Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: PKaoTsnFBwzZM3AvEZwbxCgpP+wq9Xu2A9LptfUPfcg=
Subject key identifier: 31:D4:EF:43:3D:AE:21:4F:8B:25:3B:3E:10:90:21:E3:AC:1B:8E:51
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 019EBF23FBE079B70293D33C29B60A746CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 04:01:06 +0000
Manifest this update: Sat 13 Jun 2026 04:01:06 +0000
Manifest next update: Sun 14 Jun 2026 04:01:06 +0000
Files and hashes: 1: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (hash: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q=)
2: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: MGaXMzF+mPb6xzcPNnL38840i2YtDeZIEJvdzANHfYw=)
3: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (hash: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:fb:e0:79:b7:02:93:d3:3c:29:b6:0a:74:6c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Jun 13 04:01:06 2026 GMT
Not After : Jun 14 04:01:06 2026 GMT
Subject: CN=31d4ef433dae214f8b253b3e109021e3ac1b8e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:07:c5:0d:dc:29:33:fd:4c:9b:8f:36:30:
a9:63:7a:f7:0e:92:6c:b4:67:cd:2f:2b:8c:8e:56:
70:ff:e4:33:28:3a:55:da:9f:66:ff:e5:e7:fa:0a:
d1:2d:d2:5c:ae:15:a8:43:c6:47:9b:8f:41:85:44:
30:92:19:8e:ee:6d:fb:70:4b:fd:5f:ee:85:a5:f8:
41:c7:04:83:fd:0b:49:f1:26:9d:ec:54:7d:0a:06:
b6:85:75:ff:d4:f9:0c:29:a6:ae:1c:c4:3e:ba:aa:
1b:bc:d4:80:df:9a:15:e3:07:a4:91:a5:04:72:1b:
dd:d5:a1:19:3a:b4:d1:d2:08:18:d8:61:4b:ae:ac:
43:55:8b:50:a8:d2:c8:e9:41:64:9c:58:04:9b:e6:
50:92:c8:29:5a:91:7f:92:c3:eb:2d:cc:7a:a6:29:
6c:6f:d1:80:e1:c9:b9:53:ab:52:94:79:27:71:b8:
df:cb:05:2d:86:2a:89:f7:71:8e:71:60:97:42:80:
7b:e6:fa:62:d1:1f:a2:bd:8c:12:69:b3:fb:c1:66:
00:a8:d4:6c:24:18:3c:63:49:12:7a:e4:97:c1:40:
44:ec:84:6d:54:d6:27:41:4e:1b:59:eb:0b:5f:89:
21:22:86:26:66:d2:60:b1:f5:ec:ec:5c:ca:b6:5c:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D4:EF:43:3D:AE:21:4F:8B:25:3B:3E:10:90:21:E3:AC:1B:8E:51
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:74:ed:c4:c2:84:dd:8b:31:6e:58:f3:71:e1:a5:2b:f8:71:
8a:ed:27:ad:e2:1c:be:84:24:74:a7:b0:07:be:3c:42:77:c7:
1e:01:24:07:96:40:da:e3:6d:30:21:e6:8c:e7:bf:a3:d8:49:
40:86:a4:90:70:10:43:9f:c8:e9:2b:cc:58:4b:37:6c:e0:57:
62:f1:90:fc:2d:d8:df:e0:64:46:dc:aa:49:b2:f5:36:0c:ee:
49:7a:89:75:7e:de:d7:94:7d:a2:40:c6:0e:fe:f6:9d:09:ec:
8e:c2:3b:4b:f8:a3:56:93:fc:11:61:3e:da:89:1a:f7:5b:6d:
96:77:c0:8c:b7:54:46:68:37:4b:f5:6f:fd:5b:ce:5e:45:34:
a3:3c:dc:94:de:f9:51:a5:9a:1d:ba:d0:14:3f:a6:07:0b:1d:
60:ae:93:18:78:bd:58:71:9c:b8:6a:e9:81:4e:41:f3:28:d3:
bb:bd:64:22:60:86:81:d8:43:ea:bb:c2:af:99:06:35:3e:d0:
e8:a0:91:09:db:81:10:c4:b5:8b:db:4d:c5:4b:2b:b5:4c:bb:
69:52:ed:aa:89:87:9c:c0:90:32:e7:4c:f8:8a:76:0b:a1:25:
4c:61:dd:52:af:2b:4b:a4:5b:f5:a3:c0:07:d1:33:9f:a6:b6:
ec:43:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:51 2026 by rpki-client