Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
File: 3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json)
Hash identifier: R96DZz1v/er9OPzAJU3mrXWWArFmeUZ9Mfg30rDE9PA=
Subject key identifier: 46:BE:08:70:4A:C4:13:44:4E:0E:04:58:D9:63:05:D6:E0:8A:40:38
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial: 019EBFC8F28D9BAF83D21ADDFB2E5D3E4D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
Manifest number: 12AD
Signing time: Sat 13 Jun 2026 07:01:17 +0000
Manifest this update: Sat 13 Jun 2026 07:01:17 +0000
Manifest next update: Sun 14 Jun 2026 07:01:17 +0000
Files and hashes: 1: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: ZbXysyVLf27WPvsXxWqL7/hrAUXyb2T2aCe9W7h/GuY=)
2: h3ZDg5youB0K7vntlWcD6_hznfg.roa (hash: 9Ot/r2EVZQa+csMn0s0+LAGhdTl5GbdXVa69dBPCmRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:f2:8d:9b:af:83:d2:1a:dd:fb:2e:5d:3e:4d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Validity
Not Before: Jun 13 07:01:17 2026 GMT
Not After : Jun 14 07:01:17 2026 GMT
Subject: CN=46be08704ac413444e0e0458d96305d6e08a4038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:78:de:c0:f8:18:71:d8:31:96:10:8c:36:
31:52:c0:64:68:1e:c5:3d:08:78:28:f5:c4:29:e6:
b4:90:80:9c:49:f9:8a:ec:95:fe:69:30:70:ef:34:
ed:81:a2:83:b8:35:5d:f3:3a:da:07:86:8c:23:27:
52:89:8a:79:e4:a4:8d:49:e0:5e:d1:12:19:22:71:
a6:ad:ee:9f:c1:f8:bb:7e:4f:c9:de:19:f6:d5:86:
5f:fb:18:03:58:c9:f6:92:9b:6d:78:45:dc:7d:87:
ba:13:de:46:4b:4a:44:cf:12:01:d4:0b:5f:58:ce:
8e:c9:77:64:70:25:23:cd:06:5f:58:33:bb:be:d1:
e7:82:cd:f5:f3:58:94:d3:72:b8:dd:ba:76:bf:c0:
9c:0a:16:2c:ba:05:54:4b:b9:40:5f:52:5d:aa:96:
5c:5e:22:c9:01:88:8a:47:c9:d6:90:60:3d:a2:5b:
52:81:4c:5f:07:bf:72:fc:e2:73:cf:da:1f:f9:4f:
2f:00:34:59:60:5a:28:81:87:45:57:79:73:a1:ff:
56:26:96:e6:37:e4:71:e6:ae:9f:5a:57:d1:bb:fe:
04:f2:9f:ec:f4:fa:a5:8e:7d:ba:e6:62:d0:1e:61:
44:0f:eb:1c:8d:1f:61:d2:a6:07:af:b6:90:cb:f8:
69:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BE:08:70:4A:C4:13:44:4E:0E:04:58:D9:63:05:D6:E0:8A:40:38
X509v3 Authority Key Identifier:
keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:06:1b:a6:4a:df:99:49:47:a5:07:cd:e7:00:7b:ce:04:13:
70:fd:f7:67:5e:d7:a4:15:8f:63:f5:e6:36:3f:8f:65:f2:ec:
72:7a:ed:9b:ee:33:a4:c7:ab:8a:12:ec:a0:0a:8f:46:85:83:
54:67:cc:6e:d1:fe:8c:84:30:f8:65:eb:61:b4:da:7f:5e:33:
d4:a6:88:39:5c:ed:49:70:97:c1:03:23:e3:34:02:22:bf:a6:
f9:79:ee:e4:7f:91:43:ed:5a:21:e1:d7:0d:41:fc:c4:b1:f1:
9d:5a:5b:84:03:02:14:98:9a:73:74:31:d5:8b:d8:3b:01:e1:
4e:3b:15:d6:94:98:01:1a:27:91:3a:3a:69:ee:72:e1:ec:0d:
87:3b:12:a5:0e:01:85:cd:4f:9d:78:fe:9d:7d:2f:de:70:60:
59:a5:76:d0:68:1f:40:2f:a4:73:de:ad:8b:76:9f:13:4a:80:
61:0a:0f:04:cc:57:82:e6:5f:31:ec:51:17:1a:08:b5:a6:9a:
15:cc:38:20:c9:e5:8a:a6:83:62:c8:b4:03:1b:77:13:29:74:
ef:23:3d:67:b3:e2:e9:f3:55:30:17:dc:6a:37:48:14:d0:7e:
b8:9c:66:80:35:96:fc:92:64:e3:15:17:01:45:23:08:f4:82:
ec:54:c7:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yPKNm6+D0hrd+y5dPk1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOGE0ZTFkZWU1YmIxZTY1NzliMTE2MWNhOTEyY2E5YzAz
YjQ2ZWQwHhcNMjYwNjEzMDcwMTE3WhcNMjYwNjE0MDcwMTE3WjAzMTEwLwYDVQQD
Eyg0NmJlMDg3MDRhYzQxMzQ0NGUwZTA0NThkOTYzMDVkNmUwOGE0MDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKJ43sD4GHHYMZYQjDYxUsBkaB7F
PQh4KPXEKea0kICcSfmK7JX+aTBw7zTtgaKDuDVd8zraB4aMIydSiYp55KSNSeBe
0RIZInGmre6fwfi7fk/J3hn21YZf+xgDWMn2kptteEXcfYe6E95GS0pEzxIB1Atf
WM6OyXdkcCUjzQZfWDO7vtHngs3181iU03K43bp2v8CcChYsugVUS7lAX1JdqpZc
XiLJAYiKR8nWkGA9oltSgUxfB79y/OJzz9of+U8vADRZYFoogYdFV3lzof9WJpbm
N+Rx5q6fWlfRu/4E8p/s9Pqljn265mLQHmFED+scjR9h0qYHr7aQy/hpzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa+CHBKxBNETg4EWNljBdbgikA4MB8GA1UdIwQY
MBaAFN2KTh3uW7HmV5sRYcqRLKnAO0btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1lwT0hlNWJzZVpYbXhGaHlwRXNxY0E3UnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS81ZDE5MDgtNmM0ZC00NTgxLThmMTAt
OTg1YWFjNWJlYjMwLzEvM1lwT0hlNWJzZVpYbXhGaHlwRXNxY0E3UnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS81ZDE5MDgtNmM0ZC00NTgxLThmMTAtOTg1YWFjNWJlYjMw
LzEvM1lwT0hlNWJzZVpYbXhGaHlwRXNxY0E3UnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQYbpkrf
mUlHpQfN5wB7zgQTcP33Z17XpBWPY/XmNj+PZfLscnrtm+4zpMerihLsoAqPRoWD
VGfMbtH+jIQw+GXrYbTaf14z1KaIOVztSXCXwQMj4zQCIr+m+Xnu5H+RQ+1aIeHX
DUH8xLHxnVpbhAMCFJiac3Qx1YvYOwHhTjsV1pSYARonkTo6ae5y4ewNhzsSpQ4B
hc1PnXj+nX0v3nBgWaV20GgfQC+kc96ti3afE0qAYQoPBMxXguZfMexRFxoItaaa
Fcw4IMnliqaDYsi0Axt3Eyl07yM9Z7Pi6fNVMBfcajdIFNB+uJxmgDWW/JJk4xUX
AUUjCPSC7FTHuQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:32:16 2026 by rpki-client