Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: PAowp04wi4+NTaMzXX8u3bdKo/jujHszUucO7lZBr2Q=
Subject key identifier: 39:85:CF:34:AF:4A:FB:DA:3A:BA:6F:DF:CE:2C:50:AE:C1:9F:3E:24
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 019EBFFEFC919EE84F59CC83C8986EFAAF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 08:00:19 +0000
Manifest this update: Sat 13 Jun 2026 08:00:19 +0000
Manifest next update: Sun 14 Jun 2026 08:00:19 +0000
Files and hashes: 1: 1YkIJofGDPbAKhB5ldovfVVJQaQ.roa (hash: ft15usCMKxpuecv7eKItu1OCSt1aYNUn7zhbarfUJ4o=)
2: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: T/b9kUJTs3vccLcUfPm030/eK7/poHsQ994Lu+FrxdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fe:fc:91:9e:e8:4f:59:cc:83:c8:98:6e:fa:af:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Jun 13 08:00:19 2026 GMT
Not After : Jun 14 08:00:19 2026 GMT
Subject: CN=3985cf34af4afbda3aba6fdfce2c50aec19f3e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:a4:26:c9:68:09:1e:ba:5f:6f:ad:30:0c:
fa:41:06:27:27:28:4e:71:71:f1:07:5d:70:1d:7a:
bb:fb:ff:58:c5:04:99:38:c4:1a:27:0d:29:b0:43:
0e:dc:72:a4:41:6a:b9:77:85:6a:d1:cf:31:b7:86:
b4:df:fe:81:8e:31:3f:9f:d2:0a:62:69:79:91:38:
cc:fb:01:05:6c:bc:64:68:78:43:95:32:1c:67:21:
b2:5a:96:e9:f6:3d:27:57:08:e7:75:fe:bc:1a:e6:
a3:76:f5:8b:a8:15:dd:56:fd:82:ee:73:29:87:09:
2a:63:e6:8a:47:c2:83:83:b3:aa:13:f4:e5:51:03:
2a:a7:54:a4:4c:9f:47:ff:b2:18:a7:8f:4d:4b:02:
b2:ef:69:8d:fc:a6:00:d3:ef:4d:f3:35:fa:73:9f:
41:8a:93:81:ae:db:9e:0d:5e:d1:49:ce:8e:ab:8b:
b6:ce:d0:a0:26:8f:85:ea:8d:60:e3:6e:c6:dc:58:
99:4c:c2:d6:e8:a8:59:ac:1c:f7:b9:fb:d7:db:14:
d7:c2:90:67:9e:dc:bd:e6:93:ed:70:9a:97:ab:1f:
4f:af:38:a1:c6:3e:11:e5:81:32:30:d2:17:7a:ce:
50:61:37:35:3c:73:3c:d0:89:4d:7c:75:11:75:de:
b9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:85:CF:34:AF:4A:FB:DA:3A:BA:6F:DF:CE:2C:50:AE:C1:9F:3E:24
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:28:67:88:f6:85:9f:51:76:ea:0c:ae:df:0a:da:a7:25:e1:
28:cd:25:37:a6:88:31:ae:dc:1c:7b:f7:82:a6:94:5b:95:9a:
10:ed:98:73:f3:66:3f:41:d2:ed:6a:c7:0a:9a:93:56:a4:80:
57:9e:f1:72:33:4d:b9:36:70:2c:6f:96:b3:a9:6c:1b:bf:ba:
ba:3e:c1:21:ad:e7:14:1d:3a:ad:e1:d2:6e:c9:99:b7:57:15:
b1:d3:ca:54:63:60:f0:d7:10:18:d4:61:70:0d:d0:f4:f3:ca:
cd:8b:54:c9:23:c8:59:98:66:0f:2f:c8:af:32:a3:01:b3:be:
ad:2c:7d:02:e3:fe:b0:64:09:3f:cc:13:1d:ac:dd:23:22:64:
39:5d:99:45:c7:56:ef:2f:85:2b:34:e5:1d:cd:84:93:ed:39:
4b:5e:02:30:d0:cf:c3:53:41:a6:e3:f0:7f:4c:f7:36:7e:e7:
d3:63:f7:a7:fa:3b:00:de:4a:79:6a:43:83:d1:53:00:9f:f9:
2f:7b:04:37:40:c8:43:a8:fd:a6:c7:83:bc:2d:8a:85:1c:2f:
3d:92:9a:7f:4d:25:c6:b1:02:8e:33:23:9c:b3:36:83:5c:15:
d7:85:51:fb:a9:89:79:1b:72:0b:8a:5e:fe:fe:10:e3:52:a6:
4f:04:3e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:51:13 2026 by rpki-client