Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: 9lyra/QS4vpXj3dsab7NmyMbKbLBpx4VgWcYWUZeBJg=
Subject key identifier: A9:83:91:7D:F2:81:B2:FA:D1:EF:CD:4C:06:DF:13:4A:32:29:73:96
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 019EBE7FED639BFD7BEE20C9A321BF9B0DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 12CB
Signing time: Sat 13 Jun 2026 01:01:55 +0000
Manifest this update: Sat 13 Jun 2026 01:01:55 +0000
Manifest next update: Sun 14 Jun 2026 01:01:55 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: 3DGHAzN0e5rWp29b5ZGV7dBIpsjdz07xDnkrVNqBTsE=)
2: _eQtw5cyWM7bN-n1wH5kFmdpMgc.roa (hash: sNGFzrnadHYgam/Tin+pJL2a8Tg3Ac1jpPx5ZlgeT5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:ed:63:9b:fd:7b:ee:20:c9:a3:21:bf:9b:0d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Jun 13 01:01:55 2026 GMT
Not After : Jun 14 01:01:55 2026 GMT
Subject: CN=a983917df281b2fad1efcd4c06df134a32297396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:4c:f7:3c:2d:b5:bd:17:01:89:02:a5:58:
cd:2e:56:bc:1e:a0:7d:be:02:6e:90:03:f0:be:04:
2f:21:d2:57:79:e5:d9:b5:46:cc:45:49:99:0d:95:
bf:bc:9c:4c:1e:46:2b:41:03:24:8b:4e:a5:4b:ff:
12:31:0b:7a:3b:42:a9:80:e2:a0:32:f0:0f:d9:ec:
81:bf:55:e5:13:8c:55:5b:58:af:be:c8:5e:69:b0:
a1:da:c7:46:5d:bc:9e:44:04:6a:d9:64:3c:3e:a4:
30:e7:e5:af:88:aa:4e:25:a6:b0:4b:f1:c0:3c:77:
60:82:3c:f7:b8:09:9b:6b:4c:18:84:74:9e:ed:d5:
ce:26:fa:7d:d7:13:65:cd:1b:79:5d:25:51:52:44:
4d:7a:69:b3:17:97:d4:28:09:07:bb:a1:38:1c:ff:
5e:70:c2:33:23:aa:6e:50:c1:17:71:8c:76:72:e6:
0d:44:03:37:38:1d:c8:32:16:50:ab:47:f3:f2:9c:
39:e3:04:24:ae:a2:c2:21:e7:7f:23:13:d8:c6:92:
6c:ea:99:01:25:95:83:34:7c:91:58:0d:3b:5d:80:
54:23:c2:a4:81:1d:28:3e:02:1c:78:2d:60:66:92:
2a:51:db:ac:5d:a6:20:1a:f9:6c:8e:f7:9b:fe:91:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:83:91:7D:F2:81:B2:FA:D1:EF:CD:4C:06:DF:13:4A:32:29:73:96
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:05:fb:ba:4c:4a:84:aa:52:44:d1:f5:d9:26:79:2e:43:71:
62:b7:cd:2a:49:41:32:21:c2:f2:85:e3:e3:36:9c:82:52:1b:
b6:14:35:77:76:fe:fd:5e:c1:bd:17:00:31:27:55:3d:2d:2f:
41:4a:b8:f9:65:eb:79:4a:29:1a:39:64:35:d5:25:3d:68:06:
f2:69:81:a8:32:8d:61:2e:52:c6:f1:e8:ff:c4:6f:d1:19:03:
17:ea:bc:a2:9b:02:7f:bf:bc:29:10:e3:4d:be:0d:65:ee:af:
00:d9:7c:73:03:9a:34:b3:9c:93:2a:8a:e1:af:61:96:3c:9b:
7e:d7:63:2a:ec:a5:ac:3e:75:15:fa:3c:9f:8c:0a:f1:9e:aa:
79:07:33:88:88:8c:21:4f:51:05:3d:16:54:df:fe:30:7e:85:
c2:4a:4d:99:fe:ea:99:02:61:4c:48:41:f3:c1:30:5c:3a:c5:
fa:3f:b0:df:af:06:ac:c2:52:47:1a:c9:aa:8a:88:e1:47:b3:
b3:0c:6e:73:ca:ba:3e:7f:25:63:63:66:30:c4:f0:95:ac:49:
50:8b:f4:12:e4:cc:2e:ef:33:74:3c:aa:2d:e2:3f:f0:82:f5:
d3:6c:d7:7f:06:86:25:3f:1b:6f:0c:22:92:7c:fe:23:95:2f:
ec:47:20:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f+1jm/177iDJoyG/mw3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGUzODkyZjQ2YjEwNzg1MmMzZWFlMWIyN2RjY2Y2MGZh
Yjk5YmQwHhcNMjYwNjEzMDEwMTU1WhcNMjYwNjE0MDEwMTU1WjAzMTEwLwYDVQQD
EyhhOTgzOTE3ZGYyODFiMmZhZDFlZmNkNGMwNmRmMTM0YTMyMjk3Mzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lNM9zwttb0XAYkCpVjNLla8HqB9
vgJukAPwvgQvIdJXeeXZtUbMRUmZDZW/vJxMHkYrQQMki06lS/8SMQt6O0KpgOKg
MvAP2eyBv1XlE4xVW1ivvsheabCh2sdGXbyeRARq2WQ8PqQw5+WviKpOJaawS/HA
PHdggjz3uAmba0wYhHSe7dXOJvp91xNlzRt5XSVRUkRNemmzF5fUKAkHu6E4HP9e
cMIzI6puUMEXcYx2cuYNRAM3OB3IMhZQq0fz8pw54wQkrqLCIed/IxPYxpJs6pkB
JZWDNHyRWA07XYBUI8KkgR0oPgIceC1gZpIqUdusXaYgGvlsjveb/pH8cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmDkX3ygbL60e/NTAbfE0oyKXOWMB8GA1UdIwQY
MBaAFN1OOJL0axB4UsPq4bJ9zPYPq5m9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTkt
M2I1YjcxY2JiMzIyLzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTktM2I1YjcxY2JiMzIy
LzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAX7ukxK
hKpSRNH12SZ5LkNxYrfNKklBMiHC8oXj4zacglIbthQ1d3b+/V7BvRcAMSdVPS0v
QUq4+WXreUopGjlkNdUlPWgG8mmBqDKNYS5SxvHo/8Rv0RkDF+q8opsCf7+8KRDj
Tb4NZe6vANl8cwOaNLOckyqK4a9hljybftdjKuylrD51Ffo8n4wK8Z6qeQcziIiM
IU9RBT0WVN/+MH6FwkpNmf7qmQJhTEhB88EwXDrF+j+w368GrMJSRxrJqoqI4Uez
swxuc8q6Pn8lY2NmMMTwlaxJUIv0EuTMLu8zdDyqLeI/8IL102zXfwaGJT8bbwwi
knz+I5Uv7EcgWg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:36 2026 by rpki-client