Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: 942yWDK/yoVYCpxdLIzbHjVSZVbvHCnkPBARuHLiykg=
Subject key identifier: 47:66:84:7E:09:EC:34:3C:D7:AC:56:E9:9F:6B:42:3F:DA:FA:2D:31
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 019EBDDA44B83FC081FF9BC70003503B5CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 113A
Signing time: Fri 12 Jun 2026 22:00:58 +0000
Manifest this update: Fri 12 Jun 2026 22:00:58 +0000
Manifest next update: Sat 13 Jun 2026 22:00:58 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: zdaIQ8w6ecnvIUl/LBESyWlKEEIvwd8t2viyPw/5nIA=)
2: ZupcI2nbSj0kv3bOiTJw_7ju_nM.roa (hash: 8lfURhp4+6wvfeyaLwrd59nHvD9zLaiHI+8CWa149w4=)
3: uRzlID_nfuupcIGUXbHpyyUrxts.roa (hash: 5LvqBXGtCHTt2jvIwKxCsctM10tlaiQJ5CWlpcE9cx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:44:b8:3f:c0:81:ff:9b:c7:00:03:50:3b:5c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Jun 12 22:00:58 2026 GMT
Not After : Jun 13 22:00:58 2026 GMT
Subject: CN=4766847e09ec343cd7ac56e99f6b423fdafa2d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:4a:93:86:d4:6a:aa:39:7c:bd:13:c0:7f:
19:ca:73:27:bf:8c:b8:5a:95:f7:f3:08:2e:87:0a:
cb:aa:34:f7:1f:2e:37:da:d5:a6:71:89:08:37:5d:
87:71:1e:d6:b3:40:74:d3:5f:0c:46:0f:74:01:2d:
85:85:33:6c:eb:54:c8:e0:dd:5c:a0:b0:f9:ef:f0:
7e:3f:78:1e:db:9b:a2:15:0d:5b:dc:2c:0f:66:21:
02:3a:cf:91:b1:22:53:8f:78:bd:24:4e:ea:1a:26:
fd:80:32:37:f5:7e:b5:54:ef:5f:61:7b:ad:0c:a1:
b6:a6:32:19:46:25:73:65:46:c8:a3:41:b6:29:d3:
60:22:28:0b:85:83:d0:5d:cf:d8:a1:c0:ba:f3:ee:
67:48:3e:f1:62:2e:37:33:09:f4:a4:67:b0:54:c1:
77:6d:ab:c0:f9:32:1a:5f:6f:a3:40:0b:7e:ae:b4:
aa:40:ee:7f:63:59:43:db:dd:c1:e6:a5:0e:07:16:
be:5e:90:73:93:fc:ab:14:36:f8:10:08:98:b5:db:
76:50:98:e0:e4:42:9f:0c:38:66:ae:1d:77:1c:f7:
1e:99:59:aa:1f:7a:24:3d:0e:47:e1:1d:cc:6a:2d:
ad:74:84:c4:84:13:fe:11:ae:b7:55:61:4f:0c:a0:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:66:84:7E:09:EC:34:3C:D7:AC:56:E9:9F:6B:42:3F:DA:FA:2D:31
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:84:0f:77:28:c7:e7:db:25:32:4a:7d:0a:cf:af:52:6a:b7:
61:bc:0a:fe:41:61:24:34:d9:71:ea:09:f5:93:0d:46:5f:3b:
2b:4c:a0:c6:4c:2d:26:c5:10:9c:7a:cb:c1:a2:e6:01:a9:7f:
99:a3:7f:99:c4:ac:6f:bc:8a:d5:c3:3a:ab:c3:48:2d:d9:6e:
a0:99:19:a7:f8:be:3c:83:f7:81:78:07:43:3d:86:7c:9b:4e:
95:b5:5d:f6:92:ff:ef:46:39:22:86:61:68:89:73:51:85:00:
50:21:f8:80:e3:66:30:0c:78:51:b6:55:56:4e:0b:25:ce:0b:
f1:b7:6f:f7:75:a6:05:17:df:6c:2e:42:ea:73:63:f9:5f:67:
41:7b:e1:ee:7a:9c:47:91:b1:96:96:28:91:95:db:e5:55:f7:
e5:f8:74:44:19:d0:31:5d:7c:c9:c0:03:31:f1:27:59:f1:f5:
8a:21:1b:bf:69:2b:4d:dd:10:2c:4c:17:71:48:5c:eb:a1:f2:
65:11:48:b0:9e:1f:88:2d:8b:7c:36:78:d5:7f:6c:4c:30:81:
f8:99:22:ca:75:df:7c:ae:8d:34:4f:ab:9c:83:c9:25:9f:14:
e5:26:97:33:87:9c:47:1f:eb:ec:5d:ba:83:07:e0:82:a5:fb:
12:23:72:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:34 2026 by rpki-client