Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: Kbx/HAiJ3Bg9vmtDjwXrWmSFWxDiZyH26vcOlt7RH8c=
Subject key identifier: E4:64:CB:B7:E7:CD:4A:6D:D7:16:F1:08:DC:FF:97:54:63:FF:33:EE
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 019EBFC7FF7828E4CC579BD938CB3F0EDC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 1270
Signing time: Sat 13 Jun 2026 07:00:15 +0000
Manifest this update: Sat 13 Jun 2026 07:00:15 +0000
Manifest next update: Sun 14 Jun 2026 07:00:15 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: Kb02cp4KDJupxWkicggjLTc8/8F9MyW0BmRJ/L6o5u0=)
2: f8-DGeBP35-N3w51zaELLHTWQhA.roa (hash: p45bmNjagtDF3HgTTRtJcWFVXkd0k7P3PfW1B+YfWgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c7:ff:78:28:e4:cc:57:9b:d9:38:cb:3f:0e:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Jun 13 07:00:15 2026 GMT
Not After : Jun 14 07:00:15 2026 GMT
Subject: CN=e464cbb7e7cd4a6dd716f108dcff975463ff33ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4f:7f:06:a0:25:30:e4:47:cb:51:65:f4:d1:
b2:19:67:37:0c:fe:39:fa:81:8e:52:df:2b:98:4d:
fc:88:c4:79:e5:6a:c6:86:a1:0b:18:81:85:3c:55:
5c:75:51:4e:59:38:68:a5:cc:32:e2:80:e1:ce:af:
6c:c2:27:53:2a:69:38:28:37:fb:2d:5a:c9:d6:53:
5a:10:35:b0:0c:93:04:10:d8:9a:1b:79:7a:f9:9e:
67:c3:86:43:44:a9:c6:26:6f:cb:e8:64:78:c5:37:
fe:45:d3:b1:ce:ec:75:3b:22:ac:65:7c:11:4a:a8:
22:fc:3e:dd:a1:df:e3:2f:cd:ab:88:89:d2:de:95:
3a:c6:f4:db:b0:a4:c9:2d:62:46:53:22:4e:c1:28:
fd:0d:25:ed:32:eb:c8:12:66:38:a2:2d:4c:e3:2e:
e4:50:d5:28:2f:78:ff:64:03:62:4f:d4:c7:9e:9c:
78:86:44:69:fe:60:f7:d1:6e:18:9e:66:7b:c8:23:
f5:5a:66:7d:41:a6:89:8c:92:72:45:eb:b5:c2:99:
86:a8:36:65:da:4f:b6:c5:63:6e:cd:01:a6:eb:72:
12:50:a4:71:47:d6:77:ae:c3:d4:07:01:1b:4b:cd:
5c:22:1e:df:5c:d5:93:68:b8:88:ec:df:d5:e3:1a:
aa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:64:CB:B7:E7:CD:4A:6D:D7:16:F1:08:DC:FF:97:54:63:FF:33:EE
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fd:74:fe:d7:dd:5d:ab:a3:af:cd:b9:22:a2:b4:cf:ba:1a:
8a:ae:fd:13:50:73:48:65:0f:a4:3e:e0:7c:8c:d4:18:9b:dc:
a4:06:19:e6:cf:de:39:5a:89:55:d8:4e:37:6a:93:02:c4:45:
20:02:b8:9e:59:ce:52:0e:36:8a:78:dc:a0:37:18:64:73:70:
49:21:75:d1:75:70:b4:47:09:4e:b2:0d:17:cb:66:b0:ce:6d:
ed:bb:41:14:1d:c6:f8:b7:66:3a:35:8c:c2:39:34:7b:b0:7b:
0f:07:a2:d3:c3:8b:ff:87:e9:a6:d3:c2:2e:7e:c8:79:bb:ba:
1a:b9:59:2a:a2:80:f8:c6:cb:8c:3e:32:b9:7d:6e:ab:4a:d7:
9a:17:9b:4e:77:9a:37:99:bf:ca:9e:16:68:cc:d5:af:c7:36:
0f:5e:c4:49:ee:f6:fc:29:f5:db:ce:3d:14:85:4c:da:f8:ee:
d9:26:91:03:64:b5:e7:4b:f7:f6:8c:e3:00:9a:e2:a3:ac:51:
9d:60:91:14:ff:07:38:01:c4:06:15:56:10:a6:a5:0e:8c:19:
10:93:b6:c5:65:0d:20:d4:78:32:e6:2f:70:7b:59:74:1a:e9:
b1:75:0e:89:ca:67:a9:bf:a8:a1:b7:1f:f4:9e:53:51:0a:ef:
22:93:a0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:22:51 2026 by rpki-client