
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: LY1PwLzsEG3MQdPEaoUfIzAgI6H9V4K1FH2+wnzL1eE=
Subject key identifier: AD:25:3D:F9:35:83:88:21:0E:83:42:FF:46:1F:2F:6B:1D:44:28:8B
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 019EBDA2C5807A58C2D2B99BB0BE6CA8E062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 10BB
Signing time: Fri 12 Jun 2026 21:00:21 +0000
Manifest this update: Fri 12 Jun 2026 21:00:21 +0000
Manifest next update: Sat 13 Jun 2026 21:00:21 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: ywfNh3a9uLb6O7u5Rl97jYnY9rvZMmBdx2qvAz80qdc=)
2: Hfq2hHkukqsFqywTjHsioREmNS4.roa (hash: paBdvdH/DYPPTu1rMzb8b23iJRlSlCeY0XMWLizu13w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a2:c5:80:7a:58:c2:d2:b9:9b:b0:be:6c:a8:e0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Jun 12 21:00:21 2026 GMT
Not After : Jun 13 21:00:21 2026 GMT
Subject: CN=ad253df9358388210e8342ff461f2f6b1d44288b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ba:6b:fc:99:21:73:cc:01:08:0b:4f:db:bd:
67:71:f5:81:d8:c8:af:70:80:f6:52:1d:ec:0b:31:
dc:4d:d5:37:e2:e7:5c:62:8b:5b:43:4b:fd:6a:cc:
2b:13:07:92:a4:89:76:cf:a1:87:99:3c:17:62:32:
9b:42:cc:03:43:b8:0f:95:1a:cb:48:ac:13:f2:49:
8b:88:73:49:0d:c6:ce:8f:4c:d6:6a:63:96:c5:80:
b9:9c:d4:37:83:98:66:5d:e5:06:37:98:c0:55:fb:
82:4c:a7:6d:b0:cb:3f:08:31:93:12:5d:bb:34:6c:
da:45:7f:60:17:df:57:f6:0c:5b:f7:4a:73:06:e4:
cb:65:5b:8b:71:9e:b5:83:b0:66:76:06:58:b0:d1:
3b:ea:ae:24:d0:a8:86:c5:3e:8f:de:2a:86:e8:65:
3d:8e:50:d3:b4:97:b9:e6:15:a2:8f:5e:88:62:b8:
57:7b:44:75:fb:a8:66:01:87:4b:f8:e5:e3:06:1c:
15:3c:60:18:f9:0c:2a:03:87:ad:23:e5:d5:dc:02:
bd:e4:98:88:e7:e1:a3:d7:dd:8f:c9:f2:7a:8e:3d:
85:a9:2d:19:fd:14:f8:16:2b:8a:b3:b1:48:38:65:
3d:25:f9:4d:0d:ba:2b:1a:23:a5:57:47:aa:28:39:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:25:3D:F9:35:83:88:21:0E:83:42:FF:46:1F:2F:6B:1D:44:28:8B
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:83:83:ca:da:07:fb:9e:c6:39:a3:e9:1f:de:e9:37:6e:db:
ed:05:27:41:b3:73:95:51:2b:e4:05:0e:ea:d4:cd:12:5d:0b:
ce:31:d0:df:14:7e:06:5f:97:08:92:cc:41:74:2b:b3:ff:a3:
4d:df:44:14:34:40:d3:32:39:c3:61:55:d1:45:09:40:f7:dc:
23:0f:5e:e7:e0:0b:18:96:ef:69:25:e8:91:f6:82:d8:67:70:
c4:1e:82:6b:74:d2:ae:68:c8:c8:ac:11:47:e7:27:c2:26:84:
46:98:52:36:43:1f:c1:71:58:de:53:2c:06:ef:08:81:d9:8d:
8a:a9:ec:bb:b6:51:52:6d:67:fe:4e:99:17:9f:1d:53:6f:66:
a1:46:a4:e0:d4:91:9e:2d:65:3f:26:d6:f3:ba:6f:36:a6:30:
56:ff:5f:11:7d:ec:0b:d4:22:2b:37:a1:f3:a5:c0:41:f0:80:
91:19:dd:3b:5d:c1:5c:a4:34:2f:52:b0:a8:0d:ec:69:a1:19:
25:f8:a7:6d:d6:10:1d:e1:bc:7e:02:f1:d4:0a:ac:f4:8f:95:
1d:72:5d:77:40:89:24:6c:c7:7d:35:a2:c2:9f:26:1f:38:5d:
dd:2e:27:a0:d9:c0:8e:48:06:26:59:87:61:ff:9f:d4:7e:93:
ff:1f:ef:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:48:48 2026 by rpki-client