Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier: MRrNrBXtyGGa9nS/UK/iEYUP0f/kNYYiNW7ljFC4tCg=
Subject key identifier: 8A:D2:51:F9:5B:9B:EC:E2:24:24:68:82:A2:4A:B5:53:52:DE:FC:DF
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial: 019EC1B74ED6F30AA22A0AEDC5763D77829F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number: 106A
Signing time: Sat 13 Jun 2026 16:01:16 +0000
Manifest this update: Sat 13 Jun 2026 16:01:16 +0000
Manifest next update: Sun 14 Jun 2026 16:01:16 +0000
Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: 3PQSQBeaqxYY8gvINfGfQRcTgecKOjzatfsCYVMXJxY=)
2: G0H1NZGAbtsyoA2e--eIMeks25w.asa (hash: hXpme5X4li6UsZQl1l4A/uCi4ohrlAjpSmRIc/a8sgw=)
3: MJozjNqLnPQyzg6RwUr67wJnDj0.roa (hash: GrVcVPg8QNDGergH76PpUDqLKrseVEoNPTuvrqjQXRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:4e:d6:f3:0a:a2:2a:0a:ed:c5:76:3d:77:82:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Validity
Not Before: Jun 13 16:01:16 2026 GMT
Not After : Jun 14 16:01:16 2026 GMT
Subject: CN=8ad251f95b9bece224246882a24ab55352defcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:23:60:6a:ad:f9:10:db:72:57:ca:8e:20:
73:bf:eb:43:cd:ba:02:32:31:75:77:86:d1:02:da:
ba:3a:ca:55:45:69:f7:7e:f3:11:8c:3c:c3:43:fb:
df:63:0c:b6:20:b4:20:ae:c6:4d:aa:e4:32:0c:eb:
4d:7b:1c:ad:cb:f8:6c:86:7a:07:35:74:42:52:0b:
85:ba:50:3f:99:07:50:76:60:96:a5:40:c7:16:9d:
54:dd:57:c3:e7:eb:a0:89:36:2f:69:4a:b1:df:7d:
ae:84:a6:7f:02:df:3a:8d:bf:80:e0:82:47:ac:1c:
46:aa:07:d9:b0:7f:25:6f:ff:a6:e0:ca:95:03:2f:
3a:6a:a0:95:45:66:69:52:66:0a:6a:27:1b:1d:de:
db:3e:9d:20:8a:1e:81:fd:cd:a6:12:03:4e:a0:14:
0d:1a:bf:7b:a3:2e:ef:f3:f5:38:25:51:d0:a8:9c:
45:31:0f:54:cd:db:3d:0d:16:00:e6:d8:58:bc:00:
43:bb:4a:49:c1:fc:e4:98:3a:e3:e8:0b:d8:04:05:
f9:91:cf:2a:3d:55:51:36:b1:62:d6:66:e3:15:66:
02:fa:5e:ed:db:0a:7a:c5:cb:65:b0:8a:90:95:f1:
ad:e9:89:77:3c:15:e0:d5:59:59:bc:55:48:a3:3d:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D2:51:F9:5B:9B:EC:E2:24:24:68:82:A2:4A:B5:53:52:DE:FC:DF
X509v3 Authority Key Identifier:
keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:74:74:b6:58:ad:4d:54:f0:52:20:08:df:07:65:bc:b7:87:
a4:71:ff:19:00:51:15:83:90:88:36:02:ca:dc:8a:38:74:3d:
f7:74:28:5c:6c:72:a9:a3:52:c7:d6:4f:c1:84:47:92:c9:c2:
a8:6f:95:78:1f:5a:e6:16:66:82:40:c3:1e:a9:c3:c2:bf:fc:
61:fd:bd:84:cc:10:53:da:51:7b:fd:9e:ca:63:c3:69:06:35:
32:e9:9e:e2:e3:0f:6b:17:42:e8:24:e5:97:72:94:8c:82:58:
4b:b1:bc:e3:26:46:f2:ff:a4:f5:ae:fc:db:9f:93:f4:09:2a:
c2:1e:17:77:36:98:01:96:88:4b:d9:6b:58:31:cf:58:48:f4:
ba:d4:6b:0c:22:b2:25:50:d0:c0:05:ea:6c:90:ac:59:38:2c:
04:64:31:ae:aa:1d:71:d4:a7:42:52:9b:ba:84:7f:ee:2c:a6:
1c:34:48:dc:13:dd:75:23:b2:4a:d6:95:eb:7e:81:54:ad:95:
7b:d1:31:f1:37:16:6f:5b:72:df:61:23:5f:61:95:f5:ce:eb:
a3:4f:c2:76:cf:59:ee:77:f3:59:64:27:45:97:51:26:17:91:
4b:a2:25:47:c3:32:46:3e:14:7b:9d:33:48:90:70:0a:db:2c:
97:44:87:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:43:03 2026 by rpki-client