Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: D2BxgBN+pZOUgvDQd2blBJGlmjJa/Ovt0/d9eQ6pe8w=
Subject key identifier: BB:F8:16:4E:27:1D:85:F1:5C:FF:2B:76:1A:32:BD:C8:E3:72:FA:81
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019EBF233D816193152DDE5191C79EE9E684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 1962
Signing time: Sat 13 Jun 2026 04:00:18 +0000
Manifest this update: Sat 13 Jun 2026 04:00:18 +0000
Manifest next update: Sun 14 Jun 2026 04:00:18 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: zgYATxL7Z1ksPyjzAn95u+ou4hbv4i5HDOqrO3TVs0c=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:3d:81:61:93:15:2d:de:51:91:c7:9e:e9:e6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Jun 13 04:00:18 2026 GMT
Not After : Jun 14 04:00:18 2026 GMT
Subject: CN=bbf8164e271d85f15cff2b761a32bdc8e372fa81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:7d:63:ee:91:65:b2:48:fb:dd:07:17:4a:
3b:8b:97:a4:c6:c7:4c:95:90:70:7c:df:59:3b:b3:
18:a3:4a:9a:f7:c9:64:ab:2d:cc:0e:eb:f2:63:47:
b4:25:05:f6:86:50:ac:a0:03:e6:e1:f7:50:71:9c:
6c:3a:37:84:f6:4f:ee:ef:ce:75:79:c2:9a:f4:53:
3d:09:43:05:f1:99:9c:58:09:72:c2:15:59:79:3e:
45:2c:38:33:3a:11:1c:ab:ab:b6:e1:c6:cd:f0:bf:
e5:03:39:86:a2:eb:bb:08:ac:76:ae:bd:f1:06:2a:
47:5b:da:bd:98:2a:cf:c8:25:c6:a2:1b:25:ca:d6:
04:75:58:d7:06:94:3b:3e:6a:4d:2c:d5:d3:99:f4:
8a:9e:68:27:a9:ed:cf:74:9f:12:0d:ab:2d:16:fd:
e7:f5:cf:ac:59:0b:67:c8:d3:23:34:4b:fe:40:0f:
95:4e:4d:fa:fa:90:7e:1d:42:47:ff:52:e9:5e:38:
73:7f:77:04:88:85:38:b6:a7:fc:31:49:81:8c:01:
a4:84:f5:14:56:d1:bc:0c:36:f4:97:12:83:6f:68:
e1:ea:fd:a4:82:dc:80:fa:22:c7:25:7a:cb:c9:67:
76:d9:44:c0:3b:23:03:d4:9e:6f:7a:da:64:23:d4:
3f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F8:16:4E:27:1D:85:F1:5C:FF:2B:76:1A:32:BD:C8:E3:72:FA:81
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:46:f2:ec:18:bb:6f:d3:88:ad:03:fa:bb:d8:47:55:39:3e:
1c:37:b4:50:70:63:99:1d:1b:44:53:8e:8e:16:2b:bd:07:82:
3d:3f:b5:3b:5a:72:3d:10:03:9c:a7:30:10:b6:c3:25:06:23:
e6:06:81:78:f8:bb:64:16:3f:5e:c6:0a:4b:33:02:51:89:b7:
47:e5:63:33:8f:21:2e:eb:b8:5c:6c:aa:3c:c5:b5:95:a6:26:
3c:4f:c3:ae:cc:9c:8b:8b:27:9e:6a:98:f5:6c:c7:88:02:45:
75:d8:d7:2e:48:73:0c:65:44:33:3d:05:46:17:e3:28:eb:c9:
79:c3:51:9a:a4:09:72:6d:66:95:80:59:73:ee:3d:e2:48:b9:
fb:1f:f8:bc:90:e2:f3:7d:1a:8d:12:63:8d:e4:83:bb:2b:c2:
df:eb:0d:3a:bf:4d:36:f2:eb:e1:eb:b7:9d:84:66:f9:1f:b6:
35:8d:b2:1a:18:dd:d1:1e:9c:0c:17:ec:17:08:02:64:70:dd:
b8:cc:51:be:59:6b:ae:64:40:38:8b:b0:c3:d9:38:14:ed:9b:
ba:15:0a:dd:e7:60:74:f4:5d:0d:5c:13:57:c6:00:67:64:d4:
eb:19:5c:a5:b8:f7:2a:96:af:e5:de:0a:ef:12:9a:61:29:b5:
ce:18:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:31:58 2026 by rpki-client