Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: uZofeB5oxqfE/f9lHCk41sqg/n2DVg2o3YY86cICK9c=
Subject key identifier: F3:D2:01:6B:44:D8:D4:44:B5:5D:34:01:B6:4F:DC:F2:BB:4D:4C:83
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 019EC0A3C1CFF36AD7FEE9A5FAF623779F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 11:00:17 +0000
Manifest this update: Sat 13 Jun 2026 11:00:17 +0000
Manifest next update: Sun 14 Jun 2026 11:00:17 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: 8p7cnX3IsfLbAgG5/0J4drzPgz9l79UfDAozyDz9RvE=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:c1:cf:f3:6a:d7:fe:e9:a5:fa:f6:23:77:9f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Jun 13 11:00:17 2026 GMT
Not After : Jun 14 11:00:17 2026 GMT
Subject: CN=f3d2016b44d8d444b55d3401b64fdcf2bb4d4c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:f5:68:b0:fa:c8:96:32:12:7b:cb:00:c5:
32:0e:10:50:5f:e4:05:9c:f4:d8:52:b8:59:ee:0e:
bf:17:7d:06:e5:80:95:be:d3:87:b1:37:f2:84:8d:
39:44:c3:37:dd:3e:9c:63:04:9f:1e:72:6f:7b:f8:
ed:a6:eb:7e:76:cd:4e:b8:6f:fb:0b:20:34:01:81:
11:57:a2:a0:46:87:46:45:8f:cc:fb:e2:87:93:99:
38:f7:0d:66:fe:9b:a1:2c:30:ed:c4:51:2b:dd:1d:
b0:88:ac:5b:3e:79:57:72:84:4d:c8:81:3c:b9:44:
12:10:b1:13:a3:91:15:0a:76:e5:95:04:56:6c:b7:
f7:eb:d4:a8:8d:7f:d0:0c:0b:b1:c4:77:08:12:73:
60:c8:d9:82:84:11:2b:22:c4:67:40:b6:09:98:e5:
3b:d1:3b:5c:89:c2:2f:e6:23:92:4e:5c:76:c2:df:
ab:ae:30:87:45:0e:82:60:3e:a2:5d:83:38:cc:83:
7b:b3:62:1f:50:b2:4c:e6:ae:2b:0f:4e:9f:b1:33:
0e:86:3c:ad:57:33:6b:b7:2d:58:d5:6c:eb:42:ba:
db:28:34:96:f9:16:35:c4:52:3e:23:21:01:9e:62:
fe:90:ee:64:62:55:61:d9:b6:11:8f:3e:46:5a:53:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D2:01:6B:44:D8:D4:44:B5:5D:34:01:B6:4F:DC:F2:BB:4D:4C:83
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3e:ad:22:c6:f6:07:f1:d4:49:36:96:77:2d:00:04:a6:5d:
e4:2a:b0:a8:ce:7e:77:d4:90:e2:b5:41:b7:25:dd:80:68:d1:
94:0c:53:cc:6d:b5:f9:85:71:7e:06:2f:37:71:07:e4:67:f2:
77:59:ac:9b:7c:88:86:bd:4d:d9:f7:0d:f5:5f:1b:84:83:06:
76:5e:f3:e2:0a:82:02:3d:db:fc:b0:6d:b7:b6:12:5c:53:b7:
40:3c:af:2b:2e:a6:98:bd:ae:dc:a0:a2:af:5f:3c:a6:13:f7:
ea:78:fc:3a:af:ff:2a:87:20:ce:54:6e:82:dc:53:b9:f9:b5:
e0:ed:53:b9:70:98:38:06:ea:2c:12:c0:b8:86:a1:2e:63:4f:
5f:34:24:94:d9:04:48:9b:0f:6e:d1:ba:64:e4:51:d5:e2:74:
1e:9c:34:a0:89:37:b1:39:8b:19:da:1d:50:16:e3:a2:e5:48:
d4:49:0f:4d:3e:f0:dc:b8:93:bd:27:a0:bf:c9:dd:e7:75:64:
6a:3d:f1:2c:aa:b0:57:29:41:11:ef:56:2d:59:ef:a1:6b:9e:
cb:c1:c5:a5:b3:a3:52:bb:82:b4:65:e0:81:a9:43:03:2d:c1:
36:78:38:01:1d:61:5c:1e:d6:9a:5f:7f:28:87:62:4a:f1:2b:
71:9f:07:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:04 2026 by rpki-client