Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier: Pe4Dl/XDsN0jupdqcmxv0DLJerkGGtuU56E0BYAfo88=
Subject key identifier: F8:7A:6B:1B:ED:26:25:DC:BD:2A:CC:FD:B9:7D:57:5A:C1:4A:81:C8
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 019EBF5A7BFA3E16728163EFBE76D6D39586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number: 159C
Signing time: Sat 13 Jun 2026 05:00:38 +0000
Manifest this update: Sat 13 Jun 2026 05:00:38 +0000
Manifest next update: Sun 14 Jun 2026 05:00:38 +0000
Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: Wln2D9tF6j/9P5dn52KRrewGsKW0HJ1BJzg7dbkFdAI=)
2: 7cYGhHG7YtiE08uGuW1-X_rHKII.roa (hash: hmnCIat4n3k5p2akfmzZ49cT/kokW1B90E1WUFaEO78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:7b:fa:3e:16:72:81:63:ef:be:76:d6:d3:95:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: Jun 13 05:00:38 2026 GMT
Not After : Jun 14 05:00:38 2026 GMT
Subject: CN=f87a6b1bed2625dcbd2accfdb97d575ac14a81c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:40:ca:04:ab:e3:14:48:6b:66:70:c0:c0:
4f:f8:cb:8d:93:7a:f1:fb:9e:fa:1a:5e:f2:97:ad:
14:2d:67:f5:bb:d1:a4:65:be:ef:ba:c9:21:96:29:
04:2c:b6:65:78:27:93:37:9c:13:73:e4:17:67:aa:
59:f1:3c:c6:93:31:7b:75:3e:20:4b:78:a3:d8:8d:
82:3d:1f:db:0b:a4:32:ff:a9:cd:ad:fe:3f:7d:49:
24:5f:0b:cb:f4:cf:0e:01:ad:f6:24:16:14:fb:74:
cf:18:c8:2a:fe:94:aa:72:e6:97:cd:45:d9:23:55:
9d:7a:c4:85:70:e5:21:d7:2a:b2:fc:15:32:da:ac:
b1:f0:bf:e2:d6:1f:db:d6:27:42:19:c4:87:a0:cf:
02:1d:ea:a5:29:ba:50:0d:85:e1:d2:72:4e:29:5b:
9d:0c:09:9e:8a:b9:5d:89:4d:06:db:c7:3d:57:6a:
da:87:85:d3:ca:21:42:3a:54:15:ca:9e:b8:a5:3e:
66:da:b1:87:79:79:04:c1:69:f6:2a:a1:85:83:fa:
ef:7f:ce:0e:7b:ac:e9:c8:e4:b6:02:f4:e5:dd:2d:
d2:3a:df:c2:77:f7:f4:f7:b6:19:cb:28:ba:98:55:
37:40:3c:2f:a4:c9:6e:a5:e0:9c:51:69:b0:e1:2b:
a5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7A:6B:1B:ED:26:25:DC:BD:2A:CC:FD:B9:7D:57:5A:C1:4A:81:C8
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6a:b0:b1:4e:f5:d0:57:29:a1:af:44:b5:b6:83:f7:67:eb:
4f:b9:1a:52:24:97:8b:45:a4:66:c9:f8:41:07:43:4d:05:39:
7e:a1:ec:39:79:f8:41:4a:38:73:bc:01:fc:91:63:9d:7f:2a:
48:3c:33:f2:53:c1:51:ec:88:51:e5:0a:a9:64:2b:79:69:a6:
d6:b1:49:93:48:2b:06:41:5a:d5:51:b3:6d:73:bb:d3:3c:96:
58:37:1a:bb:d6:a4:3f:42:cc:54:57:48:3a:08:47:67:d5:cb:
f6:0f:f4:86:50:a3:5f:45:ff:fa:34:9d:6d:30:be:1d:c9:8c:
05:bc:2f:1e:29:fb:d0:ae:79:db:3b:b9:f1:74:da:2a:69:6b:
56:e8:30:d8:a2:e5:00:3f:3b:db:07:02:ca:60:17:c5:8c:84:
30:c6:57:ca:e3:27:e7:b5:07:82:b8:b3:76:e7:c5:fc:49:38:
ec:49:bb:1d:80:61:95:e0:59:75:98:46:91:eb:3e:ba:8b:31:
f7:bb:90:11:13:ae:4c:c4:7e:c7:d4:0b:a2:d5:6b:ee:22:2e:
50:c8:d4:a5:d9:88:ec:98:9e:54:ba:5d:82:7f:4f:20:8e:aa:
27:c3:38:c1:84:84:11:6c:cb:90:47:b2:e9:8d:13:d1:c6:9f:
60:fe:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:32 2026 by rpki-client