Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
File: 3y3kqfK8Uj318Kf15DJJikLFX3A.mft (raw, json)
Hash identifier: ZhOJBKXUiV05Fv50huS29sNSnHx4QoZUnmKYpBNuO2s=
Subject key identifier: 58:63:0D:F1:4E:78:99:03:D8:AE:B5:9E:55:22:EA:81:E9:69:44:39
Authority key identifier: DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
Certificate issuer: /CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Certificate serial: 019EBDA32FB70478F789CAEC17DF50E3290F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
Manifest number: AF
Signing time: Fri 12 Jun 2026 21:00:48 +0000
Manifest this update: Fri 12 Jun 2026 21:00:48 +0000
Manifest next update: Sat 13 Jun 2026 21:00:48 +0000
Files and hashes: 1: 3y3kqfK8Uj318Kf15DJJikLFX3A.crl (hash: 8Jh/MMN29e7a9Lw8Own633DzSgFIqbPPYbjE5dj6tCc=)
2: 8XebNTiumaUWcLbgsrPRqEK7yJk.roa (hash: wIkMYGUwRkloiGV8zcV817/8WXtvc8qz+eDzExEQl48=)
3: SU9_tB5lwfHPL_4Kt4ROwFHlUMI.asa (hash: wN65KwAJllI0kxcg5tgjkk0Y4QH9uf/hvRTzQ2pTovk=)
4: xtsoV3YrVhm4MKDjfu3IvjG7q1g.roa (hash: qMRfu2o1bzSJ1p0UvgBKjKi65ckvS8nI12aCVQ8a6vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:2f:b7:04:78:f7:89:ca:ec:17:df:50:e3:29:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Validity
Not Before: Jun 12 21:00:48 2026 GMT
Not After : Jun 13 21:00:48 2026 GMT
Subject: CN=58630df14e789903d8aeb59e5522ea81e9694439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:5d:59:92:92:e3:04:a4:df:f6:db:cf:59:
26:1c:1e:4f:d7:2e:79:f5:31:6d:f7:2d:2a:1e:06:
65:e1:e5:bb:ec:81:0a:33:e7:e0:08:6a:73:15:d6:
e0:66:d1:c7:f0:cb:c1:28:b3:6c:0b:a2:d0:7b:b4:
69:aa:1e:a1:e0:ad:66:83:58:98:f1:60:ae:99:8b:
7b:df:e4:fb:e9:f6:b4:22:99:6c:31:b6:1c:69:25:
6f:f4:0f:de:f6:cb:30:ea:a9:d5:5f:e4:20:a6:4d:
b4:0a:5c:81:f5:22:45:f4:64:de:8a:f4:b8:f9:ec:
6d:85:da:6c:c1:11:ce:fe:31:5a:a2:ea:47:77:e1:
9c:65:f5:03:f6:1d:35:bd:50:6f:99:8a:dc:2e:44:
e7:6a:1d:14:9e:13:53:2f:66:aa:ea:99:30:16:a8:
a6:c0:66:e9:45:bc:55:d4:b9:2e:a1:79:bd:c4:69:
f6:24:9d:86:62:60:eb:9d:87:69:2b:6d:5a:48:7c:
be:ea:66:dd:87:13:a3:a5:e5:da:e5:ca:fa:6d:9c:
e7:9f:78:4e:f5:0a:f9:cd:28:62:70:b6:eb:93:e0:
84:18:43:e6:13:d9:ce:6b:c1:12:ab:5f:c3:21:b7:
38:91:d0:12:72:4b:22:e3:da:6b:75:bb:ee:dc:0b:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:63:0D:F1:4E:78:99:03:D8:AE:B5:9E:55:22:EA:81:E9:69:44:39
X509v3 Authority Key Identifier:
keyid:DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:82:de:9c:ec:57:b8:e8:95:0e:54:1b:48:67:99:98:7f:07:
ba:98:d7:17:a7:a4:44:e8:b0:cb:12:fe:b7:e7:0e:49:a1:71:
97:ad:09:92:2a:28:9d:64:f3:0c:c5:3a:8b:37:19:2e:e7:59:
8c:d2:e7:94:d7:53:8d:aa:06:ed:42:a8:bb:77:70:9f:30:9e:
c8:a3:97:90:c1:95:45:08:cf:4b:4a:47:11:53:2e:89:e6:fd:
16:39:90:23:09:f6:31:13:1f:46:47:2e:f3:b2:b0:b6:b8:f1:
58:7f:5d:8b:30:e1:cd:9e:f9:60:14:d4:28:92:9d:82:01:a6:
91:a8:ec:ef:ab:20:0f:b7:87:f0:e6:26:c3:e3:59:93:55:3c:
1e:da:2b:f3:1e:13:ba:9e:1c:d7:09:41:37:af:6c:1f:ab:d6:
43:9d:4a:98:9a:e9:e3:40:87:21:30:bd:e5:63:2e:95:69:f5:
e1:08:f0:a7:52:ef:7b:62:38:ec:eb:12:3c:52:7e:f6:6a:95:
2c:c4:fa:63:8c:63:1b:5d:cb:7a:84:e1:1d:8a:34:04:28:0e:
27:a1:42:3a:0d:f2:5a:c0:de:b2:34:a4:c0:0b:20:c6:5a:5c:
6a:29:ca:66:9e:a2:95:8d:73:46:66:06:c3:fe:9e:d2:72:bd:
a7:cb:0c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:43 2026 by rpki-client