Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: v2wwxbpz4Al4ptGjhOOoXwZQDW0VTWXi3y9aheN74VY=
Subject key identifier: BC:D3:89:24:8B:A8:EC:ED:42:E9:45:55:79:B8:C3:C0:61:7E:FF:BD
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 019EBFC84540BD1C437D700F9954CED89B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 07:00:33 +0000
Manifest this update: Sat 13 Jun 2026 07:00:33 +0000
Manifest next update: Sun 14 Jun 2026 07:00:33 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: 785CALdrwMcTuoivvJnTOfGbAAxl1FCr1QAJaAfTBDE=)
2: 6jm1c5ao4TIq41DDCm24Gn-cCvM.roa (hash: DHj5HqftZAg5kJDUChpZMa9puMwdu/NpQqmWhiH73fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:45:40:bd:1c:43:7d:70:0f:99:54:ce:d8:9b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Jun 13 07:00:33 2026 GMT
Not After : Jun 14 07:00:33 2026 GMT
Subject: CN=bcd389248ba8eced42e9455579b8c3c0617effbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:4f:17:2a:e9:ce:48:29:dd:09:cb:9b:ba:
b0:7f:ad:4f:6f:5a:2a:8e:6d:02:54:a8:ed:b7:db:
24:53:3d:ac:ee:e6:f4:b7:49:db:68:2a:91:d6:c0:
1f:66:99:13:13:f8:53:6f:5a:b7:57:a1:46:fb:2b:
9e:39:4f:e8:9e:8c:af:ab:93:ff:82:3a:df:e0:0e:
06:c2:9f:4b:0a:e1:ec:67:df:2f:a3:9c:84:2a:1a:
c7:71:05:fe:51:69:a0:d7:3a:e4:38:b2:98:b0:1a:
17:d4:64:89:9e:ec:ac:ab:37:94:22:eb:8d:98:f0:
a8:5f:03:ff:9e:c0:0f:44:95:a7:a1:3d:28:db:51:
b4:c8:6e:6f:52:e2:59:ce:c9:cb:2e:75:e6:0e:49:
7e:9d:38:b1:32:c0:1f:2d:bc:31:62:0f:7a:03:f1:
52:fc:11:e1:f4:92:cc:b5:36:5f:90:3e:85:55:b5:
2f:b9:c7:02:cd:aa:1f:b2:2f:bc:28:d6:27:b4:a9:
f8:ed:11:01:3b:f7:13:86:b8:19:31:26:88:5e:69:
f6:96:6a:fb:5b:70:f6:db:25:50:9b:d1:44:96:5f:
49:33:99:99:17:c7:8f:22:35:09:09:35:1b:28:dd:
43:8d:43:00:8c:c4:f0:63:ec:4d:94:28:06:c4:67:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:89:24:8B:A8:EC:ED:42:E9:45:55:79:B8:C3:C0:61:7E:FF:BD
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4e:33:c2:f6:19:1d:69:a3:74:54:90:d6:a9:75:71:8d:c9:
53:a4:2e:c6:c8:e6:33:3c:19:dd:52:25:0c:95:37:a6:b6:e5:
f0:2f:90:f2:90:8b:37:cd:3d:03:1f:91:06:28:e1:7d:08:3f:
c6:b1:cf:a4:1a:ec:5d:6a:6c:46:56:d8:1f:b1:20:59:6f:63:
e1:e5:71:3d:06:c5:74:8a:58:0e:1b:af:5d:d2:c6:48:7e:46:
d8:98:af:22:a7:13:76:bf:c2:f5:ae:7d:71:a3:7c:ea:cc:10:
a2:f7:ad:03:9a:b4:a9:e5:7a:be:ca:66:9c:c2:a2:89:ae:fa:
5b:6d:13:41:ec:26:be:47:87:61:f3:ca:f6:38:dc:7c:ae:54:
f3:b1:b4:33:07:39:18:14:aa:de:e4:c0:ee:1f:71:13:54:b3:
be:96:db:aa:a0:d7:c0:8b:25:fa:42:e2:af:c4:ea:7f:e0:85:
f7:38:1b:ff:94:47:63:4b:bf:56:a5:94:36:91:71:04:9b:75:
cb:aa:b1:00:1a:62:4a:e6:7b:c5:8f:c0:ec:69:70:5f:36:ca:
8b:dc:0f:85:f4:f7:81:8e:77:9c:7f:62:bd:e1:3d:65:94:09:
b7:17:c1:74:86:81:bc:53:c1:27:37:f8:81:a6:d5:4f:56:82:
f7:c8:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:12 2026 by rpki-client