Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: ThkzVkQq4Z+y2lIUVG7F3wO7xFRnpCw68k2U3VlNfVs=
Subject key identifier: A7:3F:5F:3B:CF:BC:BE:25:85:C3:E6:22:3A:8B:3B:27:65:70:14:37
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 019EBFC897FAFFD357CB9D79DA4DC6CEAEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0FE8
Signing time: Sat 13 Jun 2026 07:00:54 +0000
Manifest this update: Sat 13 Jun 2026 07:00:54 +0000
Manifest next update: Sun 14 Jun 2026 07:00:54 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: O1g6zEfMIi5RDJLee0C2l4Y9EmGIFYLdB0BwwbBRtSo=)
2: ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa (hash: lyxkrW/UqVG023E4rkiQmolfszYoshoVE4T/qdnjtKM=)
3: Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa (hash: Dq+bYU+W7cSYjUMeWCs5QEHpiuPHvRD8GOeB0Afw45M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:97:fa:ff:d3:57:cb:9d:79:da:4d:c6:ce:ae:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Jun 13 07:00:54 2026 GMT
Not After : Jun 14 07:00:54 2026 GMT
Subject: CN=a73f5f3bcfbcbe2585c3e6223a8b3b2765701437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:60:2b:c3:f7:a5:6f:a0:63:f9:e9:c2:d6:
1f:ee:18:ad:82:86:d2:ce:2d:39:e5:47:22:4b:c4:
fa:0d:7a:b9:3b:67:9d:c2:81:d8:32:6e:b8:54:ac:
48:24:49:fa:f5:7a:f0:eb:fb:99:bd:8b:1a:eb:a6:
36:12:b4:86:4d:e9:64:2d:c3:58:8a:b6:73:94:2b:
56:c0:6b:20:30:5a:5d:80:cb:85:41:42:d5:5a:ee:
66:5b:b8:11:00:ed:34:50:7e:6d:01:38:d6:c2:ad:
c4:f7:d6:85:67:88:78:15:06:71:6f:c8:c0:f9:58:
0a:2b:e8:cc:91:39:84:52:9a:ae:83:5e:11:46:a7:
ba:8c:53:f4:0d:fa:f4:1f:03:f8:15:09:d9:4b:71:
14:08:7d:1f:ab:7f:07:b6:25:88:0b:ff:07:34:73:
e3:a4:b5:eb:5b:f7:7f:b1:53:b1:5e:7d:0f:d2:5f:
68:ee:d8:f0:c6:ea:a0:44:9d:f6:7a:c2:87:b8:51:
da:1f:08:16:ba:c6:8b:b1:47:6a:d5:48:e5:25:77:
22:4a:f3:83:9b:3e:d4:4d:ab:48:5d:82:b5:dc:1f:
47:8b:de:9b:6b:a1:fe:f6:94:61:19:42:09:9e:b4:
3b:69:c2:21:dd:62:92:dc:95:63:aa:73:2a:34:9d:
b7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3F:5F:3B:CF:BC:BE:25:85:C3:E6:22:3A:8B:3B:27:65:70:14:37
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:34:da:63:b7:bb:65:1f:e5:74:91:f4:39:e4:eb:71:50:76:
e6:01:e5:de:43:93:f6:cb:39:0f:ee:83:7d:1d:cb:76:4c:00:
fc:fb:d2:7d:a6:4c:1d:ee:ad:57:38:d8:6b:aa:8e:13:d0:87:
88:d3:97:d8:85:fc:54:d3:66:92:b3:7b:af:e0:d7:f9:07:c1:
c2:3d:9a:51:f4:34:64:52:3d:c5:de:a3:b3:e5:4d:4d:ce:b0:
cc:27:60:de:75:a6:3a:dc:fc:49:ed:08:5b:ef:be:0d:3a:e9:
33:7f:d5:0a:fb:ba:b0:0b:83:a6:6b:79:1b:42:8c:1e:67:1a:
02:45:a5:01:eb:30:8e:5f:b1:dd:45:59:04:f8:27:47:b3:5f:
c5:36:9c:4b:94:d3:b4:47:98:0e:f3:32:68:25:05:15:3a:21:
22:c7:13:ab:84:02:dc:7e:e1:fc:dc:b9:21:a3:37:28:57:5a:
76:07:7a:c4:34:50:d8:9b:24:e0:e4:54:8e:96:51:c0:68:17:
98:bb:2a:bb:b1:ae:d4:5c:c6:2f:59:a0:ea:3b:75:0d:96:ac:
57:dd:89:97:98:be:ab:1a:91:72:17:0e:b0:26:b5:93:f0:cb:
19:f4:0f:27:34:5e:66:55:f3:cc:90:90:a4:63:06:2d:c3:cd:
24:e7:4e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:29:30 2026 by rpki-client