
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: tDk7DPsP9l9zw8xI8BVpl6ug1uLvxaMLyXEB9gxVkh8=
Subject key identifier: B8:FC:19:70:60:F8:17:6F:F1:85:9C:C9:91:96:A9:E0:25:A3:76:12
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 019ED2E1A0B30A57F24961E3D0256FB875D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 1368
Signing time: Wed 17 Jun 2026 00:01:02 +0000
Manifest this update: Wed 17 Jun 2026 00:01:02 +0000
Manifest next update: Thu 18 Jun 2026 00:01:02 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: IQAlEQYjKmgjOw6QjyO+zTSUs7EpABS1LU2dkxqK9VM=)
2: 8tt6sbRcYdZ62Hlyx9KV5xcE06I.asa (hash: 0Y7iz76vgEOY5ho3DHxIE4tgSCKOh0nYjQCm1eEOdkw=)
3: CnP7xic-J3ZlsEiL_ErvWxwtjH4.roa (hash: 5VuIA/sliXJSN13FjulNtyBF4Z5iaCwmwNeqLvTqwQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d2:e1:a0:b3:0a:57:f2:49:61:e3:d0:25:6f:b8:75:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Jun 17 00:01:02 2026 GMT
Not After : Jun 18 00:01:02 2026 GMT
Subject: CN=b8fc197060f8176ff1859cc99196a9e025a37612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:02:10:89:b4:d7:05:bd:77:e2:82:33:82:3b:
b6:f5:71:98:d3:d8:75:09:a8:92:fe:02:3b:00:ed:
48:00:80:f0:6e:b9:af:3b:ca:a1:23:5f:ec:57:2b:
f7:7e:09:dc:1e:79:59:d8:ee:c4:ea:94:f7:bf:8c:
fe:c7:66:75:78:0a:27:f9:b7:92:db:41:07:20:ad:
00:ec:9e:c0:65:b4:b2:9d:ef:c8:70:ad:6b:ce:dc:
3f:10:4e:f9:4b:86:a5:36:e2:b1:73:7f:bd:0e:af:
81:3d:d3:3b:e9:15:45:dd:aa:42:02:cb:55:dc:74:
bf:92:04:fd:aa:8c:88:18:3e:74:f0:f4:24:01:13:
26:f7:85:81:00:d6:2c:4b:8f:5a:7c:37:fb:d8:37:
f0:1b:74:89:69:91:2f:bd:66:18:a2:8f:6d:7e:32:
7d:4d:94:5e:6a:83:ad:e3:58:d9:24:db:38:0c:37:
50:3f:38:49:d4:92:61:06:31:61:06:bd:e6:71:b8:
64:0a:8c:79:64:9e:37:42:83:42:ae:ad:c6:3f:c8:
c8:fb:d0:f5:d4:53:f2:91:73:bb:46:2e:07:76:92:
89:c9:46:23:b1:0e:8f:75:0f:59:73:d8:5c:55:8f:
74:d8:1f:b0:5e:7e:84:dd:b9:7f:e7:14:1b:80:f6:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FC:19:70:60:F8:17:6F:F1:85:9C:C9:91:96:A9:E0:25:A3:76:12
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:19:9b:78:3a:5e:01:53:3c:ad:e7:ac:a2:19:80:15:f3:6f:
da:88:fd:03:75:97:a2:4c:79:6a:cc:c9:93:40:cc:9c:7f:63:
cb:f1:5f:37:53:dc:d4:c5:72:fc:bd:8c:18:4a:46:1f:69:e7:
0e:5b:91:ea:3c:1d:14:0a:20:d3:9a:10:7f:c9:09:ae:1c:0b:
71:fc:77:fe:a9:03:98:1f:28:9b:45:40:01:83:8d:41:ec:fa:
46:6d:08:f2:39:23:6b:28:1b:27:54:3f:42:5d:45:40:7e:07:
24:4f:00:fd:bc:fe:2a:04:91:99:8e:02:2f:45:1f:72:a5:b9:
7e:86:03:36:eb:9d:11:56:00:f1:a4:70:50:d4:24:4a:18:75:
31:5d:62:01:92:27:2c:26:fc:4b:66:28:53:66:33:82:b2:86:
ca:e6:8a:01:04:d6:4e:53:01:38:fa:4a:73:a3:12:8b:9d:65:
7b:63:f7:da:d4:23:05:25:66:83:4a:50:31:54:ab:80:46:6f:
7c:79:f4:ba:b4:93:b6:d1:dd:28:44:02:76:a5:74:fe:bf:a6:
6b:9e:9b:89:e3:bf:2d:24:e2:91:cd:dc:60:46:75:b5:39:ec:
20:3d:dd:0c:6c:d5:22:73:72:30:6d:e9:73:4a:87:dc:3f:94:
6d:f8:16:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7S4aCzClfySWHj0CVvuHXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNWUzNmYxNTlmNTc2OTg4ZmI0ZTUxZDQxMDFiYjg1ZDBk
MGM5ODMwHhcNMjYwNjE3MDAwMTAyWhcNMjYwNjE4MDAwMTAyWjAzMTEwLwYDVQQD
EyhiOGZjMTk3MDYwZjgxNzZmZjE4NTljYzk5MTk2YTllMDI1YTM3NjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QIQibTXBb134oIzgju29XGY09h1
CaiS/gI7AO1IAIDwbrmvO8qhI1/sVyv3fgncHnlZ2O7E6pT3v4z+x2Z1eAon+beS
20EHIK0A7J7AZbSyne/IcK1rztw/EE75S4alNuKxc3+9Dq+BPdM76RVF3apCAstV
3HS/kgT9qoyIGD508PQkARMm94WBANYsS49afDf72DfwG3SJaZEvvWYYoo9tfjJ9
TZReaoOt41jZJNs4DDdQPzhJ1JJhBjFhBr3mcbhkCox5ZJ43QoNCrq3GP8jI+9D1
1FPykXO7Ri4HdpKJyUYjsQ6PdQ9Zc9hcVY902B+wXn6E3bl/5xQbgPbd7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLj8GXBg+Bdv8YWcyZGWqeAlo3YSMB8GA1UdIwQY
MBaAFN5eNvFZ9XaYj7TlHUEBu4XQ0MmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAt
ZWJiYmI0NDQyODZlLzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAtZWJiYmI0NDQyODZl
LzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhmbeDpe
AVM8reesohmAFfNv2oj9A3WXokx5aszJk0DMnH9jy/FfN1Pc1MVy/L2MGEpGH2nn
DluR6jwdFAog05oQf8kJrhwLcfx3/qkDmB8om0VAAYONQez6Rm0I8jkjaygbJ1Q/
Ql1FQH4HJE8A/bz+KgSRmY4CL0UfcqW5foYDNuudEVYA8aRwUNQkShh1MV1iAZIn
LCb8S2YoU2YzgrKGyuaKAQTWTlMBOPpKc6MSi51le2P32tQjBSVmg0pQMVSrgEZv
fHn0urSTttHdKEQCdqV0/r+ma56bieO/LSTikc3cYEZ1tTnsID3dDGzVInNyMG3p
c0qH3D+UbfgWcQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:24:31 2026 by rpki-client