
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
File: 3I_H9_qQqYNsGrKgzyvizXKgzN0.mft (raw, json)
Hash identifier: uOvz/OTdOsV8Besma4bP0XgkJWd3EjsUfvDmmdEEsLI=
Subject key identifier: 87:61:0D:05:5E:60:E6:C6:98:FF:81:DF:ED:26:E6:B8:A0:02:1D:E6
Authority key identifier: DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD
Certificate issuer: /CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
Certificate serial: 019EBE110BA4A9768A115BD427BDA1E893DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
Manifest number: 3F
Signing time: Fri 12 Jun 2026 23:00:48 +0000
Manifest this update: Fri 12 Jun 2026 23:00:48 +0000
Manifest next update: Sat 13 Jun 2026 23:00:48 +0000
Files and hashes: 1: 3I_H9_qQqYNsGrKgzyvizXKgzN0.crl (hash: /tq6Rjl2Hb+ok8HUZgzgGkkfyjmgmFMIzCE3GNTc/yY=)
2: 6HatfdixY2P5gSgvmX5-6wUd1wc.roa (hash: 3HNrydriuFOEzSXWmClbpJIH0oZDXxGv93C16WVaK7I=)
3: AuzmeUpM_SxpfBgEhLhD1987_aI.roa (hash: vCf9za/qm6yqMbXZ2WsXiNRkpm9xQG6Sr9RvFWVkvpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:0b:a4:a9:76:8a:11:5b:d4:27:bd:a1:e8:93:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
Validity
Not Before: Jun 12 23:00:48 2026 GMT
Not After : Jun 13 23:00:48 2026 GMT
Subject: CN=87610d055e60e6c698ff81dfed26e6b8a0021de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:25:dd:f6:41:1a:46:11:59:2b:a6:a6:82:
fb:15:35:45:13:57:6b:ae:cf:7f:2f:73:28:a7:b4:
ba:06:05:93:df:da:3a:0f:19:97:d7:70:68:f0:db:
c7:48:08:cd:19:07:eb:6e:1d:7a:11:bc:49:89:60:
eb:47:8e:80:90:a8:3d:ca:fc:65:e9:87:73:b4:c2:
cb:b7:35:a5:f8:24:43:82:90:8e:34:73:0a:7e:40:
04:30:aa:40:d2:75:67:1e:33:9b:28:16:24:66:37:
2f:3b:4a:e5:09:05:46:5f:f0:37:d4:52:b7:11:79:
77:dd:b3:c4:35:c2:34:32:59:2c:0c:74:de:16:65:
4d:b1:ba:96:15:4e:32:9e:90:8d:58:f1:d0:a7:fb:
f5:77:a0:8e:94:29:b3:52:09:a0:20:4e:93:dc:49:
48:4a:44:7d:45:03:ac:4a:37:67:fa:7f:8b:c8:81:
70:c6:10:f7:02:26:8c:f9:d4:26:c0:34:c0:f7:a9:
81:aa:0a:0c:02:62:b9:cd:ab:b4:05:24:6b:78:3d:
1f:48:f1:25:3e:3b:30:5a:ec:44:30:f2:8d:db:7b:
a6:47:42:d2:d4:ee:52:c3:65:bb:14:0b:01:c0:d1:
17:23:f2:c0:b3:48:fe:2e:ad:43:5a:45:22:1e:4e:
52:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:61:0D:05:5E:60:E6:C6:98:FF:81:DF:ED:26:E6:B8:A0:02:1D:E6
X509v3 Authority Key Identifier:
keyid:DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0e:73:6d:43:b9:9d:2d:25:ce:8a:de:40:e8:94:d5:30:89:
dc:9e:29:03:b0:f9:2f:64:d6:b7:7c:35:ce:30:1a:14:ce:ba:
13:fd:1c:40:14:78:db:ed:52:e1:fd:8e:77:86:86:f4:ec:22:
0d:de:37:a9:77:d8:c4:7c:dc:0f:ee:f7:76:9a:74:5f:5e:8d:
d1:4b:9d:f7:0b:c4:49:a8:2a:a4:71:3d:26:6d:2d:89:a4:24:
e1:cb:66:b1:dd:48:bc:d9:ff:0d:e2:eb:3e:20:1d:bb:64:47:
13:b7:c7:de:c4:ee:99:be:07:a0:e8:7a:5e:65:1a:72:7c:50:
52:7c:2f:c4:a7:a3:a5:e5:fb:d0:fe:a4:d1:5f:7d:a1:4b:9b:
b4:94:dd:59:d3:c7:2e:a5:96:c7:35:12:f9:dd:f0:77:af:8e:
f3:35:93:ae:40:e4:7a:da:b4:ff:18:aa:72:27:1a:cf:55:3c:
0c:e0:d8:68:4a:0b:3d:35:28:46:3f:74:d5:80:38:38:76:fa:
ce:eb:d0:1e:c9:89:f2:e5:a6:d8:96:d1:b1:fc:41:be:0a:94:
79:f7:7f:15:f6:39:ad:61:e3:4f:8c:d3:c5:d2:9d:45:28:b0:
70:37:03:a1:66:6d:98:3e:ee:e0:ca:75:ca:7d:ff:8c:d3:06:
14:1a:ad:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+EQukqXaKEVvUJ72h6JPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOGZjN2Y3ZmE5MGE5ODM2YzFhYjJhMGNmMmJlMmNkNzJh
MGNjZGQwHhcNMjYwNjEyMjMwMDQ4WhcNMjYwNjEzMjMwMDQ4WjAzMTEwLwYDVQQD
Eyg4NzYxMGQwNTVlNjBlNmM2OThmZjgxZGZlZDI2ZTZiOGEwMDIxZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7cl3fZBGkYRWSumpoL7FTVFE1dr
rs9/L3Mop7S6BgWT39o6DxmX13Bo8NvHSAjNGQfrbh16EbxJiWDrR46AkKg9yvxl
6YdztMLLtzWl+CRDgpCONHMKfkAEMKpA0nVnHjObKBYkZjcvO0rlCQVGX/A31FK3
EXl33bPENcI0MlksDHTeFmVNsbqWFU4ynpCNWPHQp/v1d6COlCmzUgmgIE6T3ElI
SkR9RQOsSjdn+n+LyIFwxhD3AiaM+dQmwDTA96mBqgoMAmK5zau0BSRreD0fSPEl
PjswWuxEMPKN23umR0LS1O5Sw2W7FAsBwNEXI/LAs0j+Lq1DWkUiHk5SvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdhDQVeYObGmP+B3+0m5rigAh3mMB8GA1UdIwQY
MBaAFNyPx/f6kKmDbBqyoM8r4s1yoMzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0lfSDlfcVFxWU5zR3JLZ3p5dml6WEtnek4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83NTA4M2QtMjVkYi00MDg1LTlkMDkt
MmMyNjE5N2M4M2U5LzEvM0lfSDlfcVFxWU5zR3JLZ3p5dml6WEtnek4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83NTA4M2QtMjVkYi00MDg1LTlkMDktMmMyNjE5N2M4M2U5
LzEvM0lfSDlfcVFxWU5zR3JLZ3p5dml6WEtnek4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjw5zbUO5
nS0lzoreQOiU1TCJ3J4pA7D5L2TWt3w1zjAaFM66E/0cQBR42+1S4f2Od4aG9Owi
Dd43qXfYxHzcD+73dpp0X16N0Uud9wvESagqpHE9Jm0tiaQk4ctmsd1IvNn/DeLr
PiAdu2RHE7fH3sTumb4HoOh6XmUacnxQUnwvxKejpeX70P6k0V99oUubtJTdWdPH
LqWWxzUS+d3wd6+O8zWTrkDketq0/xiqcicaz1U8DODYaEoLPTUoRj901YA4OHb6
zuvQHsmJ8uWm2JbRsfxBvgqUefd/FfY5rWHjT4zTxdKdRSiwcDcDoWZtmD7u4Mp1
yn3/jNMGFBqtHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:41 2026 by rpki-client