Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
File: 3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft (raw, json)
Hash identifier: UiTVbRb2wotbFySV665MSkGUbFESxYP+naZgiQ1j0yQ=
Subject key identifier: 8D:07:F2:A0:84:8A:DD:4A:91:31:68:60:45:CB:18:E6:62:5D:4C:10
Authority key identifier: DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9
Certificate issuer: /CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
Certificate serial: 019ED386CDD777FDBFF7F93DD87ED947E538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
Manifest number: 86
Signing time: Wed 17 Jun 2026 03:01:27 +0000
Manifest this update: Wed 17 Jun 2026 03:01:27 +0000
Manifest next update: Thu 18 Jun 2026 03:01:27 +0000
Files and hashes: 1: 3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl (hash: to3cvJByTg7eX7JcWMRVqjaxptBTIank7y2FjCO0h2g=)
2: kwUfzWwrFQVASQO2F6UsVOxQr_k.roa (hash: B400R5yaG15mVyOg0wtFtZ9v1gBpdtwEZj5wGIDnL98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:86:cd:d7:77:fd:bf:f7:f9:3d:d8:7e:d9:47:e5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
Validity
Not Before: Jun 17 03:01:27 2026 GMT
Not After : Jun 18 03:01:27 2026 GMT
Subject: CN=8d07f2a0848add4a9131686045cb18e6625d4c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:94:56:6e:ef:3a:7a:3f:f3:d9:e8:c1:9c:
86:20:6e:ec:bf:48:68:28:97:ae:56:5c:a2:a7:20:
b3:38:4e:c6:bf:4c:f6:76:5c:d0:76:d8:62:52:54:
70:37:51:6c:f2:8e:43:36:a3:f5:66:05:31:63:a3:
ee:6e:b1:5c:cd:44:e0:58:ce:dd:7a:61:88:4e:6d:
6b:dd:63:7c:ff:11:32:1c:9f:e7:f7:7e:b1:be:7f:
49:2a:19:94:05:dc:94:fa:4e:b7:8a:2c:df:4d:c3:
59:94:a6:c6:ac:e7:63:05:f4:55:a9:f6:eb:ed:89:
87:f7:aa:c5:7f:3a:e8:50:86:13:f3:be:7f:e4:b2:
20:e9:88:09:74:b0:b0:c9:17:bd:d2:d7:6f:63:e3:
b2:14:ec:b7:08:48:22:41:7f:8d:72:fe:42:3a:03:
6d:96:f9:d1:fd:12:e6:8c:34:22:83:79:bd:d0:26:
1e:d1:bf:3c:60:1f:d0:2a:9e:0f:3c:a0:b7:06:af:
81:f8:ee:6a:8e:27:db:3e:bf:af:42:48:05:19:fd:
6c:f6:ee:6a:40:de:13:f0:17:2e:ee:70:39:cd:88:
9c:53:b1:4b:59:1b:8e:54:d5:dc:b7:9e:7b:ea:56:
4c:24:d2:fd:40:d9:dd:86:c3:68:cd:38:9f:39:12:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:07:F2:A0:84:8A:DD:4A:91:31:68:60:45:CB:18:E6:62:5D:4C:10
X509v3 Authority Key Identifier:
keyid:DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:58:11:bf:ee:9b:86:db:19:28:c6:7d:a7:fe:96:4f:fc:a2:
c1:c0:ea:a3:64:ca:ba:78:d9:b2:32:4c:67:a3:d8:30:6c:97:
c0:45:08:3c:f8:6d:fc:fc:a3:cb:0d:3d:95:80:72:8b:68:d9:
d6:7c:e7:91:08:58:71:48:4f:7c:2c:03:6c:11:f6:24:4e:55:
1d:62:4f:78:ac:6f:e5:28:54:84:c4:72:65:57:7b:0e:5b:90:
96:16:ea:29:67:f7:64:97:88:58:53:c1:ae:c5:fe:e8:86:84:
5b:29:73:d8:a3:f3:6d:03:c5:cd:d7:c1:9e:e7:1b:08:bb:11:
98:69:9d:b1:62:c2:19:f9:4e:3a:71:7b:b4:bb:df:13:fc:18:
8c:15:bd:96:01:1e:18:ae:8c:e0:04:d3:ab:0a:47:de:e9:18:
10:ed:19:84:b3:26:d5:cf:ec:11:99:17:7e:b0:ef:55:41:c5:
af:a6:ad:69:53:e9:1b:6f:d7:d4:fa:fb:54:4e:6a:1e:c0:29:
1f:92:97:35:0b:ce:90:cd:75:db:1c:d1:30:29:45:d2:b7:4e:
ca:b4:b0:3f:d2:4e:9f:6a:8f:ac:8c:ad:76:af:22:d1:4e:51:
10:d7:2f:da:5b:50:b6:5e:f7:f1:ea:3f:ae:d9:d7:0c:11:b6:
5f:1a:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:28:56 2026 by rpki-client