Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: rqdW4SP9reU1OJu0hLZAwqlQf3uwfbuItSnUhftTMWE=
Subject key identifier: DE:77:F4:01:B5:EF:7E:65:DE:3E:AC:29:26:4A:69:7A:48:91:58:40
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 019EC14982867FB741B10D1C41FC00A0AE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 1462
Signing time: Sat 13 Jun 2026 14:01:20 +0000
Manifest this update: Sat 13 Jun 2026 14:01:20 +0000
Manifest next update: Sun 14 Jun 2026 14:01:20 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: S6FX/EXIsk+k0rztNoLHYX/VoPb9T8qqtfYHa5dxdL8=)
2: H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa (hash: a6IB6fLHDx6lViiB0ReUyYalYXgmOEaBsh6fJ2aLk04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:82:86:7f:b7:41:b1:0d:1c:41:fc:00:a0:ae:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Jun 13 14:01:20 2026 GMT
Not After : Jun 14 14:01:20 2026 GMT
Subject: CN=de77f401b5ef7e65de3eac29264a697a48915840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:10:d5:53:3d:cc:e3:ee:43:ad:28:05:94:
37:a2:db:9b:cf:ba:7e:c5:98:58:27:f6:59:93:5f:
a3:c4:a8:e6:30:00:5e:5f:af:f5:77:57:4a:c1:f8:
f7:0d:96:de:08:57:80:c4:6f:5a:5b:83:1e:5d:c4:
85:91:a7:c5:df:e8:3f:85:3f:ab:6e:1a:45:c0:64:
3f:c9:ea:58:5f:36:2e:ae:b3:71:93:09:2d:8a:5c:
f2:17:7e:4b:b1:b6:0e:e0:16:81:ec:73:c9:c4:2d:
01:d7:31:56:9f:14:cd:19:25:67:de:9d:ac:57:32:
ff:6e:12:20:8c:13:83:b0:94:04:d5:b7:b4:f8:66:
ae:04:12:64:08:5f:cc:16:12:14:8c:4d:45:22:99:
2e:66:8a:48:14:6e:60:25:43:c0:0d:64:c2:15:a1:
32:d6:f0:31:23:79:99:8c:f3:7f:cf:61:f1:9c:da:
30:ed:c7:ba:9d:b5:04:ea:51:2d:85:3f:dc:3d:a7:
18:a9:ef:76:e5:54:e0:a6:1d:f6:17:7b:85:c6:6f:
5c:22:2f:64:2e:1a:87:9e:15:51:8b:fe:64:06:83:
31:12:42:69:4a:0d:b4:93:41:06:81:d2:1b:54:63:
c7:f9:ee:c2:6c:61:69:f9:a8:87:bb:de:13:45:68:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:77:F4:01:B5:EF:7E:65:DE:3E:AC:29:26:4A:69:7A:48:91:58:40
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f6:bd:af:4c:18:c5:33:5c:62:a1:f6:2b:05:68:16:02:b1:
ac:58:d3:c3:62:e9:59:39:b5:c0:03:eb:9b:8b:63:e9:ea:c9:
26:e3:40:0c:8f:b8:29:3d:40:9d:6b:86:e5:b4:e3:83:22:3b:
c8:ef:00:b8:64:a3:c3:5e:3d:2f:ae:e3:22:64:70:6a:9e:94:
d9:4b:f8:89:0c:aa:c9:6f:4c:d2:b0:cf:dc:fc:25:1d:82:cd:
37:8e:ca:a9:4d:49:3e:9e:fd:fb:a9:34:1a:bc:1f:e1:ef:0d:
ef:1d:1e:ef:55:6a:90:a9:c0:85:1c:ca:00:57:8b:1b:75:72:
89:08:59:b8:55:b6:7d:3c:b9:3a:98:c9:21:d3:2c:f4:4d:c1:
36:9a:a5:86:0b:bb:09:03:35:8f:ec:65:19:92:0a:37:11:45:
ef:ef:c4:c7:56:8e:ab:7d:75:e0:ab:e8:cf:35:a8:9b:6c:98:
86:68:a8:23:7f:b9:31:08:57:af:06:91:c7:0c:6f:16:bd:43:
e5:51:50:0e:ce:4f:0f:9d:93:4e:d8:c0:5c:b1:9e:44:5d:66:
55:59:38:de:db:7b:de:03:f5:4b:40:07:31:34:a4:d0:3b:bf:
a2:ff:15:d9:b8:9f:db:f1:a0:ae:b5:78:88:c5:b5:13:ab:41:
3b:87:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:12:52 2026 by rpki-client