Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: KNUrSiNWg8Vjlas7n/QvftXySDDMafC3wDX8ArGx4jw=
Subject key identifier: 02:AC:D8:8D:2B:1A:32:29:A8:E8:AA:3A:24:63:C8:82:EF:1A:29:BD
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 019EBDDA9B2928026793A37BE0DF5E1BA518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 0DE8
Signing time: Fri 12 Jun 2026 22:01:20 +0000
Manifest this update: Fri 12 Jun 2026 22:01:20 +0000
Manifest next update: Sat 13 Jun 2026 22:01:20 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: F0twQ0zr5Yli1FYRWMBSfCH/lJryYC7IoAlOk8WUPqg=)
2: WaiBRN4zqeNTstFb2Bj7FDDnj4A.roa (hash: R2F3HKnWVo0NsS1fo82XPlwTKBu5M4Ho2YxFKIfZuWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:9b:29:28:02:67:93:a3:7b:e0:df:5e:1b:a5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Jun 12 22:01:20 2026 GMT
Not After : Jun 13 22:01:20 2026 GMT
Subject: CN=02acd88d2b1a3229a8e8aa3a2463c882ef1a29bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:89:17:31:64:7a:ec:02:ee:70:38:25:71:
aa:03:11:cc:fe:a0:e2:23:6c:57:5f:67:12:c2:16:
a8:3f:a5:4b:c1:b4:fc:4c:a1:dc:0c:4a:72:ff:58:
d1:ca:6b:21:bf:0b:81:bb:88:09:5d:21:8c:b6:a9:
68:7f:df:68:a5:10:8e:d5:81:51:27:8b:ce:6b:9d:
6a:41:bc:bb:12:b4:35:29:6f:60:4c:42:de:b6:40:
e9:76:d6:f3:50:d2:58:57:c1:4c:31:9d:10:0d:d3:
03:98:1c:cc:60:dc:c6:fc:9f:4c:51:71:23:7a:b6:
a5:80:7c:d7:02:fb:b7:73:10:ea:48:4b:67:7f:fb:
a2:6c:41:05:e8:17:d5:31:a5:4c:17:03:1f:8b:a9:
bf:41:90:e5:2e:c0:f1:b0:cc:c8:cf:24:3e:45:e7:
0d:6b:94:66:8f:8d:d7:1d:87:1b:6b:82:d7:13:47:
41:35:84:33:d1:d5:d2:06:0a:db:2e:f3:76:33:1e:
d0:96:b4:93:58:b2:53:77:0b:4c:d2:d0:71:4f:f0:
ba:cf:9f:c0:3c:f4:e3:66:9e:a8:30:e5:67:70:9b:
9b:56:04:8e:09:d8:48:ab:a9:58:47:36:9c:e7:47:
35:74:31:62:f0:56:a9:b1:52:98:e8:29:3a:59:4c:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AC:D8:8D:2B:1A:32:29:A8:E8:AA:3A:24:63:C8:82:EF:1A:29:BD
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:62:3a:38:da:d9:bc:46:c7:e9:6a:59:11:0a:2a:aa:91:68:
44:ac:7b:a7:15:eb:b7:c9:21:05:78:10:33:1d:7f:2f:56:03:
db:d3:a9:47:4a:55:59:4e:26:1e:8c:f9:bd:cd:e8:e3:ff:ae:
14:6e:db:1b:63:4a:7f:eb:46:75:1a:d7:47:27:a4:f9:8d:34:
ce:17:6d:8b:79:32:f3:eb:7f:81:3d:9c:81:fc:02:9e:6a:f1:
d9:14:04:ea:bb:74:1d:87:cf:c0:ed:21:f0:da:e8:fb:fe:74:
ee:4a:6a:7b:7d:ce:6e:ee:5a:be:b8:9f:2c:ae:b0:45:43:65:
26:94:f1:34:a3:22:7b:3b:31:51:04:60:a0:6d:14:13:19:63:
28:d5:f8:f9:07:f2:6d:23:0d:7b:10:c2:43:0e:9c:92:d6:7f:
b9:31:f5:cf:9e:fa:9e:77:0a:ea:e8:02:13:77:0d:35:35:f0:
b3:4f:67:84:e5:46:9f:61:42:39:95:66:e1:ee:03:72:52:af:
63:d2:af:ef:fa:dc:cf:d3:a1:e0:e1:bb:dc:41:73:f1:a5:1b:
83:ac:25:ad:bd:cd:af:27:84:c7:3a:29:80:d5:f8:9b:20:ef:
ba:d4:4a:0e:b1:46:12:2c:3d:9f:d5:6f:00:34:bf:e9:b4:5b:
cb:a1:e2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:43 2026 by rpki-client