Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
File: 3keU2fyrI-wF3d1QSKP8cgQAKio.mft (raw, json)
Hash identifier: ZPJCpJzSnd7DbSqOGfxuyJxIcHsuGnZAdDq3v+R7PB4=
Subject key identifier: 1D:90:3B:9C:0C:25:AA:72:7D:49:6D:29:63:0D:AD:25:10:26:A2:13
Authority key identifier: DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
Certificate issuer: /CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Certificate serial: 019EC1803A67D42E4E3A53E845535B59F866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
Manifest number: 128A
Signing time: Sat 13 Jun 2026 15:01:06 +0000
Manifest this update: Sat 13 Jun 2026 15:01:06 +0000
Manifest next update: Sun 14 Jun 2026 15:01:06 +0000
Files and hashes: 1: 3keU2fyrI-wF3d1QSKP8cgQAKio.crl (hash: keuIPdjaZ8W7w+XS/N31zu4/hAyO9ZCHCH/OJS2mJXs=)
2: kZWW_ntfYvdgmDKHXouZXpr8UMU.roa (hash: pybDSm/TxiDymAX06iB+SSYkpRn7EWk4DKtBzvh17SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:3a:67:d4:2e:4e:3a:53:e8:45:53:5b:59:f8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Validity
Not Before: Jun 13 15:01:06 2026 GMT
Not After : Jun 14 15:01:06 2026 GMT
Subject: CN=1d903b9c0c25aa727d496d29630dad251026a213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:34:f3:45:b8:a5:0a:e8:2d:ab:da:42:01:
82:d5:f5:ed:b1:b0:07:03:17:0d:43:96:63:19:d6:
c8:1e:37:67:b2:7a:62:ee:6e:89:4a:f0:1f:26:dd:
24:cd:ee:d0:c1:47:98:58:84:76:21:44:e0:30:8d:
ae:8b:33:c8:46:5a:00:a2:66:76:b6:3d:82:d0:50:
1b:b1:0e:b5:dd:b9:ca:e9:28:66:a4:7e:fd:ea:97:
d8:a1:92:de:fa:b4:37:a0:28:dd:24:24:bd:11:b4:
3c:1d:fb:7a:10:3e:59:9f:d2:0a:82:0c:2b:aa:af:
43:37:dd:68:5d:75:94:a5:f9:5e:34:06:76:75:03:
3e:32:b1:b8:35:a4:9d:cb:1f:4e:84:ef:d1:23:6a:
d3:79:22:3a:76:e3:6a:56:f1:7a:20:c5:75:27:8b:
79:2d:a3:2d:bd:f7:42:e2:0c:7c:bf:3e:92:67:d6:
4e:a7:3c:f2:7d:23:ce:59:3f:b0:c6:e4:fd:a5:42:
51:23:11:f1:83:d9:9a:15:38:fa:1f:64:48:7d:cf:
87:f5:23:80:42:e2:78:ba:ce:2f:b8:88:46:1c:19:
45:f1:90:73:6d:78:24:78:ce:23:26:08:c7:dd:8b:
4d:19:f0:77:86:7f:88:67:52:06:8c:04:b4:eb:65:
e1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:90:3B:9C:0C:25:AA:72:7D:49:6D:29:63:0D:AD:25:10:26:A2:13
X509v3 Authority Key Identifier:
keyid:DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d2:81:18:d7:21:65:ab:ef:c4:83:e4:ae:c5:4a:53:c9:a8:
95:b2:44:c3:ed:ad:69:e2:71:c8:90:9a:b0:4a:66:23:68:6c:
c6:a1:4e:80:37:40:26:14:c7:cc:e0:54:1e:d7:2e:23:96:b3:
48:6a:c5:e4:9c:c2:80:13:cb:ef:53:a4:d0:11:ca:b8:b9:85:
f3:2d:7d:28:79:a8:e8:2b:dc:11:ad:cc:aa:9f:6f:c1:44:db:
12:da:04:b6:dd:ec:88:57:1e:3d:64:e8:60:25:7b:7b:30:e5:
ce:79:2d:21:37:ce:90:b1:1b:cf:23:d3:f5:f5:9c:ee:2a:41:
49:72:ac:f9:75:a8:fe:01:5a:3c:f6:47:29:7e:bc:58:99:32:
20:58:c2:6f:c3:52:da:c6:6d:56:fd:8b:fb:9a:88:87:09:7c:
82:c9:d3:16:db:ff:dc:00:7a:71:e4:6d:57:74:0c:31:e8:db:
71:2f:b7:fb:92:40:a7:e6:15:d8:6a:c5:1b:28:05:1c:5a:bb:
62:e7:28:6e:b9:6f:a8:36:ad:03:8b:6f:79:08:6f:a6:93:9d:
6d:01:7d:ec:be:3d:7e:9c:e8:48:ae:f7:4b:4a:0b:bd:a4:8d:
0f:3d:4b:d8:fe:1f:c2:92:89:20:49:cd:1e:77:ea:28:09:32:
01:c9:36:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BgDpn1C5OOlPoRVNbWfhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNDc5NGQ5ZmNhYjIzZWMwNWRkZGQ1MDQ4YTNmYzcyMDQw
MDJhMmEwHhcNMjYwNjEzMTUwMTA2WhcNMjYwNjE0MTUwMTA2WjAzMTEwLwYDVQQD
EygxZDkwM2I5YzBjMjVhYTcyN2Q0OTZkMjk2MzBkYWQyNTEwMjZhMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AI080W4pQroLavaQgGC1fXtsbAH
AxcNQ5ZjGdbIHjdnsnpi7m6JSvAfJt0kze7QwUeYWIR2IUTgMI2uizPIRloAomZ2
tj2C0FAbsQ613bnK6ShmpH796pfYoZLe+rQ3oCjdJCS9EbQ8Hft6ED5Zn9IKggwr
qq9DN91oXXWUpfleNAZ2dQM+MrG4NaSdyx9OhO/RI2rTeSI6duNqVvF6IMV1J4t5
LaMtvfdC4gx8vz6SZ9ZOpzzyfSPOWT+wxuT9pUJRIxHxg9maFTj6H2RIfc+H9SOA
QuJ4us4vuIhGHBlF8ZBzbXgkeM4jJgjH3YtNGfB3hn+IZ1IGjAS062XhCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2QO5wMJapyfUltKWMNrSUQJqITMB8GA1UdIwQY
MBaAFN5HlNn8qyPsBd3dUEij/HIEACoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2tlVTJmeXJJLXdGM2QxUVNLUDhjZ1FBS2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wODAwZmUtOWJkMi00ODhiLThjNDIt
ZjAxMTI5Mzk1M2Y1LzEvM2tlVTJmeXJJLXdGM2QxUVNLUDhjZ1FBS2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wODAwZmUtOWJkMi00ODhiLThjNDItZjAxMTI5Mzk1M2Y1
LzEvM2tlVTJmeXJJLXdGM2QxUVNLUDhjZ1FBS2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtKBGNch
ZavvxIPkrsVKU8molbJEw+2taeJxyJCasEpmI2hsxqFOgDdAJhTHzOBUHtcuI5az
SGrF5JzCgBPL71Ok0BHKuLmF8y19KHmo6CvcEa3Mqp9vwUTbEtoEtt3siFcePWTo
YCV7ezDlznktITfOkLEbzyPT9fWc7ipBSXKs+XWo/gFaPPZHKX68WJkyIFjCb8NS
2sZtVv2L+5qIhwl8gsnTFtv/3AB6ceRtV3QMMejbcS+3+5JAp+YV2GrFGygFHFq7
YucobrlvqDatA4tveQhvppOdbQF97L49fpzoSK73S0oLvaSNDz1L2P4fwpKJIEnN
HnfqKAkyAck2tQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:12:25 2026 by rpki-client