Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: 78+iaCtwn8jZN1f+VvNTpriYWAHuQNVSWd2Bnfi7lCA=
Subject key identifier: D1:A1:1E:DC:EA:94:F3:4F:7A:54:3D:51:DD:80:64:E0:59:4B:02:80
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 019EBF5A90B37755015FFB571423A3ECBFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 05:00:43 +0000
Manifest this update: Sat 13 Jun 2026 05:00:43 +0000
Manifest next update: Sun 14 Jun 2026 05:00:43 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: i+SBSF7pDzwAbmhaCWR5AtN8z+NxnOzY3FnfMVTsEI4=)
2: BMMff36mDnqefE-fi1QYcDeaUEk.roa (hash: Yky2cFQCYWcMLt5A2AE8QdQ1eB3p9PDevvqazUFMfX4=)
3: c1k5DpW670XTtOlEvTkIz9kZXlc.roa (hash: Y49a9m/TdUFutVOSA2rIEcmP18u8ki2BwGqjBT3Sy90=)
4: ncKH1YpuJk5-uciMg32syOz5Dh0.roa (hash: 8NVQeOlGQC5ZiQGFRi3sIRfLjXwS5UuTrVhAQo79EFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:90:b3:77:55:01:5f:fb:57:14:23:a3:ec:bf:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Jun 13 05:00:43 2026 GMT
Not After : Jun 14 05:00:43 2026 GMT
Subject: CN=d1a11edcea94f34f7a543d51dd8064e0594b0280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:60:99:99:50:2a:32:67:70:31:5e:f9:54:10:
e0:4e:1e:72:59:19:ca:87:aa:c0:9b:8f:9a:52:30:
8f:83:f2:3b:0d:60:bb:cd:dd:a0:fb:5b:c0:96:6b:
98:8c:d0:2b:14:3f:ac:14:b3:25:e4:2b:dc:1b:77:
f7:28:45:43:94:f1:8a:ce:17:e7:4c:2e:0f:ae:53:
08:cc:29:54:ae:c7:09:1c:18:bc:e3:1d:06:8d:9b:
1f:5f:6d:6c:f0:da:bc:a5:60:03:7a:ed:a0:c7:60:
47:43:4c:f9:d7:07:17:ad:46:be:95:4f:68:05:52:
ef:7b:fe:2f:ae:bd:2f:ed:41:04:b9:e3:78:70:9e:
d5:39:4b:f9:a0:14:9b:2c:b2:ce:77:55:0a:36:26:
e9:c3:f0:06:e7:9c:fb:d0:be:6e:84:a2:30:8f:81:
df:81:32:df:9f:ec:3f:7b:ba:3a:6a:5d:6b:aa:b3:
44:c0:c7:56:09:ad:81:f4:19:a9:4d:a6:03:6b:81:
79:01:58:c8:c9:33:38:31:c3:b9:52:ae:37:97:1f:
20:1a:b6:a0:87:42:11:5d:0d:b8:36:e4:01:0f:5c:
09:17:bf:dc:b2:eb:f1:26:89:87:6b:9e:b0:bb:2d:
f6:84:7c:cf:88:d0:3f:e4:2c:2b:21:94:7e:cd:bc:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A1:1E:DC:EA:94:F3:4F:7A:54:3D:51:DD:80:64:E0:59:4B:02:80
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d5:4b:15:b6:73:3e:27:a5:c6:a2:79:dd:25:59:ef:63:56:
04:44:6b:93:0a:26:71:68:ec:2f:08:1a:d2:8e:de:52:a1:d8:
d9:09:6e:67:e8:78:c0:bf:cc:87:ae:69:6b:9d:e5:c7:6e:5f:
f1:d4:3b:63:1c:15:d9:5f:27:da:fa:8d:ae:2f:b3:21:c5:33:
81:45:3d:d9:8c:46:67:4f:99:24:63:3c:f5:9d:d8:c4:c8:f8:
9d:54:a1:da:44:8d:4e:3f:8a:89:bd:67:7b:23:09:43:3e:73:
ab:78:f1:ad:fa:ed:13:27:32:df:b8:5d:b8:ad:e0:f5:e4:1e:
28:11:de:42:af:3e:b1:fb:9d:5c:56:9e:2b:16:b0:06:7b:f8:
a6:3a:0a:9d:20:f7:af:54:72:22:ca:4c:df:2c:35:9c:eb:36:
63:c1:4a:6c:c9:82:08:fa:8d:35:cd:fb:83:ff:a9:0c:91:a4:
29:89:69:24:28:c8:04:62:60:cf:a0:75:bf:fa:11:6e:a0:24:
ff:54:b1:d0:e1:d9:db:1b:47:c3:b3:8c:1d:52:bb:89:5a:16:
95:f3:3d:5a:7a:6f:1b:17:99:93:5d:30:54:54:72:57:6d:45:
4d:8e:fc:a1:a3:34:2d:fd:b4:cf:98:e4:ad:9e:5b:51:55:29:
94:3b:15:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:13:23 2026 by rpki-client