Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: TB8FWfWDf4Edf3CxU1wN6EUeMdoDQ/jcFnmDCUtFS4o=
Subject key identifier: CC:CF:D3:3A:91:7A:97:4F:9F:0A:BB:D9:72:02:4C:D3:6C:CF:8D:12
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 019EBFFF33CB72D7F36A7EC26A0E128A47A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 08:00:33 +0000
Manifest this update: Sat 13 Jun 2026 08:00:33 +0000
Manifest next update: Sun 14 Jun 2026 08:00:33 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: zNu2k5cO8cwkrjJaKwxDjBy6Mcal15MOcgy5A8QtxIs=)
2: 3zlYESujx6iqyh6hQsCczNEcHfA.roa (hash: giiowx0wopsav1ocUyq7di4cnnYmyvwdPI251v0t4Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:33:cb:72:d7:f3:6a:7e:c2:6a:0e:12:8a:47:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Jun 13 08:00:33 2026 GMT
Not After : Jun 14 08:00:33 2026 GMT
Subject: CN=cccfd33a917a974f9f0abbd972024cd36ccf8d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:0d:b9:48:f9:3c:34:91:32:fc:d0:2b:67:
fc:5d:aa:c4:3d:39:68:5e:e7:58:e2:13:55:86:f4:
50:b6:e7:21:70:1b:9b:05:99:a4:3e:15:f0:77:c9:
b2:7b:9b:ce:ba:07:af:4e:bf:35:35:f7:4b:7e:42:
4c:ff:af:d2:fc:bc:5e:d2:22:4b:09:ba:ad:45:f6:
bd:b2:29:f5:8a:ab:7d:0c:5d:42:78:f3:7b:9e:72:
46:71:4d:81:f8:24:e3:75:b6:1c:29:50:df:1c:b5:
73:a2:62:ad:2c:4d:31:71:5d:b3:7d:68:23:6f:31:
49:be:92:44:ba:67:f8:5e:2f:6f:3e:60:02:25:95:
e3:0c:35:5b:c0:d9:b9:87:fb:f0:81:f8:b7:b3:c6:
ff:9a:72:6f:cb:3c:7c:d6:5e:7e:c8:39:c7:0c:69:
8b:09:ab:01:2e:cf:07:82:49:97:95:09:f6:3d:f6:
73:4d:17:1a:87:6e:5c:e2:92:6e:52:20:da:d3:7c:
fe:fb:fb:fd:65:fc:47:50:60:4a:05:4e:f2:e7:b5:
76:41:f8:2b:a7:0c:21:2b:ea:48:01:ce:c6:1a:9c:
e8:e4:59:ce:bf:bc:a8:b8:10:48:de:b2:b8:8a:03:
a7:34:57:0f:17:3e:b7:ee:19:7c:a6:6a:65:b8:95:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CF:D3:3A:91:7A:97:4F:9F:0A:BB:D9:72:02:4C:D3:6C:CF:8D:12
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fd:b9:f6:1a:f9:12:66:9a:80:45:8d:30:fd:14:3c:65:f0:
ca:a0:4e:b0:a4:e6:71:ab:95:3d:9a:7f:d8:75:3f:b5:0d:b6:
5c:c2:af:71:68:82:fb:e7:0b:c9:42:01:7d:55:01:26:86:cc:
ba:9f:7d:80:c0:b2:96:bd:47:c6:74:86:58:a9:f4:51:ea:4b:
a8:ee:0b:59:72:1c:c0:90:40:d6:dd:60:17:6c:0c:c6:1d:8d:
2f:0b:b3:67:3d:c1:87:e2:5a:e4:3d:f5:53:41:54:77:58:27:
68:85:5e:bb:70:b2:ef:19:46:26:3d:47:eb:63:6f:c5:be:76:
fc:e7:e4:db:29:45:e9:2c:0c:e5:88:e8:79:29:77:82:2f:f0:
65:57:c0:7c:0b:52:51:b0:6a:da:5d:20:c1:a8:00:05:3a:c6:
2f:0f:d6:b3:37:3c:2a:e9:77:85:e0:8a:89:e3:e4:2f:2d:54:
06:da:4b:79:1b:28:45:bd:0e:19:d8:4f:7c:5f:be:4f:c9:88:
7b:8f:25:2c:db:14:46:62:38:bc:63:b9:0d:31:e5:67:99:ad:
45:b3:d9:1c:0e:08:83:ff:41:ce:b9:f5:94:2b:d6:01:3e:d9:
be:97:34:69:67:bf:c7:ff:82:70:fe:ae:84:bf:6e:c3:35:a4:
bf:66:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:13:17 2026 by rpki-client