Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: O2AL6tGKAcPlN+IqjR/YDbsAge8PNN5j6yVx5WQK/PQ=
Subject key identifier: 60:A9:91:2D:F5:62:02:65:E8:1F:1B:34:80:B7:3B:92:6B:40:F8:11
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 019EBE47AE693C88B6F4479B68129744FE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 00:00:29 +0000
Manifest this update: Sat 13 Jun 2026 00:00:29 +0000
Manifest next update: Sun 14 Jun 2026 00:00:29 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: EL49h+QvV7kj21g+G3kSt4yDd50fEJc6kOuYiHAira4=)
2: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (hash: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I=)
3: qsdjnJflN-hqMusJ8mRO3QvIelE.roa (hash: SE6UiCw/dJG6vG+istEe6e9u75qYp7RLjIy5NUM722g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:ae:69:3c:88:b6:f4:47:9b:68:12:97:44:fe:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Jun 13 00:00:29 2026 GMT
Not After : Jun 14 00:00:29 2026 GMT
Subject: CN=60a9912df5620265e81f1b3480b73b926b40f811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ca:c7:73:22:38:51:d7:e1:c5:a2:21:cd:c0:
f7:f9:e1:74:ad:ca:4c:f1:c1:7d:56:b7:ad:6c:8d:
c2:c5:ae:6e:58:88:2f:3e:08:65:38:9e:91:8f:79:
91:cc:c7:89:d4:b1:0a:1a:6f:ba:d5:55:8c:a2:bb:
5f:ac:1b:57:c9:bb:90:70:a7:68:ab:a7:01:37:35:
3a:21:4f:10:62:d9:a7:16:66:7a:b9:ce:d1:ec:a6:
65:b5:e5:22:66:07:fb:06:21:76:28:5f:0e:ae:5b:
cc:61:56:4e:5b:6a:19:ad:87:4b:65:6a:75:d6:85:
96:b8:19:f6:1e:e3:e3:6f:92:20:d7:fd:99:ad:a5:
0d:ff:a0:b4:c3:7b:b5:98:2c:76:f7:a2:68:5e:6c:
f8:21:82:46:63:a7:72:d1:cf:ac:65:40:67:dc:7d:
29:77:58:e6:fd:b1:8a:9f:b5:ef:e5:cc:e4:ed:45:
e3:01:8d:e4:b7:7d:ea:88:4e:3e:6c:d3:47:4a:1b:
c8:4e:69:ed:77:16:e5:85:3d:a6:80:45:21:21:d0:
69:ce:fd:df:ab:ce:bb:16:dc:a0:c7:69:b3:42:f7:
b5:d4:c5:90:0f:12:b7:0e:5a:78:bd:4b:82:22:e8:
88:6e:a1:2d:9c:ec:b2:92:71:9c:13:29:c3:4b:4f:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A9:91:2D:F5:62:02:65:E8:1F:1B:34:80:B7:3B:92:6B:40:F8:11
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:25:7d:7f:ef:aa:06:a3:c3:be:ba:78:9f:82:d1:30:ca:a0:
f3:19:e6:98:37:96:bf:e7:07:32:b9:44:7b:43:25:b6:6b:f9:
8a:97:ed:ae:80:1a:ee:42:b7:3d:5d:11:28:22:6d:90:3d:18:
66:33:13:d7:8b:ce:99:cf:7e:22:9b:ff:61:e2:9b:34:bc:ff:
5d:30:a8:95:db:20:8a:95:b0:b9:66:b2:ae:3a:31:d9:43:4b:
af:f4:22:a0:12:cd:32:4c:14:20:fd:5f:4e:fb:de:2f:67:eb:
93:1b:3d:39:21:00:20:30:7d:99:de:82:61:82:df:81:e8:1a:
3f:e1:ed:b4:5d:4e:9e:b0:20:e7:7f:88:b2:44:f1:09:50:b6:
43:a7:4f:34:d8:dd:9d:79:df:32:b6:95:c6:ba:13:89:95:f4:
9e:85:a1:3f:bf:7f:c6:81:a0:88:08:13:10:b4:aa:53:30:65:
f9:d0:79:71:9a:04:50:44:f0:1b:f6:5a:97:a0:48:cd:fa:71:
0f:52:fc:60:38:15:ba:b6:48:8b:af:1d:58:27:97:55:db:46:
e8:72:f2:ee:9f:9a:9a:5a:41:f9:1e:2e:33:d4:77:66:7b:b9:
f9:ad:a1:65:0a:9e:b4:77:91:51:6a:40:75:4e:97:e5:0c:04:
40:29:dc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:44 2026 by rpki-client