Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
File: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft (raw, json)
Hash identifier: zSzuWzIx1qohuLDToJHYs5n/OG2ahsq3kpeG7GUzgw0=
Subject key identifier: 7E:98:E8:CE:65:81:67:D0:20:39:1C:C5:18:B3:7A:E3:35:9F:41:04
Authority key identifier: DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
Certificate issuer: /CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Certificate serial: 019EC3DBFAB66F4AB7C368A90DD69E828CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
Manifest number: 0149
Signing time: Sun 14 Jun 2026 02:00:33 +0000
Manifest this update: Sun 14 Jun 2026 02:00:33 +0000
Manifest next update: Mon 15 Jun 2026 02:00:33 +0000
Files and hashes: 1: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl (hash: jrkQQEw4t4KtwnFwbbu2Dudn9hwvxp0312/nkeKy9GE=)
2: Eczgp2EFr8e_XSlXUgSdJTrIAak.roa (hash: FsSSezhMi82MyPxKqmo1dtY5pOhu7CRckdx69CzRJss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:db:fa:b6:6f:4a:b7:c3:68:a9:0d:d6:9e:82:8c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Validity
Not Before: Jun 14 02:00:33 2026 GMT
Not After : Jun 15 02:00:33 2026 GMT
Subject: CN=7e98e8ce658167d020391cc518b37ae3359f4104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:48:5f:81:26:2b:59:e3:4f:47:98:ce:2a:
93:5e:3e:14:67:5a:62:09:10:1e:c8:fe:b7:3f:a2:
54:a7:f0:fa:be:d2:d1:36:9c:1a:f2:ca:ca:6c:40:
d4:75:f5:48:71:79:13:b7:8f:2c:b6:9a:3f:ab:a5:
af:0f:36:5b:44:24:a5:18:40:ac:3b:4d:25:1b:25:
a5:45:5e:86:83:01:09:e0:fb:a2:3e:37:f9:57:55:
62:88:04:76:c4:4c:01:e3:95:d3:c5:5a:d8:40:6b:
88:39:c5:41:e0:3b:49:11:4f:ce:08:b9:53:20:b6:
49:d0:4a:3e:63:4b:e9:27:72:25:41:10:ff:a3:e8:
89:12:1e:8d:fb:de:44:de:38:2d:91:18:5a:fa:a7:
5f:0c:19:6a:1e:1d:74:b3:c0:0c:a3:e1:6a:b2:13:
20:2d:34:56:54:da:8b:02:3b:fb:03:95:4f:93:30:
ab:e4:33:01:d7:39:bf:7e:5a:18:1a:c9:25:38:12:
8c:75:5d:09:c5:ee:1f:75:2a:64:20:12:09:b7:1d:
93:56:ad:f2:35:d5:90:ce:9f:c2:5c:cb:65:ee:a6:
df:a9:93:bd:be:b7:a9:76:97:dd:4d:87:6a:b2:2d:
0e:0f:89:f5:58:1f:27:4f:19:16:06:e5:9d:96:1f:
f1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:98:E8:CE:65:81:67:D0:20:39:1C:C5:18:B3:7A:E3:35:9F:41:04
X509v3 Authority Key Identifier:
keyid:DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b0:fb:75:37:16:c8:96:db:d5:83:b7:a1:84:20:56:a9:cc:
92:3a:94:0d:95:18:33:6f:9b:bf:41:fe:75:59:89:13:f5:a1:
4b:4c:bf:76:07:dd:e8:cc:c7:9e:2b:df:4a:a2:c4:ea:9f:f5:
4a:52:53:76:8a:a3:e3:93:49:f6:f8:fb:32:c8:85:51:fa:54:
b8:b0:19:6a:2c:df:e6:f1:9e:20:2f:59:ba:2c:3d:d0:8a:3f:
cb:28:35:be:49:50:07:9e:7b:db:0b:3c:06:da:bb:9a:6b:eb:
01:9b:9f:b0:69:36:89:85:1f:4e:90:2e:08:88:ab:0e:e1:47:
1f:ee:be:b6:94:7c:b3:93:fc:d6:c0:a6:d6:27:0e:81:6a:59:
6e:84:f4:2c:34:9b:28:5a:e6:f8:ab:35:6b:2f:7f:b7:b6:15:
cb:59:26:7c:56:11:bc:8f:52:7f:02:85:54:e7:2b:46:f7:3d:
60:9e:21:d0:39:50:c5:17:57:7e:35:f5:af:90:36:d8:c2:a8:
80:b5:fd:ae:39:36:0a:69:5c:09:81:85:fb:71:cb:d8:40:32:
1b:c0:ff:9a:a8:9a:39:ec:bc:15:c4:19:ce:2e:6a:f9:e5:b0:
d8:ee:87:04:a0:33:d5:a3:78:05:79:fb:b0:0f:f9:c7:f5:58:
89:b8:bf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:09:42 2026 by rpki-client