Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json)
Hash identifier: yYbWqBnYE980HyMdPAQw860YbPsL2N8a4I8C5OruvC0=
Subject key identifier: 5E:EC:E5:C5:EB:75:86:BA:F5:CD:DF:EF:1A:F1:CE:E9:4E:1D:BF:84
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 019EC06E2CAA10DBCA9FD8647CA9E7CD8806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
Manifest number: 1554
Signing time: Sat 13 Jun 2026 10:01:46 +0000
Manifest this update: Sat 13 Jun 2026 10:01:46 +0000
Manifest next update: Sun 14 Jun 2026 10:01:46 +0000
Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: ePK6+6o+NKCGWz9CMp6OwTBdsxbH+VXcHKO2eaUZm2U=)
2: rK_eXiPCuOjW-auhckDc_o9LpbU.roa (hash: 9zrMuRy0E1ETZnPDy8ZqKg+/z8n/i1oHLCCis26nPQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:2c:aa:10:db:ca:9f:d8:64:7c:a9:e7:cd:88:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: Jun 13 10:01:46 2026 GMT
Not After : Jun 14 10:01:46 2026 GMT
Subject: CN=5eece5c5eb7586baf5cddfef1af1cee94e1dbf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:95:73:52:5e:3b:8f:48:d1:f4:f6:39:7d:
de:3d:b0:65:99:16:81:8d:c3:11:7c:1e:6d:6f:46:
23:64:7e:da:8a:42:ea:62:c5:b2:3b:98:7b:a6:5a:
c4:ff:97:63:f1:1e:67:3d:43:ad:32:0d:e1:87:d3:
44:1f:47:09:b1:9b:2b:d9:76:ab:73:76:50:42:65:
1c:69:82:93:fa:08:40:e2:e5:98:be:dc:5c:22:a0:
20:68:07:09:df:33:d7:a4:70:c0:80:73:95:3a:45:
0a:27:9a:b1:e2:e0:f8:f9:96:da:f2:12:2a:90:48:
c6:77:6c:79:96:cd:66:52:5f:97:16:66:72:f1:f9:
60:e1:5a:96:be:bf:4f:c0:40:b6:6f:fe:f1:14:e6:
59:d8:47:ff:30:0f:53:f7:a4:35:8d:b8:91:6c:36:
41:73:2b:78:ab:81:fe:04:3d:2b:85:bd:4c:b0:48:
44:3e:87:d1:d6:77:0a:90:8b:ba:a6:bb:1f:44:d2:
00:24:33:26:a4:34:02:5f:1f:06:c0:f0:8b:e7:70:
60:bb:0e:f4:91:cc:06:6d:81:95:8d:09:55:a4:f5:
a4:c4:e0:5a:4c:45:bc:e9:af:8a:0e:e5:bb:5f:03:
3b:64:8d:3e:80:ca:e3:55:78:1e:04:d7:64:4a:56:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EC:E5:C5:EB:75:86:BA:F5:CD:DF:EF:1A:F1:CE:E9:4E:1D:BF:84
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9f:b2:e3:41:e4:fd:fc:5a:20:b1:05:52:69:64:76:e1:ac:
e1:9a:7a:da:84:01:c4:89:73:90:af:ff:76:7f:a1:15:c5:33:
4a:f9:ec:69:0c:0b:86:24:29:c7:17:7a:1b:47:23:99:77:f1:
91:27:36:f3:6e:52:0d:dc:71:84:a1:41:2a:1b:62:41:ea:69:
83:86:b1:64:56:20:8f:b1:9b:af:8e:ce:41:3a:25:6e:bd:41:
31:de:a6:71:4f:54:e1:2d:94:df:d3:49:dc:f5:fc:b6:8e:77:
07:3a:43:07:b8:7a:c4:a8:a8:e0:15:19:d9:b2:33:a5:86:ed:
fa:91:8e:c7:76:32:f4:46:b9:17:22:c3:c2:b7:81:f8:4f:79:
1d:e3:cc:46:98:9b:20:16:68:ba:4a:c8:cb:1f:d9:b5:6c:8a:
64:f1:97:11:76:5b:32:63:d6:87:37:71:9b:2a:cd:1f:df:aa:
4e:70:2e:80:4f:35:1b:5a:21:f9:9e:f1:a2:6d:fe:b4:f8:48:
91:27:48:21:a6:3b:48:07:6e:0a:7b:73:9e:62:47:72:40:89:
de:8b:32:40:b0:cd:7e:4d:a5:3c:df:14:ad:c7:de:5b:00:b9:
61:bf:ba:0e:a8:14:59:d8:3c:05:97:60:ad:9f:62:58:0a:59:
8b:2c:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:33 2026 by rpki-client