Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: DuhEWV+5dMT3rlvV7d30SsjKvVc9dXEouk5DVo2lEDw=
Subject key identifier: E5:00:4F:73:18:35:FC:6C:74:2F:B3:38:2B:D1:0D:38:8F:EE:85:51
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 019EC149187BBE725698F05B70894040D31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 130F
Signing time: Sat 13 Jun 2026 14:00:53 +0000
Manifest this update: Sat 13 Jun 2026 14:00:53 +0000
Manifest next update: Sun 14 Jun 2026 14:00:53 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: lzjTNJVFjkBtQoi/UuQK770juUdgyIgrFF4Y+T8HT1k=)
2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:18:7b:be:72:56:98:f0:5b:70:89:40:40:d3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Jun 13 14:00:53 2026 GMT
Not After : Jun 14 14:00:53 2026 GMT
Subject: CN=e5004f731835fc6c742fb3382bd10d388fee8551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:fa:7b:0a:31:7a:e4:d2:8c:03:f6:70:ce:
22:89:8f:c9:56:fe:7b:ee:c8:6b:45:e4:e4:a6:59:
86:91:54:91:31:59:f1:f3:ed:da:22:14:9c:da:c8:
77:d8:d0:fc:fe:67:3f:b6:fa:1f:e5:88:cf:34:53:
66:9f:9d:64:f3:f8:8e:40:13:2b:4e:fa:f4:b2:9e:
3f:cd:9d:08:16:31:9e:fd:1a:e9:c4:d1:c3:be:23:
b9:fb:fc:8c:57:00:4b:0a:f6:6d:33:c1:1e:e7:e5:
89:b9:8b:96:e5:75:99:cc:b8:ce:18:4d:e2:35:2b:
bc:ee:9d:dd:63:7c:69:07:d0:19:c0:ae:3c:34:d6:
f5:45:36:65:b7:95:c2:0d:d8:56:4c:9e:10:04:89:
88:86:89:b5:80:3d:0b:2c:23:81:2b:e4:11:96:9a:
f8:03:0f:8a:db:54:ce:a0:c3:99:3b:38:12:6a:05:
d0:de:95:4c:26:40:06:14:47:41:cc:d1:8e:7c:6b:
12:a5:bc:fb:1c:9a:02:8d:8d:53:36:f7:33:91:a8:
16:88:68:8c:7b:fd:58:cc:62:a8:f0:0f:08:47:11:
11:79:15:e1:9b:e4:66:cd:b1:a2:61:53:04:fb:98:
49:cb:fe:25:af:3e:44:a4:7c:96:cf:d5:dc:d4:05:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:00:4F:73:18:35:FC:6C:74:2F:B3:38:2B:D1:0D:38:8F:EE:85:51
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b8:62:98:15:76:78:e5:62:0f:fa:8e:f6:f1:bb:7c:c2:13:
08:60:7d:6f:31:34:ab:0c:65:76:2d:95:6d:e8:1f:f0:e2:d4:
ce:cb:c1:18:c3:f8:db:44:1c:2b:e0:55:58:21:af:3e:2b:5f:
91:2e:2d:58:ec:12:6f:f1:37:bf:f0:fb:45:66:f6:10:fe:10:
07:20:7d:d4:e1:56:f5:d5:83:e9:e4:6d:1c:d2:a8:c8:e4:9b:
db:06:bb:75:90:42:45:61:f8:a1:bf:4b:6c:68:db:d9:fb:93:
1e:da:b9:81:b3:2c:01:10:72:82:5b:08:34:aa:ef:3b:9b:14:
7e:f7:5f:7c:c5:98:87:b0:39:f1:34:53:c0:c9:65:22:d2:2b:
db:0a:a0:21:0e:31:ad:ea:56:e7:38:0f:c4:fc:91:b5:21:ec:
62:13:b4:ae:a0:23:da:c0:37:83:42:17:90:28:ce:63:78:37:
4c:a7:bf:1e:85:29:66:a5:d1:60:97:fe:ba:1d:95:b9:c1:3b:
4e:ed:43:c7:0e:fa:3f:0a:1b:b2:ea:88:9c:dc:54:3f:f4:fb:
1d:50:96:8f:0a:bf:2c:04:87:26:8c:54:2a:64:10:35:e2:c1:
3f:92:21:63:7b:16:e1:ad:fd:25:8c:4d:bc:9e:34:9a:68:51:
d9:a7:90:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:12:31 2026 by rpki-client