Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: JeLf3Aiu41zBU1B7Zo+nfS991hYtlJQpd4LowHo/tGc=
Subject key identifier: 91:F2:08:D2:05:11:9D:D8:42:99:BB:D4:8D:D8:7D:88:09:DE:CE:00
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 019EC14907965C8C15154B742AA5CA58EF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 146D
Signing time: Sat 13 Jun 2026 14:00:49 +0000
Manifest this update: Sat 13 Jun 2026 14:00:49 +0000
Manifest next update: Sun 14 Jun 2026 14:00:49 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: hVlR/oq2ghbMaRnj5D6vCmR+nZRrFr6dAbvzCsewCHo=)
2: oglaQX4nFsIGr-Rok7QLUW7-tlM.roa (hash: s+KJpOp9hYCyRUjA+Of2ZWgASyr4epw2ZvVJ2zuqMSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:07:96:5c:8c:15:15:4b:74:2a:a5:ca:58:ef:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Jun 13 14:00:49 2026 GMT
Not After : Jun 14 14:00:49 2026 GMT
Subject: CN=91f208d205119dd84299bbd48dd87d8809dece00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:db:73:36:b3:6a:e3:ae:3d:92:4e:44:b5:
b3:3f:61:c8:97:40:fa:83:5b:fe:1f:a9:fc:2c:76:
89:56:c9:f2:bf:33:43:01:1d:30:3d:fb:79:d5:e2:
2f:27:80:7f:e5:25:ee:f1:19:c3:26:97:58:21:69:
d1:cd:b8:83:40:9e:3d:bb:27:1c:80:93:30:c4:dc:
ad:c0:c5:19:73:f4:1c:93:8c:cd:cd:0e:5c:15:84:
ae:ae:52:94:78:31:91:00:12:47:60:9f:aa:77:82:
c6:66:62:2b:5f:a5:b9:2c:4c:6b:56:85:c0:12:d5:
c0:21:6a:47:18:34:9e:77:51:93:73:e6:ba:e7:ac:
e3:a9:7f:b0:9c:88:a9:76:53:d0:a4:bb:5f:2f:91:
c3:b7:dd:97:17:3b:13:9b:94:fd:d3:5f:51:99:12:
90:8c:e5:b3:0f:ed:da:14:46:e4:24:61:8b:66:25:
be:ec:61:83:02:4d:ff:9e:1b:d6:41:ed:5a:d3:36:
82:51:bf:b3:70:b3:f8:40:df:eb:7d:32:c9:dc:bf:
7e:3f:b3:31:af:e3:19:7f:be:6f:33:3e:05:83:d4:
15:54:69:36:d3:63:98:65:4e:f9:e9:c0:f0:a9:74:
b0:a1:1b:0d:d7:39:87:9b:d3:7b:43:f2:9c:41:37:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F2:08:D2:05:11:9D:D8:42:99:BB:D4:8D:D8:7D:88:09:DE:CE:00
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:81:5c:eb:1a:ec:32:f4:a4:ca:53:6f:57:10:22:ca:ba:e7:
f9:65:7c:f0:82:f1:86:a8:b7:1b:4a:16:8b:c3:9d:86:e2:8d:
2d:dc:76:de:11:2e:56:2b:d9:7e:da:57:79:bb:23:19:31:54:
2f:57:35:6c:b1:98:2e:3b:ee:9b:27:b1:45:46:66:cb:48:f9:
2e:86:4b:70:0f:83:51:49:8f:64:46:a6:9a:41:3d:24:ff:98:
11:f4:71:40:c2:7c:79:37:90:42:af:ad:2f:30:b0:a9:45:3f:
73:b5:37:45:46:71:18:83:87:fc:a2:eb:8c:a9:5a:90:7a:ba:
d3:2e:a8:8a:10:5a:d2:3f:a3:0a:df:ff:fd:d4:c1:87:8e:7c:
64:b9:84:e5:c4:84:33:58:66:6f:5e:c7:a9:9e:1a:2f:20:bd:
a0:6c:63:8a:65:0a:09:f8:8e:51:97:6f:89:e6:57:09:60:f9:
26:d5:35:92:d6:68:d0:87:98:1e:01:d7:b1:f6:f8:ed:81:60:
ba:8a:a7:85:5e:d2:5e:59:49:43:9b:18:f9:e7:0b:d9:1f:1a:
11:c2:01:d5:a9:63:51:e1:d7:29:c8:2b:29:e3:20:d5:94:ba:
8a:c9:14:e1:4f:59:3d:4a:8c:b3:a4:b9:50:91:6e:5d:be:88:
97:65:07:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:55:22 2026 by rpki-client