Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: KQnQh+p5nx8l2Q6d0a04CxrjXBxa+0lXnRZWB78mfSM=
Subject key identifier: 5F:67:12:F6:DB:28:7E:EE:17:34:8F:D7:E2:E0:47:9A:D0:19:BD:7B
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 019EBEB5C3573E8DCC61E3E6B35A958B012B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0CD7
Signing time: Sat 13 Jun 2026 02:00:43 +0000
Manifest this update: Sat 13 Jun 2026 02:00:43 +0000
Manifest next update: Sun 14 Jun 2026 02:00:43 +0000
Files and hashes: 1: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: spjNqCwEMrLbP0Wq1LrLkHrYIWJQPnEhD8CYkJewBF8=)
2: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (hash: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:c3:57:3e:8d:cc:61:e3:e6:b3:5a:95:8b:01:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Jun 13 02:00:43 2026 GMT
Not After : Jun 14 02:00:43 2026 GMT
Subject: CN=5f6712f6db287eee17348fd7e2e0479ad019bd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:c2:65:c9:b4:98:26:da:60:46:15:e2:71:
f7:e8:3f:8a:44:d9:64:b1:3e:9d:d8:66:0f:37:c7:
59:39:af:3e:3d:bb:1c:c9:d8:7b:77:4c:9a:a2:ec:
1f:46:dc:27:1c:d6:7a:ed:56:3e:a2:3e:11:87:3d:
64:d5:3d:e2:ab:3f:d5:5c:e4:b0:1b:30:99:d5:ee:
98:31:fd:9e:34:03:c2:77:9b:a7:54:39:09:9e:70:
35:20:21:92:0e:d1:20:3a:70:8e:52:e9:04:f8:98:
00:00:5e:e4:61:92:b8:02:1d:b6:fc:09:f7:a6:38:
1e:54:8d:9a:95:0f:c8:84:80:bd:d7:95:7f:42:7a:
85:26:e6:18:ad:c3:bb:9d:41:1b:59:3c:d0:5c:9a:
51:dc:a1:e9:15:f6:27:a8:a4:44:e3:d9:15:a7:57:
21:54:fc:2e:13:91:31:b9:0f:18:d9:07:e2:96:7e:
11:e5:2a:11:7d:5a:47:09:8e:0f:b4:00:dd:68:c7:
04:9e:a8:30:f7:14:e8:c5:bb:ae:17:c0:34:36:c5:
43:27:8a:23:c6:ed:0f:ab:84:d5:ea:84:da:93:7c:
2f:41:85:14:83:2b:e9:42:48:6f:09:e5:41:d6:40:
d1:7b:88:73:81:af:d1:58:8d:77:97:3b:2a:90:28:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:67:12:F6:DB:28:7E:EE:17:34:8F:D7:E2:E0:47:9A:D0:19:BD:7B
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e4:1f:d4:52:c4:91:d9:be:ee:d3:7c:43:21:e8:a8:42:86:
93:b2:72:63:35:f0:58:4d:fd:02:ad:47:4e:cd:d8:ff:35:22:
f5:9e:ac:0a:0a:94:10:e7:c7:21:2d:a8:dd:b3:59:25:24:7d:
53:67:2b:d8:a6:e1:a1:54:0e:1b:d7:c7:97:a6:a8:54:88:c1:
5d:8b:43:14:ad:74:27:7f:84:e5:8b:66:5f:43:35:3c:c6:8f:
f8:44:f6:49:7c:a6:9d:c4:27:29:e2:8a:1b:b9:0b:36:38:7b:
8c:2b:39:b6:85:65:57:44:c4:fd:b6:0f:f2:fe:d3:b1:bd:e9:
95:bd:ce:35:1d:d6:ad:bb:b7:4c:6d:78:0b:06:fc:0a:10:55:
0f:54:38:14:58:35:ca:b3:63:ea:3b:e8:e7:de:ad:51:80:a7:
7d:08:d9:28:f2:26:0a:16:6e:38:2e:bc:59:4c:94:80:ab:60:
f2:7d:4b:e8:6c:64:ee:21:aa:3e:62:f9:fd:16:21:86:33:aa:
40:93:31:79:f4:5b:0e:d4:1b:31:46:54:0c:e0:2c:57:5d:d2:
d9:5b:a3:da:d5:4d:c5:0a:ec:4e:f9:a4:de:ee:06:e9:9d:9d:
99:5e:01:59:d1:0e:ad:40:84:1d:1a:af:d0:b7:dc:e3:91:f1:
7e:94:84:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:26:11 2026 by rpki-client