Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: I3N53KAo7eHjuItVenhIdzab2+z/qSKHNIWLAsEgj9Y=
Subject key identifier: A5:A6:39:9D:9A:0D:10:92:26:5E:0A:81:37:D1:CA:76:F2:67:EF:CD
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 019EC14931DF5E7C64284DDCCEEFAE669028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 148E
Signing time: Sat 13 Jun 2026 14:01:00 +0000
Manifest this update: Sat 13 Jun 2026 14:01:00 +0000
Manifest next update: Sun 14 Jun 2026 14:01:00 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: ZwvEqM9N0Z5NstdSj96S072U3O1N08KIFf4g4mX5WfE=)
2: S_e75AZV3-MMHLgXTcVLGq4T6uc.roa (hash: AVmxa5KmaRL9M9i0sdO8A9BbJeQGosTTukip4Q42nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:31:df:5e:7c:64:28:4d:dc:ce:ef:ae:66:90:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Jun 13 14:01:00 2026 GMT
Not After : Jun 14 14:01:00 2026 GMT
Subject: CN=a5a6399d9a0d1092265e0a8137d1ca76f267efcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:c8:db:18:11:6b:20:8b:a0:f9:bf:80:3d:
60:b5:c4:13:23:2c:86:cf:91:c7:26:74:9e:ae:0c:
e6:3a:8a:5a:0b:6d:43:e4:f4:0b:2b:0f:48:26:35:
5b:71:67:a1:1f:c0:2a:7a:22:fb:d9:59:e3:ed:db:
37:6e:a7:08:12:1a:7a:7f:1a:ca:78:01:29:57:9f:
27:d4:c9:c4:f3:91:38:11:30:40:59:1d:4b:c3:c5:
81:15:a7:2a:af:8e:a2:a2:6e:d8:7c:f0:dd:85:89:
7f:c6:42:a0:99:0f:c7:fb:1a:f0:48:42:89:73:02:
2c:79:15:38:4e:5c:d1:f3:a8:61:a3:47:60:4e:72:
ee:31:8c:c4:15:f4:69:8f:97:fa:2f:17:3f:1b:7e:
33:19:4d:c2:3d:bd:40:25:e2:e1:2b:f5:15:79:0f:
7a:41:72:a7:e4:57:d3:72:be:47:9d:b2:d6:f6:97:
d6:e3:d6:38:c8:6f:1d:54:d4:ef:ec:6c:2f:65:19:
08:50:4c:bb:c3:f3:84:71:a0:93:cf:6e:ee:88:55:
58:c5:dd:15:5a:56:a2:10:6f:68:0e:9d:7b:b1:85:
f8:ac:ff:cf:eb:3c:fc:15:d3:1a:0a:6c:1d:a3:d0:
d3:c0:cb:79:87:ab:8e:47:19:e4:12:06:76:8a:38:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:39:9D:9A:0D:10:92:26:5E:0A:81:37:D1:CA:76:F2:67:EF:CD
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d0:94:cd:7e:de:c2:b0:16:3f:11:7b:88:71:18:df:a4:64:
ab:7e:b5:f2:e4:25:6e:06:c8:da:6f:95:bf:26:b8:5f:05:92:
63:72:39:17:1a:0d:ab:0e:72:be:51:65:51:91:6d:5a:51:15:
f0:76:ab:2a:08:66:73:20:03:bc:b6:7d:ef:81:93:6a:43:b6:
6f:22:f6:06:4d:ec:7e:94:ff:17:85:8a:ef:84:c6:cd:f7:cf:
1a:01:22:06:40:e5:02:ec:9c:bb:90:6d:b9:5f:46:0b:bd:f3:
ba:09:49:de:6f:73:1a:3b:94:4e:82:70:61:8e:96:23:2d:78:
60:6b:2d:a0:fe:d5:ed:93:c3:c0:13:a7:8e:da:89:04:f0:a8:
27:c8:d2:9b:09:a8:8a:1c:e8:b9:b6:f3:54:79:75:24:84:5c:
0d:ec:24:81:eb:50:3d:e4:92:df:ff:a2:0b:44:51:a7:f2:da:
e7:f5:b4:d1:98:8e:c9:67:dd:62:9b:24:8d:94:2d:15:2e:ea:
d8:5d:f3:b4:6f:fe:54:d9:27:5b:22:c3:8f:0a:db:be:54:4b:
d2:72:ea:cd:d8:bf:35:38:42:cc:f5:ea:f1:84:a8:35:55:0e:
8c:e7:bf:55:9b:5a:ee:ee:93:92:65:fa:15:77:54:68:d3:e5:
9f:11:e6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:38:39 2026 by rpki-client