Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
File: 3j4BZ79YLOzkjWxtApqCzeJyqdU.mft (raw, json)
Hash identifier: KvEzrPFZSMKiYxo9A+8f6CGhooi4jmP9Dj3muV7fnKc=
Subject key identifier: 07:AB:EE:D3:B3:0C:B5:B0:6D:D7:2C:C7:03:5A:16:E3:35:A6:48:4B
Authority key identifier: DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5
Certificate issuer: /CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
Certificate serial: 019EBF911894A75798309D1DD09F5BED4192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
Manifest number: 18ED
Signing time: Sat 13 Jun 2026 06:00:17 +0000
Manifest this update: Sat 13 Jun 2026 06:00:17 +0000
Manifest next update: Sun 14 Jun 2026 06:00:17 +0000
Files and hashes: 1: 3j4BZ79YLOzkjWxtApqCzeJyqdU.crl (hash: bE+rRPJ0+bskx6KUHrkrFOWfRLr4RVOmHK+pNP67zbM=)
2: RP5c5AhjbUkmDfubYWaFncEBFeU.roa (hash: tROgfSyZEJSTutfORsxHOvucHqOl4aWfT4NXFn6Duak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:18:94:a7:57:98:30:9d:1d:d0:9f:5b:ed:41:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
Validity
Not Before: Jun 13 06:00:17 2026 GMT
Not After : Jun 14 06:00:17 2026 GMT
Subject: CN=07abeed3b30cb5b06dd72cc7035a16e335a6484b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:af:6c:13:57:37:e5:a4:df:8b:9c:50:80:
5f:68:fa:73:99:38:eb:12:99:a2:9f:3b:bf:b1:e9:
df:f2:b5:4f:77:17:42:71:98:37:47:c9:36:4a:4f:
99:32:c9:a3:d8:14:05:6b:ed:e7:9f:8a:fe:e5:51:
5c:c3:25:ec:4c:73:16:ce:25:b7:3b:8b:66:e8:3c:
71:36:6a:0b:c8:67:a8:d4:6e:18:e8:97:84:c1:a5:
e5:46:be:ad:65:8d:a1:c0:4f:87:d3:ef:82:2c:6d:
9a:fa:e3:85:44:3d:4a:91:58:ac:06:84:02:d1:db:
3d:a0:74:87:f1:c6:98:67:e6:c9:b6:ba:2c:46:a5:
6d:da:f1:37:1b:db:e3:b8:ca:4f:98:5b:d1:b0:91:
a1:2a:47:5d:cd:b7:b2:af:19:40:d1:83:78:e8:a6:
e1:1b:e9:32:1d:70:36:28:c6:3a:4e:1b:0e:fc:58:
54:47:bc:39:fb:e0:aa:12:48:e0:5e:2f:e7:ee:7e:
f5:92:35:ed:97:e1:36:00:c3:42:1f:a5:6b:bd:95:
b7:a2:e1:6d:ee:7a:ff:a7:43:86:f9:83:f4:fe:dc:
86:8d:6f:25:dd:83:34:88:8b:28:c7:a7:28:99:7a:
18:f1:d5:e8:76:2c:6c:fc:2e:6d:8b:2c:7b:36:85:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AB:EE:D3:B3:0C:B5:B0:6D:D7:2C:C7:03:5A:16:E3:35:A6:48:4B
X509v3 Authority Key Identifier:
keyid:DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7f:5a:93:d6:95:7d:5c:45:79:0e:3e:32:e2:c1:f3:ee:74:
57:9b:2c:19:ef:14:95:f5:24:6b:39:e0:f3:8b:19:5a:21:c7:
b3:c1:ef:04:92:a2:3d:7d:0b:46:6a:74:c1:68:38:fb:1c:24:
5e:7b:22:9e:c4:ea:d7:9a:0b:f1:db:54:10:71:0d:76:db:58:
73:fc:ba:86:80:48:fb:dd:5e:ae:9f:d8:b5:e4:e8:e1:07:d9:
6e:a9:1c:f2:3f:d4:66:9a:0a:d0:64:ed:a4:3d:55:86:d6:72:
f2:35:a5:28:83:ef:f3:9c:5f:c8:3f:86:3b:4e:c9:fe:62:ca:
9c:4c:22:70:47:ac:f7:4c:15:c4:b0:30:1f:0f:a9:a5:a9:05:
b7:f2:a0:2b:b2:65:90:20:a2:50:b8:43:1e:cd:3a:b3:ca:2a:
e2:7f:2f:3b:76:b4:d2:8b:c3:cc:dd:90:9d:e6:c7:50:74:11:
37:6f:4c:87:82:9f:a3:a0:26:65:ab:cc:0e:8c:80:0d:b0:c6:
8c:e4:cd:c1:ec:cd:77:be:37:6d:b3:89:fa:8d:4e:70:4c:00:
03:d2:ed:b6:bf:cd:32:12:23:13:3c:59:64:1d:a6:4b:a4:0d:
3a:6e:49:7e:d0:da:85:bf:0a:03:ef:db:46:fa:fd:4e:b8:a8:
18:0d:f9:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kRiUp1eYMJ0d0J9b7UGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlM2UwMTY3YmY1ODJjZWNlNDhkNmM2ZDAyOWE4MmNkZTI3
MmE5ZDUwHhcNMjYwNjEzMDYwMDE3WhcNMjYwNjE0MDYwMDE3WjAzMTEwLwYDVQQD
EygwN2FiZWVkM2IzMGNiNWIwNmRkNzJjYzcwMzVhMTZlMzM1YTY0ODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOavbBNXN+Wk34ucUIBfaPpzmTjr
Epminzu/senf8rVPdxdCcZg3R8k2Sk+ZMsmj2BQFa+3nn4r+5VFcwyXsTHMWziW3
O4tm6DxxNmoLyGeo1G4Y6JeEwaXlRr6tZY2hwE+H0++CLG2a+uOFRD1KkVisBoQC
0ds9oHSH8caYZ+bJtrosRqVt2vE3G9vjuMpPmFvRsJGhKkddzbeyrxlA0YN46Kbh
G+kyHXA2KMY6ThsO/FhUR7w5++CqEkjgXi/n7n71kjXtl+E2AMNCH6VrvZW3ouFt
7nr/p0OG+YP0/tyGjW8l3YM0iIsox6comXoY8dXodixs/C5tiyx7NoWx/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAer7tOzDLWwbdcsxwNaFuM1pkhLMB8GA1UdIwQY
MBaAFN4+AWe/WCzs5I1sbQKags3icqnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9hNzE1Y2UtNDEwZC00MzkwLThlOGMt
OGIyMzc5ZWJhMTNlLzEvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9hNzE1Y2UtNDEwZC00MzkwLThlOGMtOGIyMzc5ZWJhMTNl
LzEvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwn9ak9aV
fVxFeQ4+MuLB8+50V5ssGe8UlfUkazng84sZWiHHs8HvBJKiPX0LRmp0wWg4+xwk
XnsinsTq15oL8dtUEHENdttYc/y6hoBI+91erp/YteTo4QfZbqkc8j/UZpoK0GTt
pD1VhtZy8jWlKIPv85xfyD+GO07J/mLKnEwicEes90wVxLAwHw+ppakFt/KgK7Jl
kCCiULhDHs06s8oq4n8vO3a00ovDzN2QnebHUHQRN29Mh4Kfo6AmZavMDoyADbDG
jOTNwezNd743bbOJ+o1OcEwAA9Lttr/NMhIjEzxZZB2mS6QNOm5JftDahb8KA+/b
Rvr9TrioGA35Vg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:03:38 2026 by rpki-client