Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: dXVXHUjT8IoLMINExJPaKws0gF2ctJiEjFgSc0NIAoY=
Subject key identifier: A5:55:36:01:09:D8:94:94:2C:8A:A5:56:39:53:A8:F8:A7:49:8A:F2
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 019EC18021AF8C54EF6E79F313A94C8CF565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 15:01:00 +0000
Manifest this update: Sat 13 Jun 2026 15:01:00 +0000
Manifest next update: Sun 14 Jun 2026 15:01:00 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: IjEGJQI2AoiQnh7Orsu0FFJTyqbGPNWBzvzAF/ZgWbE=)
2: KNINNJg3cCwRIkadz_iFDjzCAZo.roa (hash: uyBgZTWuxKjfgaFUXeyVL4F1AHNOmaLe474fWdCTqys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:21:af:8c:54:ef:6e:79:f3:13:a9:4c:8c:f5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Jun 13 15:01:00 2026 GMT
Not After : Jun 14 15:01:00 2026 GMT
Subject: CN=a555360109d894942c8aa5563953a8f8a7498af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8d:6c:95:00:83:aa:0f:49:6b:1e:04:52:7b:
42:02:24:15:a5:ad:2a:59:f4:90:6e:47:57:51:cd:
ec:3f:fd:8e:c5:c6:69:50:48:04:66:15:ed:cf:4b:
50:b1:05:46:e3:16:6d:23:a1:1c:77:92:0f:e4:d5:
e3:f3:4e:2c:27:0d:bb:4c:a6:b5:c4:70:34:97:28:
77:58:1d:3f:02:d5:83:5d:44:6b:fe:aa:b3:f0:51:
7d:a9:b4:20:f8:f7:40:ab:a3:fe:00:07:c4:e8:0c:
27:42:96:72:2f:6c:f0:c3:8c:67:65:25:80:13:ae:
d4:d9:b3:b6:83:6b:c0:24:76:16:e6:34:a1:c2:77:
16:81:c5:43:26:28:1c:84:ea:d9:de:51:69:9f:67:
c6:cc:35:11:4b:e9:00:58:33:80:b6:2e:e5:16:1c:
15:91:e8:4a:ac:8c:e8:e8:d4:2f:96:c6:e9:9a:25:
9c:1c:6b:bd:16:e3:4f:9d:65:86:b2:ee:e2:c0:86:
b0:ed:60:43:a8:d8:5b:fa:37:de:9a:b5:c2:57:b2:
b1:00:0e:f0:b3:2d:c9:cf:32:78:75:71:17:71:c0:
ec:13:4d:9f:bb:dd:43:da:c6:a9:6d:03:de:c6:e4:
6b:3c:68:7c:63:a4:08:f7:94:1d:3c:60:cf:4a:d4:
b5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:55:36:01:09:D8:94:94:2C:8A:A5:56:39:53:A8:F8:A7:49:8A:F2
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:89:08:d7:d9:ba:3b:ec:3b:3a:90:4b:f0:14:88:82:4f:0e:
64:ec:f6:0e:ef:55:51:c8:81:9f:43:b1:23:66:d0:49:c7:bf:
02:c3:9a:8a:6d:79:74:d1:5e:1e:eb:f0:91:ed:b4:48:22:48:
9d:f7:42:ed:11:a2:d4:de:02:cd:db:e2:34:34:0f:1c:4b:2a:
56:e8:3b:37:94:2a:d2:8a:88:3e:40:81:b9:b5:da:c7:4c:64:
fb:41:8b:a8:ee:17:c5:0c:40:fc:85:38:c7:b3:04:16:71:ba:
a7:15:f2:f2:f1:dd:55:d2:97:ff:df:26:1f:84:39:e5:4a:76:
c0:cb:21:cd:aa:ca:99:c0:dc:a1:e4:60:54:3e:79:bd:31:95:
87:a3:68:97:c5:ea:14:14:96:55:63:50:63:58:5b:ea:79:a5:
c5:da:3b:14:f2:ef:72:cd:ef:b0:35:8c:85:be:5b:be:1d:bb:
ab:61:a0:3d:ab:fb:d6:f7:7b:48:45:a3:4c:3f:65:d5:43:ec:
f3:1b:9c:67:7d:84:89:f8:6d:eb:83:45:11:22:49:5a:a8:f0:
23:ee:83:6e:8e:3c:60:64:ac:af:1f:fb:66:e4:67:55:3c:a0:
73:74:a9:38:e3:13:fd:ad:04:49:f6:3d:22:ad:f5:c4:09:49:
14:c3:62:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BgCGvjFTvbnnzE6lMjPVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOWYyYTkyNzM3OGJkMTQ1NWRhOGJkZjg1YmIxYWI4Njdl
MWY1MjgwHhcNMjYwNjEzMTUwMTAwWhcNMjYwNjE0MTUwMTAwWjAzMTEwLwYDVQQD
EyhhNTU1MzYwMTA5ZDg5NDk0MmM4YWE1NTYzOTUzYThmOGE3NDk4YWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I1slQCDqg9Jax4EUntCAiQVpa0q
WfSQbkdXUc3sP/2OxcZpUEgEZhXtz0tQsQVG4xZtI6Ecd5IP5NXj804sJw27TKa1
xHA0lyh3WB0/AtWDXURr/qqz8FF9qbQg+PdAq6P+AAfE6AwnQpZyL2zww4xnZSWA
E67U2bO2g2vAJHYW5jShwncWgcVDJigchOrZ3lFpn2fGzDURS+kAWDOAti7lFhwV
kehKrIzo6NQvlsbpmiWcHGu9FuNPnWWGsu7iwIaw7WBDqNhb+jfemrXCV7KxAA7w
sy3JzzJ4dXEXccDsE02fu91D2sapbQPexuRrPGh8Y6QI95QdPGDPStS1jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVVNgEJ2JSULIqlVjlTqPinSYryMB8GA1UdIwQY
MBaAFN6fKpJzeL0UVdqL34W7Grhn4fUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQt
NmRiMDkwMjE0MDM1LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQtNmRiMDkwMjE0MDM1
LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4kI19m6
O+w7OpBL8BSIgk8OZOz2Du9VUciBn0OxI2bQSce/AsOaim15dNFeHuvwke20SCJI
nfdC7RGi1N4CzdviNDQPHEsqVug7N5Qq0oqIPkCBubXax0xk+0GLqO4XxQxA/IU4
x7MEFnG6pxXy8vHdVdKX/98mH4Q55Up2wMshzarKmcDcoeRgVD55vTGVh6Nol8Xq
FBSWVWNQY1hb6nmlxdo7FPLvcs3vsDWMhb5bvh27q2GgPav71vd7SEWjTD9l1UPs
8xucZ32Eifht64NFESJJWqjwI+6Dbo48YGSsrx/7ZuRnVTygc3SpOOMT/a0ESfY9
Iq31xAlJFMNi/Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:13:10 2026 by rpki-client