Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: MpWqk3IAGTg8impx4wfL97GaWckQHwZ+0SEL7czjqO4=
Subject key identifier: C8:EB:C2:EB:67:4C:6A:3F:53:5B:20:1A:5E:44:84:E5:26:57:8D:93
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 019EBE109CD4360E62F6C2A20C293230B3E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 09D1
Signing time: Fri 12 Jun 2026 23:00:20 +0000
Manifest this update: Fri 12 Jun 2026 23:00:20 +0000
Manifest next update: Sat 13 Jun 2026 23:00:20 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: I44yJoojtHACn2sORgT8WmRRWFquMEXMexm/p1VtaQM=)
2: fI5jVmmy88-mIgPso0R_tYbnmK8.roa (hash: DZgFgnCe+GlazLWeguoKXJElQSdORsAcJbygFhHnVCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:9c:d4:36:0e:62:f6:c2:a2:0c:29:32:30:b3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Jun 12 23:00:20 2026 GMT
Not After : Jun 13 23:00:20 2026 GMT
Subject: CN=c8ebc2eb674c6a3f535b201a5e4484e526578d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:ca:d1:a1:19:1f:29:fc:11:a9:86:7d:3c:
b7:27:cd:2d:5d:dc:4f:97:7b:ea:04:91:ab:67:0a:
4b:9e:7d:9c:c2:c0:07:80:b8:01:5e:f8:c7:9f:09:
88:32:b5:d4:24:49:6d:c8:db:0d:96:4d:4d:1b:bf:
b0:10:a0:70:7d:56:78:c6:60:05:84:9a:ce:a0:74:
f8:f7:13:67:62:a8:dc:83:2e:18:93:c1:04:81:70:
fc:34:46:4f:42:6e:79:ed:19:63:36:db:02:65:b9:
a5:62:da:65:fb:d0:76:1b:b0:2f:09:ea:16:af:98:
9e:ac:78:85:2c:20:70:2b:fa:84:b3:5a:0a:d1:0d:
51:7b:ec:26:22:db:00:b0:d5:a1:ed:6d:0f:76:90:
06:0d:05:8a:d0:2d:6b:7b:03:ae:e6:04:4f:2d:28:
22:8d:d5:21:af:4c:4c:95:a0:b0:6e:37:e0:ef:19:
9b:38:52:aa:55:8d:42:0d:95:7f:d8:82:ec:4b:9f:
b8:19:6d:e0:f1:1b:5e:79:4a:fb:4b:68:c6:ec:92:
f2:7b:95:6b:5f:3e:a7:2c:17:d9:46:f0:ec:d6:b6:
a7:a3:3b:79:65:c7:35:d6:12:c9:f9:44:68:92:96:
f1:22:9e:10:09:c6:f6:c3:d2:09:f3:25:58:ed:52:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EB:C2:EB:67:4C:6A:3F:53:5B:20:1A:5E:44:84:E5:26:57:8D:93
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4d:82:b7:db:ef:66:ea:f1:a8:b7:9b:17:30:59:f7:fc:eb:
c3:dd:61:56:18:9d:5f:82:6c:52:71:f0:ae:14:51:51:5a:61:
80:2a:f6:ef:d7:4a:e2:f9:12:14:aa:aa:3c:cd:bd:21:a5:1b:
0c:c4:11:64:fe:6b:a2:e1:33:f6:18:a3:e8:26:72:4e:bc:00:
16:2a:09:c2:9f:d3:0a:e5:c9:de:b6:be:ed:df:51:ef:e4:46:
2f:c8:94:b3:3e:f1:fb:06:25:e7:82:66:8d:09:51:29:30:31:
3a:46:80:38:21:8b:4e:06:12:52:cb:dd:15:60:eb:12:c3:62:
d8:7f:93:26:1d:6d:84:60:4b:26:d8:4d:47:7f:46:b8:c6:fa:
d4:6c:7c:d9:e1:89:99:af:41:f6:2c:3b:2e:40:ca:ff:62:cf:
6c:b4:08:01:de:96:6e:75:06:d8:44:7f:da:4a:00:29:4b:8b:
e8:db:d0:42:24:9b:b3:7a:18:2a:ea:49:b3:02:bf:70:76:76:
25:d9:8f:b0:de:6a:51:e0:89:61:c1:e8:2c:bc:72:16:b1:c8:
36:3f:11:7c:fd:0d:89:d6:ac:6a:72:9f:11:28:d3:fd:bb:cc:
a0:28:c7:e8:b7:72:16:f6:18:e7:47:eb:41:75:6f:af:9a:c2:
16:f7:4a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:57:05 2026 by rpki-client