Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: 29hKH518LbA1Ba2X7r6w4BTZGYcctoBhSUme6d45SQg=
Subject key identifier: 76:E0:6A:9C:A3:EC:96:5F:5D:12:CA:8A:56:E4:51:CC:34:51:49:E8
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 019EBEB658AC080D59882768493CDF8BED83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 0F05
Signing time: Sat 13 Jun 2026 02:01:21 +0000
Manifest this update: Sat 13 Jun 2026 02:01:21 +0000
Manifest next update: Sun 14 Jun 2026 02:01:21 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: A9GcGkXm/jXClYypJRrYKnTPlXGiCREp78LcbmbH0nk=)
2: 7TZLT2P2zuuPjzUmClw3kX64yXM.roa (hash: fnAcb1tn2nnIoVX24Iibq3Ab9gwSJ7WX+AekjhFSNg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:58:ac:08:0d:59:88:27:68:49:3c:df:8b:ed:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Jun 13 02:01:21 2026 GMT
Not After : Jun 14 02:01:21 2026 GMT
Subject: CN=76e06a9ca3ec965f5d12ca8a56e451cc345149e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:d8:a4:24:8b:2b:18:b7:d8:f1:b1:6e:aa:
1a:ec:f7:39:3f:6b:f4:07:d1:3e:97:09:f4:02:40:
b9:6e:a1:da:ee:ad:67:f4:56:95:2f:29:bf:a1:d6:
99:61:f6:7a:8f:11:8f:6b:62:2e:ee:2c:5e:58:eb:
f4:25:3e:64:f9:24:e8:69:16:d2:61:95:8d:34:21:
50:c6:66:ec:98:b5:53:8f:6d:b1:1c:36:1c:da:d4:
3a:b1:4f:f8:0c:ab:d7:82:19:36:5e:ac:ac:b9:71:
c4:4b:a4:cf:d3:db:31:8b:ee:b1:6c:97:60:d1:e6:
48:de:57:f0:1e:3e:ae:a1:ad:f5:e7:3d:46:cd:1a:
f7:37:9e:37:e6:dc:03:7c:a7:b0:2e:42:d8:94:9a:
ea:d6:99:2f:29:e7:f8:b3:03:a2:3f:14:9f:8a:da:
7b:47:66:a3:a7:17:ad:df:44:cf:2c:53:d9:81:3f:
a9:24:4e:01:89:af:03:5f:60:cf:74:4d:13:6e:0c:
9f:90:65:1c:f9:33:f6:9b:8e:74:3e:66:63:60:4a:
4d:92:3d:ea:2a:bc:16:54:ac:b7:72:d2:7c:51:7e:
f3:3c:ca:e6:c0:77:c0:0f:99:e2:be:54:43:cf:ed:
93:b8:82:4a:c6:44:87:44:b5:77:3f:22:49:1f:1d:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:6A:9C:A3:EC:96:5F:5D:12:CA:8A:56:E4:51:CC:34:51:49:E8
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:11:eb:52:69:f7:4a:dd:08:c5:b5:07:11:48:3b:f5:50:1f:
9d:09:57:59:7c:4c:db:f7:31:db:ac:02:c6:50:4c:62:dc:eb:
9d:08:b0:9e:a9:57:34:78:08:bd:4e:bc:2c:8a:ef:4c:d0:d2:
03:38:67:42:47:5f:57:a4:69:29:10:51:2e:24:b4:81:51:33:
89:a2:7b:32:dd:a1:f6:ff:7a:43:23:85:19:03:b5:d6:3d:99:
02:a5:ed:01:af:52:1f:4f:94:f6:1b:cd:57:c2:35:90:3c:34:
2b:87:bd:fe:93:a2:b7:2e:59:57:7e:5e:3a:3d:f9:76:d0:73:
be:0f:f3:87:44:86:d7:6a:be:4c:c3:3b:94:d9:21:d5:ce:22:
30:2e:36:37:68:f5:5b:ad:a6:4a:bd:6c:5e:11:f1:8c:6e:2c:
dc:d1:12:8c:cf:1d:ab:b7:af:57:dc:95:d7:aa:2e:07:5d:4f:
2b:9d:f7:27:d5:8d:68:33:6d:7c:d1:b2:19:67:95:7d:96:ea:
f5:f6:4d:81:bd:d3:90:56:19:08:83:f1:40:f5:36:2d:c8:40:
b7:5f:7e:6e:31:df:9a:75:ce:9a:16:6d:b4:5c:59:95:49:34:
d6:a1:66:0f:8a:17:e1:7b:4b:95:49:fe:75:8e:f3:58:ec:c7:
62:4e:fd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:33:14 2026 by rpki-client