Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
File: a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft (raw, json)
Hash identifier: tkOXhusdK7plBDTfXcX4TFVR6PVNeohqqN2V7LMey+Y=
Subject key identifier: 32:B5:F5:BB:94:15:6D:36:7C:9E:DB:0B:70:4A:D5:23:98:C9:9F:67
Authority key identifier: 6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
Certificate issuer: /CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Certificate serial: 019EC337EF9925091AF52AC031071D05EBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
Manifest number: 1F
Signing time: Sat 13 Jun 2026 23:01:23 +0000
Manifest this update: Sat 13 Jun 2026 23:01:23 +0000
Manifest next update: Sun 14 Jun 2026 23:01:23 +0000
Files and hashes: 1: AYWssxj1PLbVr_URF-ZIiz6BS4I.roa (hash: 9obR855p0IhaLrIXPPGSL2nYoYCxku1wM9uG/XbR5LA=)
2: a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl (hash: G0dKimvoybCiSXbqpCYEVYHKS94OZZFUKSDtpihABaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:ef:99:25:09:1a:f5:2a:c0:31:07:1d:05:eb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Validity
Not Before: Jun 13 23:01:23 2026 GMT
Not After : Jun 14 23:01:23 2026 GMT
Subject: CN=32b5f5bb94156d367c9edb0b704ad52398c99f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:b4:bb:33:66:7b:ba:6c:bf:37:bb:ef:70:
51:86:13:93:3f:2b:6c:d4:d2:11:0d:5d:1c:60:75:
99:ae:fc:3b:41:94:9e:22:7a:15:1b:72:b1:95:8c:
10:b0:ba:c5:71:66:20:71:ca:c1:8e:77:48:d6:a7:
63:71:68:9f:ee:0d:c1:dd:79:4d:60:3c:ec:32:f1:
dc:61:03:68:0a:f0:59:5b:18:b2:d0:bd:08:11:1c:
88:fe:f4:16:fe:38:04:47:1c:c0:a5:a0:66:08:b4:
9e:27:60:a1:59:b5:75:15:35:aa:df:65:6b:73:57:
51:f6:1b:b6:60:99:fd:b8:78:7b:40:db:06:2d:7a:
79:13:03:95:d3:34:17:3e:d1:d3:3d:43:81:d1:b8:
2e:79:3b:ec:4d:d2:9a:b1:40:20:c1:35:06:95:54:
bf:71:51:fa:c9:19:5a:7d:0f:3a:08:e5:5a:6b:40:
9a:9b:ae:6c:9b:07:bc:0b:e7:13:cb:a3:6b:3e:8a:
82:97:5b:1f:5b:2c:46:da:11:2a:8e:7a:c5:ba:9e:
b5:53:c9:e1:fe:81:24:fb:5e:6a:8c:bc:5f:61:ed:
39:4b:2e:3b:81:fb:eb:f7:04:8c:c8:aa:f7:b9:e9:
ee:98:90:8f:fc:25:36:25:ac:5c:3e:63:d8:79:b3:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:F5:BB:94:15:6D:36:7C:9E:DB:0B:70:4A:D5:23:98:C9:9F:67
X509v3 Authority Key Identifier:
keyid:6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b2:86:1c:eb:a4:0e:ec:ab:8f:96:fc:f7:6f:af:42:df:8c:
f4:5d:8a:c4:bf:76:64:a2:70:43:7b:b0:87:3a:e3:cf:21:ae:
df:49:0c:00:89:a1:e5:89:96:5c:04:0e:46:b7:1f:41:aa:f4:
e5:93:b8:ad:0b:02:9e:3f:e7:b6:a6:f2:30:9c:30:80:e2:87:
fc:dd:7e:dd:59:fd:1c:33:70:9f:b3:eb:51:7f:fd:01:a9:b2:
c7:a0:ef:85:35:02:af:da:c5:a2:27:6b:74:da:66:70:9b:20:
32:88:62:d3:dd:79:92:71:54:9d:bb:a1:ec:4a:d0:b7:aa:6d:
ae:f7:d7:37:8f:f7:f7:3d:9f:a4:0a:e8:07:51:69:3b:8d:4b:
89:c8:75:3c:4a:67:d6:b0:c5:b4:5f:95:6c:a2:2c:d6:33:ac:
62:69:be:3f:34:20:e0:5e:1f:12:10:48:a0:19:0c:a9:bc:b0:
3e:0a:86:44:14:f2:6b:60:a3:98:b6:ad:1b:98:97:f1:34:c1:
47:d0:8b:c0:ac:c3:05:fa:ec:6c:e1:20:cb:d9:ae:79:be:ce:
f4:55:05:f5:08:3a:37:f1:e8:31:e3:49:c2:ee:ae:85:24:76:
c8:6c:d5:33:4a:db:91:5e:f1:8b:ad:c5:d9:3f:f6:a1:47:86:
4d:81:6c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:10:43 2026 by rpki-client