
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: //s/X8cdxyuyZBotJ9HbINjOfvXWfRh1FRbmAy9lAPE=
Subject key identifier: 1B:45:A3:C7:9D:3A:81:0C:7C:B9:BB:55:F1:3C:D9:D0:CC:8B:30:EA
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 019EBFFEF6B0A6A08EE542E0A0D2B6BC2084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 08:00:17 +0000
Manifest this update: Sat 13 Jun 2026 08:00:17 +0000
Manifest next update: Sun 14 Jun 2026 08:00:17 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: ghLI4yY6gaDpcDWANJDissDlmSqeSEz2gMavfAonVkQ=)
2: 4Qc85N4EwfShTiGhUnkvPvcjOEs.roa (hash: 5gcG+cc/9htcQzQfIk5Lbs8J3j2mNNeVz49M8qI81nA=)
3: dHkvv2AfkDDcX-uBDSlHxgyE9BM.roa (hash: MkJGi0URj4efKyUrfGEHvlM7u0U0Wn9mOiKm3NgF9Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fe:f6:b0:a6:a0:8e:e5:42:e0:a0:d2:b6:bc:20:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Jun 13 08:00:17 2026 GMT
Not After : Jun 14 08:00:17 2026 GMT
Subject: CN=1b45a3c79d3a810c7cb9bb55f13cd9d0cc8b30ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cb:be:1b:ad:99:e5:9a:06:62:09:02:82:f7:
6f:c0:3f:90:64:7a:ca:de:3f:8e:21:ff:94:28:2e:
16:93:6b:68:ef:d5:0f:01:67:32:52:ae:76:f9:0d:
e7:b8:e9:e0:8f:e9:4e:ff:8d:55:47:a0:9c:43:c0:
8c:08:1c:4b:07:a6:af:95:09:b6:9c:98:c1:51:9d:
4e:7e:10:6e:70:18:0c:32:0d:69:c0:97:c8:bd:e0:
4f:cd:60:ab:a1:e7:d1:b8:59:79:43:7a:f7:d5:c0:
ab:d6:bd:6b:a2:f1:99:ce:e2:a4:75:0a:47:48:a8:
25:66:76:d4:1e:06:7e:43:0d:53:47:ff:32:5f:29:
f8:87:a7:68:17:ba:1b:3f:a8:6b:d0:38:fb:c5:81:
f6:29:e1:28:67:38:18:25:96:01:72:10:e9:b0:f8:
d5:a7:80:06:8e:ce:42:e0:0a:44:c0:16:5d:5f:37:
dd:d8:f1:a4:87:58:ac:87:aa:f9:92:9f:b6:1a:a6:
5f:e9:23:7c:5b:9f:ae:e6:54:95:6b:a0:cd:63:19:
0c:b1:4c:e0:1a:7d:ac:fd:d4:52:b3:e0:47:5d:32:
e1:e9:c5:41:3d:d7:41:bf:11:ee:79:03:5f:84:68:
ec:29:5d:52:39:c3:54:d2:34:5a:c6:61:b7:90:8c:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:45:A3:C7:9D:3A:81:0C:7C:B9:BB:55:F1:3C:D9:D0:CC:8B:30:EA
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d8:7d:0f:0f:64:ea:6f:e4:a0:52:37:be:e1:34:95:e6:26:
48:7c:30:b5:3c:4b:95:55:76:f3:64:6d:91:40:aa:c9:d2:2b:
29:4e:7d:9b:1c:0d:3a:ef:ce:c5:87:61:6a:72:83:2b:57:b7:
51:a7:1e:b9:08:05:af:dd:e3:9f:c6:c7:45:3e:6a:04:b4:27:
38:87:9a:fe:ee:07:11:a3:8c:ed:aa:a1:95:7b:05:89:e5:74:
aa:3a:4c:90:f0:ad:09:57:28:de:28:d7:3e:10:96:37:05:8b:
40:c7:7d:1a:e1:cc:79:26:bc:3f:1f:4a:78:21:ec:bb:3b:26:
de:a4:dd:9d:07:96:18:99:8e:d7:cd:78:70:62:19:5a:a1:9f:
27:be:f8:11:25:1a:bb:86:66:c4:70:ee:bf:53:1b:e5:62:26:
a0:f7:a6:85:2a:8d:9a:53:b5:6a:33:d1:2d:10:76:5b:cc:54:
99:a8:12:76:e0:b2:c4:d6:58:e7:55:85:3e:ce:bf:44:71:af:
11:5e:35:99:aa:d1:5a:f6:0c:8f:a5:45:cf:e6:10:08:7d:8d:
ed:3d:00:65:56:b2:f4:0a:5b:6f:00:c1:12:d8:bb:43:52:e3:
a0:7f:ab:9d:71:5c:dd:94:f4:de:36:e5:9a:cb:3a:d3:e3:54:
72:86:03:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:07:16 2026 by rpki-client