Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: 60mlRO1D1quyiHTihAggFtSBCKDf5SS8dH16PK2oHrg=
Subject key identifier: 38:FD:0C:37:F7:9F:AF:47:E0:A3:24:A4:EB:F3:08:01:AE:33:2B:43
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 019EBE107FDA90DED4E10967C3176271822F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 1935
Signing time: Fri 12 Jun 2026 23:00:12 +0000
Manifest this update: Fri 12 Jun 2026 23:00:12 +0000
Manifest next update: Sat 13 Jun 2026 23:00:12 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: FE5kZmYltsYWgBuLvOMrOKbTjXMfqdvHFCZY91ZTjEE=)
2: I_klKsqV4Xc27UFkAneEsuB-gHk.roa (hash: AkW1e4Xf71kIFS8tvO/5F4giqlxcvlPyuHSMW67qHI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:7f:da:90:de:d4:e1:09:67:c3:17:62:71:82:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Jun 12 23:00:12 2026 GMT
Not After : Jun 13 23:00:12 2026 GMT
Subject: CN=38fd0c37f79faf47e0a324a4ebf30801ae332b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:a5:e5:0f:e3:b2:06:04:96:e0:73:34:c0:
f2:ad:11:5c:44:51:a8:44:ad:5c:fd:5a:03:d2:0f:
dc:fd:c5:43:fb:9a:9a:70:73:a1:1c:d8:95:bb:13:
85:12:59:b7:68:33:bd:3e:85:1a:b2:9a:f7:23:77:
83:c5:fb:6a:01:6e:c6:80:d4:3a:d4:64:7e:b0:53:
ec:52:89:0a:4e:d5:b6:82:3e:35:0b:9b:bb:15:4b:
11:b0:12:f5:6a:40:6f:52:c9:dc:d9:78:34:f9:dc:
2b:b4:4f:e8:a8:77:07:0d:ce:1e:be:8a:e6:c9:c6:
c6:0c:10:0b:df:51:bc:44:c1:6d:b9:65:14:27:d1:
b6:ed:1e:76:96:dd:05:86:d8:0a:e7:ea:97:a9:34:
fd:b0:7b:da:a2:a6:d5:5b:10:9b:04:60:d1:bd:21:
a5:48:bc:1d:b8:7e:28:b2:e9:98:3f:1e:77:08:ca:
50:e8:f3:5c:d6:62:ba:66:cf:4b:67:c8:56:ed:df:
7e:13:32:a8:5d:64:21:94:dd:97:db:a2:45:1b:cc:
b2:0a:d6:7a:1c:7e:57:60:e5:88:14:f4:30:fe:8e:
81:b1:f0:79:37:ef:28:a3:8c:ae:3c:09:3b:b1:46:
e6:b6:de:c4:3a:c5:a9:bc:34:9e:9e:70:f4:19:7d:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FD:0C:37:F7:9F:AF:47:E0:A3:24:A4:EB:F3:08:01:AE:33:2B:43
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d1:3a:85:94:5d:8d:0e:87:b2:68:61:a6:d6:2f:d7:7d:05:
1f:63:56:3b:cc:6e:1e:b7:ac:56:a1:77:5b:c9:fa:c3:64:66:
b8:d4:b5:f7:1e:34:1f:c1:2c:94:ba:ae:8b:2c:0b:09:6c:6c:
19:bd:e5:7a:c7:ae:b0:d0:4f:38:d0:32:46:c3:15:ae:d3:4e:
0c:da:fd:27:43:6e:f4:a0:0b:c4:65:b6:94:5f:e9:e0:27:50:
99:c4:b1:7c:5a:1c:4c:70:4d:b7:68:24:6b:08:31:03:ec:2a:
9a:b6:fc:0e:d5:47:fd:a5:be:a3:b9:d7:13:96:58:cf:f1:7a:
f8:b9:ba:34:4b:a6:18:95:54:0d:72:e0:9c:aa:b4:c4:01:a2:
82:e9:70:a5:46:36:43:9a:11:6b:78:42:f0:09:93:f3:c1:fa:
d4:ef:a2:fa:93:80:d4:6b:9e:fd:13:d8:68:59:a3:8a:89:4f:
7d:0b:d2:e1:f6:86:92:b7:cd:3b:f1:35:e4:d3:42:b2:22:c1:
33:ef:22:bd:c1:cc:e9:c9:38:4a:a6:3e:02:7f:96:31:35:45:
fb:9e:5a:e4:1c:1c:11:65:0d:61:b5:2d:1b:36:b9:0b:52:85:
8c:2e:76:66:bf:5a:7a:b9:63:42:bc:d8:28:96:dc:9e:25:a6:
7a:aa:56:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+EH/akN7U4QlnwxdicYIvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjVjYzQ4NDg5NDNiNGZlODlkMmNlNzFmZGMxZTRmZjdk
N2YzZTMwHhcNMjYwNjEyMjMwMDEyWhcNMjYwNjEzMjMwMDEyWjAzMTEwLwYDVQQD
EygzOGZkMGMzN2Y3OWZhZjQ3ZTBhMzI0YTRlYmYzMDgwMWFlMzMyYjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36Ol5Q/jsgYEluBzNMDyrRFcRFGo
RK1c/VoD0g/c/cVD+5qacHOhHNiVuxOFElm3aDO9PoUaspr3I3eDxftqAW7GgNQ6
1GR+sFPsUokKTtW2gj41C5u7FUsRsBL1akBvUsnc2Xg0+dwrtE/oqHcHDc4evorm
ycbGDBAL31G8RMFtuWUUJ9G27R52lt0FhtgK5+qXqTT9sHvaoqbVWxCbBGDRvSGl
SLwduH4osumYPx53CMpQ6PNc1mK6Zs9LZ8hW7d9+EzKoXWQhlN2X26JFG8yyCtZ6
HH5XYOWIFPQw/o6BsfB5N+8oo4yuPAk7sUbmtt7EOsWpvDSennD0GX2PcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj9DDf3n69H4KMkpOvzCAGuMytDMB8GA1UdIwQY
MBaAFN/1zEhIlDtP6J0s5x/cHk/31/PjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWIt
MjY4OWM4NTg3OGFkLzEvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWItMjY4OWM4NTg3OGFk
LzEvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtE6hZRd
jQ6HsmhhptYv130FH2NWO8xuHresVqF3W8n6w2RmuNS19x40H8EslLquiywLCWxs
Gb3leseusNBPONAyRsMVrtNODNr9J0Nu9KALxGW2lF/p4CdQmcSxfFocTHBNt2gk
awgxA+wqmrb8DtVH/aW+o7nXE5ZYz/F6+Lm6NEumGJVUDXLgnKq0xAGigulwpUY2
Q5oRa3hC8AmT88H61O+i+pOA1Gue/RPYaFmjiolPfQvS4faGkrfNO/E15NNCsiLB
M+8ivcHM6ck4SqY+An+WMTVF+55a5BwcEWUNYbUtGza5C1KFjC52Zr9aerljQrzY
KJbcniWmeqpWdA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:36:02 2026 by rpki-client