Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: WykHc3UQrHNNtnuDZ5M6CDzuo6tzgE16A5ZbGtse5lk=
Subject key identifier: 02:0D:51:4C:83:C9:19:8C:35:AA:5E:C6:6B:2D:99:6B:43:40:AA:E4
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 019EC0DAF7AD7D2F34C250C11160DE0CDC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 037F
Signing time: Sat 13 Jun 2026 12:00:36 +0000
Manifest this update: Sat 13 Jun 2026 12:00:36 +0000
Manifest next update: Sun 14 Jun 2026 12:00:36 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: d9+LvjMHruiE8+fKTMLkn7nI1L4sY/sXMjm2WQBXJic=)
2: UcfLZ7L91GVWjLGWEYmlJV2c10o.roa (hash: uVZ/PpG6ROCuILZTxmMA8qXeD47uyabcF2INsekoGNc=)
3: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (hash: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:f7:ad:7d:2f:34:c2:50:c1:11:60:de:0c:dc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Jun 13 12:00:36 2026 GMT
Not After : Jun 14 12:00:36 2026 GMT
Subject: CN=020d514c83c9198c35aa5ec66b2d996b4340aae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:3f:56:2f:ed:36:96:b1:be:78:ad:a8:0d:
fd:e9:61:bb:1d:9f:5c:06:cc:15:e8:01:51:47:db:
fd:ef:6d:82:c3:7a:af:ec:ae:9d:6f:50:46:0d:89:
98:d7:66:aa:b5:33:9a:fd:06:10:77:8d:92:1e:0d:
40:99:15:d2:26:0b:c1:cb:43:99:90:df:35:61:c7:
a6:1e:1a:22:33:9c:c9:6e:8d:72:e3:a5:3d:d3:db:
5e:10:0d:0b:e1:1e:41:a9:c0:04:79:68:5f:32:ba:
a3:b1:a6:84:0b:99:1a:e4:99:4c:96:56:42:ad:3c:
ca:27:b3:93:ce:c9:2f:5c:fb:c2:3e:8a:72:6d:03:
7f:6e:8e:f7:ba:d5:3f:a2:ed:c7:d0:69:53:d3:1d:
77:32:75:9a:13:1b:9b:a7:93:db:03:a5:4f:f0:69:
1f:89:56:a2:b1:39:0d:da:1f:d7:b3:18:e9:1f:a8:
06:f3:51:91:f3:25:22:a6:26:d7:8a:90:21:35:ac:
e2:c4:a3:e0:0a:5e:6c:b0:4d:71:02:09:02:fe:58:
f5:2a:98:49:ec:38:20:1d:e6:18:72:7e:b8:19:44:
35:5f:3c:a2:e6:a1:df:01:23:15:79:19:10:35:79:
43:99:0e:1b:11:6f:de:74:18:24:40:26:09:45:f9:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0D:51:4C:83:C9:19:8C:35:AA:5E:C6:6B:2D:99:6B:43:40:AA:E4
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3b:75:60:5d:b2:56:be:55:0c:25:a8:13:a6:66:00:50:af:
22:0d:db:b9:0b:70:52:9e:2b:40:ba:63:4c:32:4b:fb:60:7e:
ec:eb:77:68:04:d4:57:1b:44:82:83:2c:e6:25:ea:f0:d8:f8:
d6:04:88:bd:46:7c:57:b1:9d:0c:35:6f:d2:9e:28:f7:3b:5d:
e6:0a:0d:f3:13:71:1d:25:ff:8d:8e:78:6b:61:1f:af:13:44:
c7:4e:77:e4:e6:8c:6d:3f:7a:04:c9:66:be:41:48:de:c3:28:
50:30:bf:5e:72:b2:70:bc:0e:5d:30:c5:af:65:02:22:43:71:
6f:b9:2c:35:3f:05:87:f9:f1:51:e6:af:9a:02:50:47:a3:88:
a0:48:be:74:97:ca:69:f3:e9:41:14:7b:89:e9:d3:db:3f:22:
71:aa:a9:59:24:c6:0d:41:b0:02:e7:d2:3a:8e:23:ae:19:ee:
40:26:8d:22:c8:6e:32:2e:28:64:46:6b:8d:25:d4:76:67:4a:
7b:97:d2:b4:95:ca:96:73:2f:97:4f:48:05:10:86:78:bc:36:
48:0f:17:83:86:e7:e3:83:2d:cb:63:e9:5f:f5:63:c9:2c:cb:
94:c9:a9:2f:62:d0:69:36:b9:24:f5:a8:c7:9c:c9:00:1e:50:
08:bc:57:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2vetfS80wlDBEWDeDNxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTRhNTA3YWQxNTg2NWEwYjJlZWMwOWViYjRlNzU0NTdm
NDAxOGIwHhcNMjYwNjEzMTIwMDM2WhcNMjYwNjE0MTIwMDM2WjAzMTEwLwYDVQQD
EygwMjBkNTE0YzgzYzkxOThjMzVhYTVlYzY2YjJkOTk2YjQzNDBhYWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhk/Vi/tNpaxvnitqA396WG7HZ9c
BswV6AFRR9v9722Cw3qv7K6db1BGDYmY12aqtTOa/QYQd42SHg1AmRXSJgvBy0OZ
kN81YcemHhoiM5zJbo1y46U909teEA0L4R5BqcAEeWhfMrqjsaaEC5ka5JlMllZC
rTzKJ7OTzskvXPvCPopybQN/bo73utU/ou3H0GlT0x13MnWaExubp5PbA6VP8Gkf
iVaisTkN2h/XsxjpH6gG81GR8yUipibXipAhNazixKPgCl5ssE1xAgkC/lj1KphJ
7DggHeYYcn64GUQ1Xzyi5qHfASMVeRkQNXlDmQ4bEW/edBgkQCYJRflLHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAINUUyDyRmMNapexmstmWtDQKrkMB8GA1UdIwQY
MBaAFN6kpQetFYZaCy7sCeu051RX9AGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iNDkxZTAtMTk0MS00MjczLTlhMjUt
OTIyZTIyNDQ1OWZiLzEvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iNDkxZTAtMTk0MS00MjczLTlhMjUtOTIyZTIyNDQ1OWZi
LzEvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzt1YF2y
Vr5VDCWoE6ZmAFCvIg3buQtwUp4rQLpjTDJL+2B+7Ot3aATUVxtEgoMs5iXq8Nj4
1gSIvUZ8V7GdDDVv0p4o9ztd5goN8xNxHSX/jY54a2EfrxNEx0535OaMbT96BMlm
vkFI3sMoUDC/XnKycLwOXTDFr2UCIkNxb7ksNT8Fh/nxUeavmgJQR6OIoEi+dJfK
afPpQRR7ienT2z8icaqpWSTGDUGwAufSOo4jrhnuQCaNIshuMi4oZEZrjSXUdmdK
e5fStJXKlnMvl09IBRCGeLw2SA8Xg4bn44Mty2PpX/VjySzLlMmpL2LQaTa5JPWo
x5zJAB5QCLxXmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:16:09 2026 by rpki-client