Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: /mMBXI2EnRZ6/qFbg7bMJciz9OI9gcSmz+QnT2fcgPU=
Subject key identifier: 39:FA:B3:44:0D:E9:29:90:57:69:CF:D5:F9:91:81:B6:C1:93:D3:29
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 019EC1120CADD4E527DF3A77EAC13CA8A191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 15FF
Signing time: Sat 13 Jun 2026 13:00:45 +0000
Manifest this update: Sat 13 Jun 2026 13:00:45 +0000
Manifest next update: Sun 14 Jun 2026 13:00:45 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: PPEuikx4X7+evulFlyCwD78s1BBQkFzfKghX3e9HQBg=)
2: INE61DSnT0byRQAlBRacyXpwM4M.roa (hash: ZjFf2bVbEAR4MMNRtk1mizzAeZIxKBJHJE2Ioiflxw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:0c:ad:d4:e5:27:df:3a:77:ea:c1:3c:a8:a1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Jun 13 13:00:45 2026 GMT
Not After : Jun 14 13:00:45 2026 GMT
Subject: CN=39fab3440de929905769cfd5f99181b6c193d329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:4a:4b:99:43:90:e7:cf:a3:a5:83:03:ea:
bf:32:cc:98:9c:39:41:03:1d:09:9b:16:9b:2f:f4:
f8:4d:eb:88:a4:05:8d:ff:4d:6d:46:27:a2:73:3a:
84:4e:d4:9a:cf:73:64:a3:f7:06:77:72:fc:27:73:
28:a5:eb:64:22:e0:5d:0c:2e:24:80:e3:a3:b1:6c:
6a:cb:33:c7:d1:66:b1:23:aa:87:e3:66:d0:48:e4:
58:75:85:3e:a9:18:c8:53:36:eb:dc:8d:50:f7:8b:
8c:c7:4f:75:20:4f:c7:bf:af:3f:08:6c:8e:70:2d:
b7:36:bd:cb:82:fe:b2:41:4f:db:f9:8e:55:d6:61:
0b:8c:0e:ef:1f:29:59:c0:29:58:25:18:ed:5a:87:
16:00:a7:d4:3f:da:23:9b:fc:13:a8:9d:0f:dd:5f:
bc:ac:14:91:6b:ff:85:28:3d:f9:c1:c5:9a:e6:3c:
5b:d6:9d:e4:fa:6a:33:b0:36:5f:52:5b:35:57:d8:
0b:b5:a2:9e:3d:39:aa:c9:31:89:b9:d6:9a:09:d8:
a4:b8:57:a5:33:40:1a:1d:e5:02:2d:5e:6f:09:f2:
3c:e5:8b:81:51:56:19:92:b0:eb:fc:cd:85:14:00:
92:f6:5a:c8:10:41:41:3d:fb:c9:61:32:71:5f:de:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FA:B3:44:0D:E9:29:90:57:69:CF:D5:F9:91:81:B6:C1:93:D3:29
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f7:f6:31:51:d7:a0:bf:9a:a2:1e:7f:90:12:54:8b:c3:79:
08:cc:ac:d6:44:39:1c:c5:f0:4f:55:9f:3f:14:91:f6:27:f4:
ce:02:0d:23:26:e8:95:6e:18:6c:8a:1f:1f:95:ac:a9:3d:5e:
37:09:73:02:eb:bb:4d:d5:11:da:af:87:24:97:0d:23:87:3b:
ec:24:9a:a5:bf:a5:55:b8:1c:35:9a:2b:c2:27:ea:cc:c9:8b:
a3:cf:57:85:41:91:3a:e0:75:61:54:bd:28:7d:6b:f8:28:0c:
af:e4:8c:90:74:94:06:11:fd:5f:77:58:a7:41:e4:71:3d:64:
93:d3:d9:fa:94:c7:45:e7:0f:84:1e:42:54:a4:0c:85:b4:2c:
91:f1:03:f5:32:1b:52:cb:f5:a1:7f:6c:ac:df:d8:38:c2:a1:
ec:6b:4e:9c:55:85:9e:6b:61:77:f7:33:11:18:fa:fb:70:5c:
14:9d:fb:a6:b9:70:4c:cd:83:ad:ea:ea:cc:61:12:b8:63:16:
39:5f:ae:09:e9:ee:09:07:fd:28:7f:70:38:14:d1:50:7a:e9:
ea:96:a8:69:93:80:20:8a:8b:f8:b1:38:1d:4d:dc:b4:3f:48:
2c:22:ec:91:6c:a9:63:53:db:c5:07:b9:1b:f9:9f:ab:82:2a:
17:cf:89:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEgyt1OUn3zp36sE8qKGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTFjM2M1ZGRjNGZiNjEzODFjM2JlYTI0YzFiYTRmNzQ5
OThlYWIwHhcNMjYwNjEzMTMwMDQ1WhcNMjYwNjE0MTMwMDQ1WjAzMTEwLwYDVQQD
EygzOWZhYjM0NDBkZTkyOTkwNTc2OWNmZDVmOTkxODFiNmMxOTNkMzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi9KS5lDkOfPo6WDA+q/MsyYnDlB
Ax0JmxabL/T4TeuIpAWN/01tRieiczqETtSaz3Nko/cGd3L8J3MopetkIuBdDC4k
gOOjsWxqyzPH0WaxI6qH42bQSORYdYU+qRjIUzbr3I1Q94uMx091IE/Hv68/CGyO
cC23Nr3Lgv6yQU/b+Y5V1mELjA7vHylZwClYJRjtWocWAKfUP9ojm/wTqJ0P3V+8
rBSRa/+FKD35wcWa5jxb1p3k+mozsDZfUls1V9gLtaKePTmqyTGJudaaCdikuFel
M0AaHeUCLV5vCfI85YuBUVYZkrDr/M2FFACS9lrIEEFBPfvJYTJxX96MqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn6s0QN6SmQV2nP1fmRgbbBk9MpMB8GA1UdIwQY
MBaAFN5Rw8XdxPthOBw76iTBuk90mY6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEt
YTUzMjVkNDQxNzAyLzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEtYTUzMjVkNDQxNzAy
LzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPf2MVHX
oL+aoh5/kBJUi8N5CMys1kQ5HMXwT1WfPxSR9if0zgINIybolW4YbIofH5WsqT1e
NwlzAuu7TdUR2q+HJJcNI4c77CSapb+lVbgcNZorwifqzMmLo89XhUGROuB1YVS9
KH1r+CgMr+SMkHSUBhH9X3dYp0HkcT1kk9PZ+pTHRecPhB5CVKQMhbQskfED9TIb
Usv1oX9srN/YOMKh7GtOnFWFnmthd/czERj6+3BcFJ37prlwTM2DrerqzGESuGMW
OV+uCenuCQf9KH9wOBTRUHrp6paoaZOAIIqL+LE4HU3ctD9ILCLskWypY1PbxQe5
G/mfq4IqF8+JcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:55:01 2026 by rpki-client