Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: NoONGk9n9xrED//B4Cw0UrauItBRXcCLBKu/opHtLzU=
Subject key identifier: E0:07:E1:90:CF:E6:8A:AA:C3:67:0E:BE:A7:DD:50:05:2D:01:C8:44
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 019EBF5A7A46C70F7B756279DDAB4A234455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 0872
Signing time: Sat 13 Jun 2026 05:00:38 +0000
Manifest this update: Sat 13 Jun 2026 05:00:38 +0000
Manifest next update: Sun 14 Jun 2026 05:00:38 +0000
Files and hashes: 1: 2U3Vq1QnP8ctuHADYZl7AYfrN8Q.roa (hash: aSqIWAFTh+DEyVISsUqiiF4heoz8JVrFxkyTiK/xNAk=)
2: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: nQK2oGQXp63QSnB1UmXvABI6gRRLwUoLZeD8S95ld4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:7a:46:c7:0f:7b:75:62:79:dd:ab:4a:23:44:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Jun 13 05:00:38 2026 GMT
Not After : Jun 14 05:00:38 2026 GMT
Subject: CN=e007e190cfe68aaac3670ebea7dd50052d01c844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:b2:23:d9:e3:32:f8:32:02:fd:20:28:1a:
b4:75:bc:9e:4e:3d:e6:9f:d3:2f:38:09:7a:fc:c1:
60:88:9c:04:16:6b:9a:22:02:e9:3b:9c:aa:bb:31:
cd:35:36:98:e6:06:7e:c1:d4:4a:87:28:69:4e:4f:
74:5c:ed:c5:34:21:da:c1:a0:5d:4e:60:ad:98:b1:
1e:18:89:e8:77:92:2b:77:c9:52:9d:ef:0c:02:61:
5c:05:01:8c:12:eb:4b:0a:df:d2:5d:eb:a6:b8:d3:
fd:6d:ef:98:da:2c:5d:e0:94:e6:b6:e2:1d:a2:2d:
57:9f:06:bb:0b:1d:c4:bf:a2:25:9b:d0:9e:73:89:
65:3f:5c:1e:fc:43:cf:4c:44:38:b6:8f:70:d4:a2:
ed:f4:0c:c1:89:19:49:87:28:f2:f8:64:73:53:ef:
aa:e1:48:3b:15:85:d0:f5:8e:46:ba:df:d2:c0:61:
5b:cc:67:6c:70:4a:f4:01:ed:7e:3b:61:4d:ff:7a:
f6:32:9f:98:8a:5d:7b:b4:71:c0:9c:3a:31:b0:6d:
5b:5a:36:14:da:30:c9:c4:20:68:53:20:0b:7b:30:
05:b6:28:30:98:0c:c5:50:17:b1:d9:4c:27:34:0f:
37:2e:42:36:31:4c:62:55:b1:94:b1:8e:df:3f:1e:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:07:E1:90:CF:E6:8A:AA:C3:67:0E:BE:A7:DD:50:05:2D:01:C8:44
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9b:86:01:a3:13:a8:27:93:8b:48:1b:49:2f:05:9a:ff:69:
a9:2d:db:a6:48:7f:31:4b:a6:d1:3c:b8:cb:70:f4:98:ff:9d:
58:c1:52:05:f5:9e:38:51:39:66:dd:e2:c5:40:50:61:93:de:
be:2d:ee:49:b9:4b:e1:20:92:e4:6f:f7:0b:07:2a:da:14:4c:
f3:7c:2c:bc:37:52:17:51:0e:1b:ca:89:56:ed:e9:20:fe:c3:
ba:1c:4c:2b:c2:19:46:bd:7b:0b:f7:8a:e9:4f:2d:fe:00:01:
83:41:cf:7d:33:97:a1:fa:00:39:2e:e1:51:ad:6a:04:13:36:
ce:f5:63:52:99:24:2e:92:73:f6:c2:9c:d5:3f:b3:e8:2e:b1:
f9:f7:a1:99:80:b3:4c:72:ce:1c:42:c5:43:5c:40:d0:3a:27:
b5:f6:52:67:fa:8d:30:4c:53:1a:6a:94:41:d8:38:52:df:4a:
d6:27:82:f7:6d:82:12:45:a0:2a:5d:c1:87:5e:0d:f0:e0:fa:
de:4e:cd:b4:e1:e8:14:2f:6b:1d:1e:f5:7f:13:5f:67:62:4d:
14:3f:7b:39:e3:8c:63:ac:55:24:a3:b1:4d:41:55:14:31:67:
a7:1e:6f:b5:89:89:27:33:d6:55:b7:8d:1f:0f:c7:4a:e9:ae:
00:7d:e6:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WnpGxw97dWJ53atKI0RVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOGFlNGQ5YWQ4NjNkZGExNDAxYjQ5MGMyOGNmZjgyZDk5
OGUzYjUwHhcNMjYwNjEzMDUwMDM4WhcNMjYwNjE0MDUwMDM4WjAzMTEwLwYDVQQD
EyhlMDA3ZTE5MGNmZTY4YWFhYzM2NzBlYmVhN2RkNTAwNTJkMDFjODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNuyI9njMvgyAv0gKBq0dbyeTj3m
n9MvOAl6/MFgiJwEFmuaIgLpO5yquzHNNTaY5gZ+wdRKhyhpTk90XO3FNCHawaBd
TmCtmLEeGInod5Ird8lSne8MAmFcBQGMEutLCt/SXeumuNP9be+Y2ixd4JTmtuId
oi1Xnwa7Cx3Ev6Ilm9Cec4llP1we/EPPTEQ4to9w1KLt9AzBiRlJhyjy+GRzU++q
4Ug7FYXQ9Y5Gut/SwGFbzGdscEr0Ae1+O2FN/3r2Mp+Yil17tHHAnDoxsG1bWjYU
2jDJxCBoUyALezAFtigwmAzFUBex2UwnNA83LkI2MUxiVbGUsY7fPx4rOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAH4ZDP5oqqw2cOvqfdUAUtAchEMB8GA1UdIwQY
MBaAFN2K5Nmthj3aFAG0kMKM/4LZmOO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGIt
NGRlOTM0NWM4M2JmLzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGItNGRlOTM0NWM4M2Jm
LzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZuGAaMT
qCeTi0gbSS8Fmv9pqS3bpkh/MUum0Ty4y3D0mP+dWMFSBfWeOFE5Zt3ixUBQYZPe
vi3uSblL4SCS5G/3Cwcq2hRM83wsvDdSF1EOG8qJVu3pIP7DuhxMK8IZRr17C/eK
6U8t/gABg0HPfTOXofoAOS7hUa1qBBM2zvVjUpkkLpJz9sKc1T+z6C6x+fehmYCz
THLOHELFQ1xA0DontfZSZ/qNMExTGmqUQdg4Ut9K1ieC922CEkWgKl3Bh14N8OD6
3k7NtOHoFC9rHR71fxNfZ2JNFD97OeOMY6xVJKOxTUFVFDFnpx5vtYmJJzPWVbeN
Hw/HSumuAH3m8g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:24 2026 by rpki-client