e4:a3:00:46:cb:a0:7b:d7:95:de:08:af:
9a:96:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:36 2026 by rpki-client