Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
File: 3EviU3WUInayZECX3D1ah1r7ivE.mft (raw, json)
Hash identifier: 1jpvCN9DeektKJt2flAXODXZSLQc2oGjHj2pdexpWw0=
Subject key identifier: 41:18:DD:70:60:15:AF:73:25:C2:B6:3A:A3:3E:DC:B7:7C:4C:74:3D
Authority key identifier: DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
Certificate issuer: /CN=dc4be25375942276b2644097dc3d5a875afb8af1
Certificate serial: 019EBE7F4D1813583F149F8E1AB6CD13092E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
Manifest number: 0C0D
Signing time: Sat 13 Jun 2026 01:01:14 +0000
Manifest this update: Sat 13 Jun 2026 01:01:14 +0000
Manifest next update: Sun 14 Jun 2026 01:01:14 +0000
Files and hashes: 1: 3EviU3WUInayZECX3D1ah1r7ivE.crl (hash: RuHZFYld6PenL5nOe4PBfCYJLgAqbGsh1pTjQ+CAky0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:4d:18:13:58:3f:14:9f:8e:1a:b6:cd:13:09:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4be25375942276b2644097dc3d5a875afb8af1
Validity
Not Before: Jun 13 01:01:14 2026 GMT
Not After : Jun 14 01:01:14 2026 GMT
Subject: CN=4118dd706015af7325c2b63aa33edcb77c4c743d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:8e:94:8c:be:df:57:48:63:6a:ab:a5:57:
af:a6:65:49:9b:e3:17:cf:3c:7f:8f:ed:40:d9:33:
10:cd:cf:3f:dc:79:e6:73:77:d7:d2:db:df:08:74:
84:dd:1d:08:a8:27:1f:33:d8:1a:1c:4e:4d:47:d3:
71:b7:97:6f:af:57:a4:87:ff:51:a1:87:c3:ae:1b:
5e:4b:8f:f3:6a:fa:68:07:1c:fb:0d:15:0b:fc:d0:
d1:02:ca:64:f1:7d:fe:a9:0e:a4:b0:1d:b5:72:99:
5a:24:0f:51:8b:a4:60:55:27:2d:60:4b:e2:ec:12:
a3:9a:ab:8b:08:0e:b7:6f:bf:03:19:eb:42:1e:40:
33:17:25:09:28:fd:09:78:06:bb:65:1e:2e:d1:b0:
bb:4f:a4:21:10:e8:37:87:b1:5c:3e:5b:3e:a5:c8:
95:76:c8:ca:27:fa:ac:e0:7f:d9:84:cc:5b:d4:54:
81:20:7a:ee:22:2a:fc:0a:f1:d2:4c:2e:7b:ca:11:
ac:b7:9d:63:23:b9:6e:7d:7d:68:da:03:e1:3a:52:
0c:21:bf:ac:9c:52:ca:bc:50:2d:9d:82:5e:14:1b:
3f:84:f8:b9:4a:7a:cc:62:fd:25:d7:c0:d6:a5:bf:
ac:04:96:d8:eb:64:a0:8f:14:53:5e:d7:7d:5c:9b:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:18:DD:70:60:15:AF:73:25:C2:B6:3A:A3:3E:DC:B7:7C:4C:74:3D
X509v3 Authority Key Identifier:
keyid:DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:59:5f:ff:6b:14:d5:8a:e1:db:10:4e:1f:ab:2a:f4:f1:05:
2d:2a:e9:dc:aa:65:6a:92:84:0e:3e:3b:e9:94:c5:ae:f9:8a:
8e:b6:3e:aa:f4:67:d5:9a:a6:bd:3b:be:dd:b4:48:ef:bd:4d:
c7:15:c8:11:e4:5a:99:3a:7b:65:e4:86:1e:e1:2f:54:da:2a:
e2:50:9c:54:b7:b6:fd:1b:13:36:b5:a6:bf:66:66:ac:d3:46:
3d:c8:b7:77:f4:c9:5b:e0:1c:5e:52:09:a7:e9:98:6e:a6:53:
c5:ef:88:68:a5:d4:a8:63:4e:97:97:a2:d4:87:a1:9f:23:4e:
20:27:af:08:dc:77:4b:9e:55:f9:26:4d:0b:cc:49:65:be:5c:
da:42:54:69:87:07:04:9b:8a:21:ba:ec:2e:a6:2c:44:59:da:
19:3c:9c:94:8d:ca:a6:3f:58:66:0e:a8:03:50:9e:45:28:8b:
ff:d6:15:71:2a:e9:03:5c:3e:78:a8:69:8b:fb:10:0b:94:22:
96:7a:53:35:22:d2:80:ff:65:f0:6a:01:7a:5b:54:a7:36:53:
b2:80:ce:a4:ad:29:4c:c5:3d:6e:e1:ce:62:95:14:b0:e3:aa:
3d:15:7a:43:77:30:37:80:c7:29:a8:a5:30:c8:ff:e7:f7:38:
b2:3c:e0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:58:33 2026 by rpki-client