Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: dW7rnS2P4vtsmKzrH5Sn+u+2t0C7t5p8FLlbhDFFNKs=
Subject key identifier: 26:49:B3:E6:15:8F:DD:AA:30:D7:D9:77:27:26:4D:DD:26:0B:C0:DC
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 019EBE1127413F33128737CD556AB49F4455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 195A
Signing time: Fri 12 Jun 2026 23:00:55 +0000
Manifest this update: Fri 12 Jun 2026 23:00:55 +0000
Manifest next update: Sat 13 Jun 2026 23:00:55 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: diSvYz+scNSJnDakPX7q2u6tBm+2z1UXjhZkXsNKkYg=)
2: nFQlym1aMKDG1iZXPXNlMoKyhB0.roa (hash: r3sbYclJIQsvLQBD+qrAOMivPnh7tcPSSaMitIINazI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:27:41:3f:33:12:87:37:cd:55:6a:b4:9f:44:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Jun 12 23:00:55 2026 GMT
Not After : Jun 13 23:00:55 2026 GMT
Subject: CN=2649b3e6158fddaa30d7d97727264ddd260bc0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:5d:42:36:fb:a4:75:4e:d2:cb:28:3c:6b:
78:e2:71:b1:50:47:18:25:96:eb:f4:34:e4:96:f4:
60:f5:2e:5d:ee:27:9d:05:44:34:6e:64:2d:ea:95:
a4:fb:ee:61:75:d7:95:15:55:82:72:78:e0:27:04:
37:2d:c6:53:9a:eb:d9:3d:47:5f:01:11:ed:20:09:
51:c4:2c:f5:63:8e:cc:52:62:2a:63:23:78:c5:60:
1d:7b:fd:a3:45:07:0e:ae:a9:5a:16:98:07:7a:c0:
03:a1:1b:b8:ac:c7:6e:4e:de:43:f9:43:b5:e5:e9:
05:f5:89:00:6e:db:e2:5f:31:9a:35:1b:bc:81:56:
40:57:d1:37:13:84:4b:a9:d1:81:f2:fc:29:14:50:
12:ba:8e:c7:07:0f:78:2e:56:f4:55:a8:9c:92:bd:
95:4d:1e:5c:30:a3:2d:98:44:48:59:02:70:17:d8:
71:55:a6:d7:e5:c4:46:93:8c:4a:0b:7c:a5:9d:57:
d6:94:3f:e6:17:47:c2:4f:40:63:da:da:6a:b3:bf:
81:00:99:4e:5d:b8:52:df:06:30:10:51:3a:ec:70:
f2:95:52:c1:5c:5e:fd:5c:da:eb:57:0d:eb:75:cc:
6d:d1:cf:d6:e9:a9:3b:7e:05:84:02:a4:b6:aa:03:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:49:B3:E6:15:8F:DD:AA:30:D7:D9:77:27:26:4D:DD:26:0B:C0:DC
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c8:8f:f5:70:d8:04:f5:3a:56:9f:12:bc:15:81:3e:19:33:
29:8d:7f:de:30:75:db:c1:c1:c5:a8:a2:78:e0:97:62:da:9f:
b9:24:49:b8:c1:ba:46:c5:b8:39:49:38:e5:c8:fa:93:38:45:
34:d9:d6:ea:28:b6:62:be:80:36:ac:dc:1d:df:30:94:79:e4:
6d:ed:62:31:7a:11:ee:b8:c2:25:e3:16:83:b7:3c:1a:c4:d3:
ce:30:c1:1d:23:64:d3:ed:0c:a6:e0:ce:a2:ad:2e:79:6c:18:
4f:34:09:07:75:20:9a:23:d1:f8:3d:29:eb:26:12:24:83:e4:
03:0d:30:c5:f2:54:a4:85:3a:62:88:e4:b8:c0:34:a0:15:4c:
fd:56:7d:73:cb:34:8f:2b:01:68:63:79:01:47:2d:46:e7:51:
5e:b0:b3:c3:4d:f7:52:29:c7:f7:44:a2:25:af:84:e9:a3:8e:
aa:27:8c:0d:1f:c4:0f:61:d7:ec:a9:90:6b:ee:c0:57:73:84:
ef:57:a3:72:ed:a5:3e:36:08:90:f3:11:03:cd:ee:5d:ac:be:
bc:20:f9:ea:95:ae:8d:a5:2c:dd:48:44:a0:1c:bd:a6:f3:cc:
d6:e7:f7:60:ee:cc:20:36:0e:36:41:b1:75:5f:c8:d6:8c:6d:
cd:3b:9d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:10 2026 by rpki-client