Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File: 3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier: oRFAHQUEaAoYrEYLiVj3cs8gCyxKqjyXkc2uNWYap7c=
Subject key identifier: 67:D5:B7:61:E1:84:11:3F:44:F8:58:70:A6:B4:6D:75:46:E6:ED:A6
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial: 019EBE47F4B1643CCE850BE8B690A450BF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 00:00:47 +0000
Manifest this update: Sat 13 Jun 2026 00:00:47 +0000
Manifest next update: Sun 14 Jun 2026 00:00:47 +0000
Files and hashes: 1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: lcoZiCZd82kTqQp1TqMCPnxCSRimVnOFT3EJMo9UWWM=)
2: DX5ooE9ZIZJaF02Q9CvGnKIWcNY.roa (hash: wTDsCt307bisN+gK3/IsNzSToPiLxzeSSNZDltvG+zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:f4:b1:64:3c:ce:85:0b:e8:b6:90:a4:50:bf:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Validity
Not Before: Jun 13 00:00:47 2026 GMT
Not After : Jun 14 00:00:47 2026 GMT
Subject: CN=67d5b761e184113f44f85870a6b46d7546e6eda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:67:78:de:fd:b5:24:5d:c6:83:bc:3d:d7:
a9:f7:87:11:ed:50:20:52:56:0c:f9:a3:09:9d:5d:
cc:d0:2d:18:b2:a4:e7:83:11:9b:1d:de:e2:8a:a8:
ed:42:4b:07:94:8f:1f:db:20:dd:a8:96:38:50:ef:
ec:ad:43:21:fe:78:1a:be:95:eb:1a:46:44:ab:0b:
4e:ba:13:c0:41:10:67:61:4f:02:9f:27:d2:02:16:
77:c7:85:06:a1:49:b7:e0:44:88:7e:7a:91:cc:d4:
b3:7b:b3:f7:85:ce:20:fc:41:4c:26:6a:4e:16:3c:
e9:c0:03:1b:4b:18:33:f1:35:bf:85:f9:e0:68:6f:
8d:76:1d:8b:62:20:b4:77:0e:d0:fa:f0:c9:94:f2:
f3:89:b9:d5:9d:e0:7a:8f:21:14:d8:c9:c3:45:92:
41:60:74:e1:f7:f7:6f:62:a0:b9:08:ff:d5:13:c5:
c8:76:b3:57:b7:3f:77:60:0b:ea:2c:9f:b9:09:56:
12:9e:12:e9:8d:e3:a4:d0:7b:41:96:bf:45:9e:6d:
95:43:50:6e:0f:e7:1a:2e:5d:e7:f8:dd:5f:60:19:
75:66:02:c7:33:ac:90:bb:df:a4:4a:6d:e9:1f:31:
93:8a:57:a0:4d:97:d3:49:6f:e6:53:b9:ff:90:82:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D5:B7:61:E1:84:11:3F:44:F8:58:70:A6:B4:6D:75:46:E6:ED:A6
X509v3 Authority Key Identifier:
keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f6:bc:b2:55:66:92:a6:8d:19:b1:91:8a:43:d1:0b:24:2b:
d4:a5:29:66:97:7e:6f:16:51:b5:48:34:f9:b3:10:b7:b4:46:
17:09:f2:d4:cc:f7:f5:1c:e9:11:ae:ee:41:3a:81:aa:f2:b0:
26:fc:da:62:ee:2b:b2:1a:0b:35:89:03:63:04:ae:0b:5c:f4:
9d:df:6c:ea:0a:2f:5e:d5:87:41:b0:d5:48:79:19:3c:7c:40:
c9:74:99:a8:9f:e0:56:f0:c9:56:be:e0:1a:da:48:a6:24:27:
4c:27:3f:ce:4c:32:b0:50:0a:9c:3d:81:da:1d:d1:7f:8c:8b:
c6:48:1e:af:8d:75:f0:fa:3e:70:42:14:25:62:b8:fc:8f:e2:
87:a2:84:88:63:79:73:9a:01:ab:19:b3:f0:d0:9d:c6:13:0f:
99:94:79:ee:c2:c0:11:e6:7e:4f:48:2c:0b:c1:45:35:67:ad:
35:5f:d4:aa:86:f1:b2:58:bb:5e:32:65:63:4e:30:d1:7f:63:
9b:c2:d4:26:f2:6c:89:5f:15:29:e6:ab:3a:ac:5f:75:89:5b:
de:af:d8:1b:51:13:ab:15:0c:8c:ad:97:78:fd:46:a7:7c:43:
c0:33:79:17:0e:7c:c6:0a:d7:e9:b8:fd:16:c9:f7:aa:74:3a:
ba:e8:19:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+R/SxZDzOhQvotpCkUL9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDdlZDU4OGJhOTA2OTQ1N2EyYTg5OGZjN2EwY2I5Nzdk
MWY4MWUwHhcNMjYwNjEzMDAwMDQ3WhcNMjYwNjE0MDAwMDQ3WjAzMTEwLwYDVQQD
Eyg2N2Q1Yjc2MWUxODQxMTNmNDRmODU4NzBhNmI0NmQ3NTQ2ZTZlZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTBneN79tSRdxoO8Pdep94cR7VAg
UlYM+aMJnV3M0C0YsqTngxGbHd7iiqjtQksHlI8f2yDdqJY4UO/srUMh/ngavpXr
GkZEqwtOuhPAQRBnYU8CnyfSAhZ3x4UGoUm34ESIfnqRzNSze7P3hc4g/EFMJmpO
FjzpwAMbSxgz8TW/hfngaG+Ndh2LYiC0dw7Q+vDJlPLzibnVneB6jyEU2MnDRZJB
YHTh9/dvYqC5CP/VE8XIdrNXtz93YAvqLJ+5CVYSnhLpjeOk0HtBlr9Fnm2VQ1Bu
D+caLl3n+N1fYBl1ZgLHM6yQu9+kSm3pHzGTilegTZfTSW/mU7n/kIKJ9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfVt2HhhBE/RPhYcKa0bXVG5u2mMB8GA1UdIwQY
MBaAFN1H7ViLqQaUV6KomPx6DLl30fgeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1VmdFdJdXBCcFJYb3FpWV9Ib011WGZSLUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NTgxYjctMzViYy00YmM4LTg1YjMt
ZjQ1OTZlNzc2N2E4LzEvM1VmdFdJdXBCcFJYb3FpWV9Ib011WGZSLUI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80NTgxYjctMzViYy00YmM4LTg1YjMtZjQ1OTZlNzc2N2E4
LzEvM1VmdFdJdXBCcFJYb3FpWV9Ib011WGZSLUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePa8slVm
kqaNGbGRikPRCyQr1KUpZpd+bxZRtUg0+bMQt7RGFwny1Mz39RzpEa7uQTqBqvKw
JvzaYu4rshoLNYkDYwSuC1z0nd9s6govXtWHQbDVSHkZPHxAyXSZqJ/gVvDJVr7g
GtpIpiQnTCc/zkwysFAKnD2B2h3Rf4yLxkger4118Po+cEIUJWK4/I/ih6KEiGN5
c5oBqxmz8NCdxhMPmZR57sLAEeZ+T0gsC8FFNWetNV/Uqobxsli7XjJlY04w0X9j
m8LUJvJsiV8VKearOqxfdYlb3q/YG1ETqxUMjK2XeP1Gp3xDwDN5Fw58xgrX6bj9
Fsn3qnQ6uugZww==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:05 2026 by rpki-client