Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: 5P6xC5Rc569j9AUsPzFPdZPHbh2+nQEbWqwEnC+QShs=
Subject key identifier: 3A:DE:2A:C0:97:13:E1:8E:82:3A:9B:C4:82:29:BC:1F:58:39:D0:4F
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 019EBF5A14A612795BF4499F0DD7E3612AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 18EC
Signing time: Sat 13 Jun 2026 05:00:12 +0000
Manifest this update: Sat 13 Jun 2026 05:00:12 +0000
Manifest next update: Sun 14 Jun 2026 05:00:12 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: woWcEQvUs0T3PBTvu4EjIV3l9IRqzmXvAAhVQGmkZdc=)
2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:14:a6:12:79:5b:f4:49:9f:0d:d7:e3:61:2a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Jun 13 05:00:12 2026 GMT
Not After : Jun 14 05:00:12 2026 GMT
Subject: CN=3ade2ac09713e18e823a9bc48229bc1f5839d04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:68:92:fd:e6:47:a5:cc:24:ea:11:e3:08:
10:0e:d1:9f:79:1a:5b:8f:23:e3:fe:66:f4:b7:54:
58:1f:17:89:cd:51:e9:8e:c6:f0:af:4a:46:bc:88:
d1:9f:e2:01:eb:8e:b9:bf:e8:18:21:7c:f4:54:b6:
26:79:90:78:ff:50:92:f7:7d:fd:4f:24:1b:b6:01:
fc:7b:f6:a7:e2:3a:63:be:ca:aa:82:f0:f4:c6:c7:
c4:74:bc:d9:a3:8b:da:8b:f5:cd:b7:73:3f:6c:eb:
42:01:3d:ea:b8:6a:f9:5d:19:ee:ba:48:51:68:16:
db:c4:de:5f:a9:9d:e8:c6:8c:2a:9b:57:f3:c1:d2:
aa:69:77:13:26:f0:e8:c3:7c:04:15:c0:1f:d7:05:
da:d3:69:e7:73:69:ac:69:b8:e2:84:c3:59:d7:b8:
53:bb:3a:3b:31:ea:14:87:f1:cb:89:fd:cf:d1:22:
54:5a:72:c7:5c:75:8a:2e:46:de:11:a3:18:00:8d:
30:67:a6:63:85:1d:e7:4f:c7:ee:01:d7:12:89:62:
55:85:24:0a:82:39:1d:b3:43:76:cd:90:8d:59:b7:
a5:bf:11:36:8e:c3:5e:3d:00:aa:34:18:33:24:95:
7c:27:37:22:fd:86:fd:df:fd:0e:d9:02:2e:e2:d4:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DE:2A:C0:97:13:E1:8E:82:3A:9B:C4:82:29:BC:1F:58:39:D0:4F
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:60:4d:b0:fd:7e:d2:3d:56:77:94:eb:23:8a:a4:d1:89:0f:
0a:c0:22:24:56:d1:f5:ce:c5:d8:41:10:62:96:33:67:34:d8:
76:fc:d7:41:1d:b9:d6:88:47:ce:7f:39:4c:df:fc:19:90:88:
1f:96:87:1f:e8:14:9e:a8:05:61:4f:c3:f5:7d:86:90:59:92:
a4:e2:17:a4:d5:50:bf:58:bd:70:e0:4d:e7:59:21:f0:14:89:
8f:07:cf:7a:e6:dd:d0:55:c7:44:37:b9:f2:35:fa:97:1b:55:
8b:c6:29:c3:d4:f4:ac:3e:63:ed:1f:0e:b5:5d:7c:51:d4:6e:
c9:1e:10:92:ab:b8:8e:f5:65:a6:e6:e9:65:fd:e2:08:b9:36:
01:fe:24:fd:5c:65:81:f2:f3:9c:ea:e3:53:11:69:f4:85:c9:
ae:77:dd:8b:e7:29:a3:de:fc:e6:13:1d:5c:c0:0e:ba:11:74:
2a:62:93:82:ca:ad:a7:e9:c1:99:b6:6d:5d:ff:41:08:b8:3b:
95:1d:d2:d0:ed:1d:54:d3:25:aa:79:01:75:17:49:5c:41:9b:
5d:0d:b9:16:2d:5b:76:11:d6:78:1b:1a:d0:14:ce:4f:e1:92:
08:e7:d7:09:a7:93:03:9b:e7:78:3b:2d:86:7b:14:7b:c5:2b:
ea:03:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:02:53 2026 by rpki-client