Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: ZBfhN5/NboQSjKmitBW4rq6WwsKBDVxBRydWNIdjjvQ=
Subject key identifier: 3D:1C:CD:DC:69:37:6B:1A:69:FA:A1:E7:39:63:66:17:1C:1C:C3:20
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 019EBF2335B187EE01884EABD923000B3B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 04:00:16 +0000
Manifest this update: Sat 13 Jun 2026 04:00:16 +0000
Manifest next update: Sun 14 Jun 2026 04:00:16 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: 0UorgswseetMOBnJr1ZvTnPweG84Z9tkgde3OeWRxEo=)
2: 3ostfnsnfixfxEqrfywy9eGNnT0.roa (hash: TMH3qMKKkwZR6QRgNjTjxS5fjcdU4kA+Vz+Hy9Lz73k=)
3: d2YSIWOU5vk9kBcZoNOEBYoB5d8.roa (hash: 7IimrnEh+R6l+Oc9i2fjThrQzcZAJGrkh3OgCSJFbow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:35:b1:87:ee:01:88:4e:ab:d9:23:00:0b:3b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Jun 13 04:00:16 2026 GMT
Not After : Jun 14 04:00:16 2026 GMT
Subject: CN=3d1ccddc69376b1a69faa1e7396366171c1cc320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:9f:07:fe:c2:ca:c0:00:5f:1f:03:f0:ce:
34:80:82:3e:fc:83:21:61:1f:4c:f2:53:19:a2:53:
d2:bd:25:39:3d:07:32:e9:96:0d:e0:4d:e2:e8:a6:
38:a7:5c:38:2f:bb:9b:b7:54:11:ba:42:8b:78:bf:
c1:c6:74:ae:dc:77:1e:ce:ba:e0:07:8d:75:3b:3a:
bf:b9:aa:3e:d3:f1:64:86:df:21:c1:2a:f3:47:b4:
cb:ce:e4:5d:03:d8:09:40:77:42:c7:4f:77:9d:60:
4a:3b:ee:60:c2:69:5e:17:82:8c:f1:23:01:d5:6d:
a7:73:8b:0c:82:42:bc:90:b2:80:fe:06:fc:8c:c0:
3a:0a:a6:d1:3c:1f:07:a0:49:1d:c2:14:21:5b:02:
cc:60:61:ab:7b:e2:86:98:ab:25:0c:79:7c:d7:2a:
9b:6c:8c:82:e3:c9:86:1e:be:2c:72:83:93:e0:db:
9d:51:dd:a0:42:f7:22:2e:51:5f:c8:29:20:8e:d0:
d0:c1:80:9d:bb:b5:04:57:bf:69:be:4a:17:55:5e:
43:0c:81:48:a6:38:1a:d7:30:ba:76:2b:71:40:0b:
ca:4e:f6:12:01:5d:46:ea:15:2c:3b:0c:6b:0c:cd:
ef:5a:a2:03:3f:a1:53:a2:76:23:05:63:0c:49:fc:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1C:CD:DC:69:37:6B:1A:69:FA:A1:E7:39:63:66:17:1C:1C:C3:20
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cf:7d:48:2b:a0:49:5a:5a:88:4e:d5:a6:b4:a7:f2:4b:58:
89:a9:65:3f:a6:8e:1d:61:d5:0c:ca:4c:99:ab:22:9b:50:6b:
47:90:1f:7b:6f:a3:fc:1a:ae:78:54:fd:a1:9b:2f:85:82:04:
97:3b:0c:a6:9f:f6:e0:9b:45:d2:85:28:59:ec:44:ba:c1:c3:
a2:25:9f:aa:01:64:3c:5a:27:b7:4e:14:de:5b:cf:e4:dd:3c:
da:80:c0:f7:92:a7:c3:2b:9a:d5:2c:b1:8a:f4:97:22:b7:35:
c8:e5:b5:8f:74:94:5f:ed:91:67:cc:b6:2e:1e:12:8d:cf:90:
4a:a6:f2:49:d2:ea:0a:5e:7b:f4:e0:e6:6d:3f:9e:10:02:f2:
64:c1:c0:41:20:25:28:2b:b1:0c:88:35:41:ef:0f:41:af:5b:
85:1a:c4:fb:01:0e:c6:57:2f:cc:ab:99:57:ad:31:22:01:3a:
03:03:dd:79:23:0e:0b:96:4f:e2:46:28:0c:69:70:29:90:c5:
d7:d5:50:63:7e:2b:c4:18:de:0d:d4:39:14:73:1c:3a:b1:30:
7d:45:28:aa:52:c3:6d:25:b3:b6:a9:6e:7e:68:0e:14:c0:7e:
c3:7c:af:2e:fc:05:b7:c9:8a:ef:c1:6c:fd:a1:d7:e2:58:9d:
50:7d:ce:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/IzWxh+4BiE6r2SMACzsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjNlYjYzMTliYTQ1NGQzOTc2NDU5NDVjZTU0Mzk1NzZm
YWM3NDEwHhcNMjYwNjEzMDQwMDE2WhcNMjYwNjE0MDQwMDE2WjAzMTEwLwYDVQQD
EygzZDFjY2RkYzY5Mzc2YjFhNjlmYWExZTczOTYzNjYxNzFjMWNjMzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbGfB/7CysAAXx8D8M40gII+/IMh
YR9M8lMZolPSvSU5PQcy6ZYN4E3i6KY4p1w4L7ubt1QRukKLeL/BxnSu3Hcezrrg
B411Ozq/uao+0/Fkht8hwSrzR7TLzuRdA9gJQHdCx093nWBKO+5gwmleF4KM8SMB
1W2nc4sMgkK8kLKA/gb8jMA6CqbRPB8HoEkdwhQhWwLMYGGre+KGmKslDHl81yqb
bIyC48mGHr4scoOT4NudUd2gQvciLlFfyCkgjtDQwYCdu7UEV79pvkoXVV5DDIFI
pjga1zC6ditxQAvKTvYSAV1G6hUsOwxrDM3vWqIDP6FTonYjBWMMSfzO0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0czdxpN2saafqh5zljZhccHMMgMB8GA1UdIwQY
MBaAFN5j62MZukVNOXZFlFzlQ5V2+sdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMt
MWUxOGY1YjQ5MDVkLzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMtMWUxOGY1YjQ5MDVk
LzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbM99SCug
SVpaiE7VprSn8ktYiallP6aOHWHVDMpMmasim1BrR5Afe2+j/BqueFT9oZsvhYIE
lzsMpp/24JtF0oUoWexEusHDoiWfqgFkPFont04U3lvP5N082oDA95Knwyua1Syx
ivSXIrc1yOW1j3SUX+2RZ8y2Lh4Sjc+QSqbySdLqCl579ODmbT+eEALyZMHAQSAl
KCuxDIg1Qe8PQa9bhRrE+wEOxlcvzKuZV60xIgE6AwPdeSMOC5ZP4kYoDGlwKZDF
19VQY34rxBjeDdQ5FHMcOrEwfUUoqlLDbSWztqlufmgOFMB+w3yvLvwFt8mK78Fs
/aHX4lidUH3ONQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:31 2026 by rpki-client