Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: ONu0TyZm57EumzzNcKPXPrdFajJBtD89UyKM+jqtsqI=
Subject key identifier: 75:DA:8D:DA:44:E8:7D:7D:39:3D:2D:9F:4B:FE:AB:3D:25:CE:0B:D6
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 019EBF5AB6A402F4E5990ED6D1235CA86C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 130E
Signing time: Sat 13 Jun 2026 05:00:53 +0000
Manifest this update: Sat 13 Jun 2026 05:00:53 +0000
Manifest next update: Sun 14 Jun 2026 05:00:53 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: FNp9MXI6B+uOrkb61ke4B9UYR/XuykH1VKkzKxG2s/8=)
2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:b6:a4:02:f4:e5:99:0e:d6:d1:23:5c:a8:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Jun 13 05:00:53 2026 GMT
Not After : Jun 14 05:00:53 2026 GMT
Subject: CN=75da8dda44e87d7d393d2d9f4bfeab3d25ce0bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:13:a8:f6:3e:a1:e2:5a:be:d6:b8:64:73:
dc:a2:f0:13:4b:14:5d:a5:50:7f:9a:f4:32:64:b6:
b7:7c:8c:e6:74:e6:2d:db:44:48:af:a3:ad:ae:1d:
be:05:c1:99:85:35:e2:d2:d3:f2:ac:ff:64:0d:5b:
86:3a:61:3b:aa:e4:43:25:b3:9c:7c:97:6b:1b:07:
e3:1e:f6:f3:26:b2:99:af:a8:4b:4f:a2:2d:77:3c:
1a:d6:dc:0c:d0:0c:3e:fc:ea:11:ff:6c:fa:a5:2f:
31:7a:b6:71:e3:e3:90:ce:f2:2f:a0:b9:68:ad:0d:
51:d7:e9:b7:d0:00:68:06:1c:4d:df:06:64:ef:d4:
e7:12:ba:d7:fd:0b:86:6c:ca:50:08:d9:29:62:15:
55:06:80:23:f3:a2:90:84:eb:cf:f5:f0:fe:2c:6a:
67:00:6b:de:17:d0:f4:11:8f:66:a7:09:3d:73:f5:
33:a2:8f:05:09:8a:33:6e:79:e2:62:9a:55:34:59:
8c:80:3a:ed:f2:66:f3:84:f7:4b:b7:a6:40:89:ba:
a5:51:f9:49:50:23:25:7b:f2:af:8b:89:d3:22:a9:
43:f1:ca:ae:a3:88:a7:af:8c:77:2c:00:99:26:fb:
67:fb:6c:22:be:be:f2:73:79:9f:5d:76:18:54:ea:
c8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:8D:DA:44:E8:7D:7D:39:3D:2D:9F:4B:FE:AB:3D:25:CE:0B:D6
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8a:91:13:29:fa:e7:b6:e2:b9:2c:76:f5:b7:7b:33:d0:29:
20:23:43:9b:01:bc:8f:a5:fa:e3:cb:a2:71:ee:f9:55:05:48:
c1:76:e8:bc:20:a8:98:55:1d:1a:25:3e:6d:80:87:69:1e:77:
33:4e:93:2c:f5:75:6e:4f:30:22:8d:9c:1f:72:c8:98:55:41:
fc:e8:3b:ee:da:ed:de:a6:f0:b6:06:e3:de:67:7a:5c:da:f6:
18:e6:75:3a:ad:fc:27:4c:fa:04:01:a8:c0:45:4a:d8:c3:81:
d9:42:89:9a:2e:2f:7d:88:7b:53:80:e4:43:87:37:5a:6d:48:
26:49:08:1c:42:9d:bf:8d:93:c1:4b:f1:8b:15:f5:37:3a:5f:
b4:27:20:67:85:97:dc:39:a1:9c:5a:21:05:19:0b:4b:26:44:
b4:b0:87:2e:87:77:01:4f:44:14:b0:ba:f2:91:ba:3d:50:cc:
52:06:e9:48:95:49:6b:0d:9b:e8:58:92:d4:a3:cd:92:85:cc:
9f:77:d6:39:64:42:6c:b1:3f:fa:38:60:16:8b:30:41:cc:6b:
20:16:d0:90:a4:37:35:48:d1:0d:64:9a:68:c2:7d:f6:2b:dd:
67:a6:10:36:0f:f8:93:5e:05:82:17:c6:0d:49:45:cb:0f:18:
58:8d:24:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:31:25 2026 by rpki-client