Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: k0SwA3sW75hjUHdvrjj+JgQXNMy1QyYwRWCgtr4CQjw=
Subject key identifier: 65:C6:1D:5C:51:C2:D7:01:66:4B:96:22:80:05:6E:B3:8D:CA:B9:7D
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 019EBF236AFDA34C8322D102428253110081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 149C
Signing time: Sat 13 Jun 2026 04:00:29 +0000
Manifest this update: Sat 13 Jun 2026 04:00:29 +0000
Manifest next update: Sun 14 Jun 2026 04:00:29 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: ZKAM51vP9aY6O3+MZBAf4JXg4FoLpLhKsmGIcFwni+4=)
2: SV8q6Z5-8w1GEMHCKZorWE8eTtQ.roa (hash: Ewdpo+CTlyPEkAk0HFpeVmLoOfbSpUi2qqrFa/JWyEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:6a:fd:a3:4c:83:22:d1:02:42:82:53:11:00:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Jun 13 04:00:29 2026 GMT
Not After : Jun 14 04:00:29 2026 GMT
Subject: CN=65c61d5c51c2d701664b962280056eb38dcab97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:2a:a3:11:9c:a0:37:4a:02:83:c5:6b:23:
6a:29:b9:a9:aa:a4:70:0f:1f:34:7f:93:f8:b6:a3:
23:e5:af:b0:81:7f:cf:9e:5b:38:b7:cf:1c:39:75:
14:e9:a6:da:f0:06:24:54:1f:5c:a3:80:48:55:fd:
8b:ba:06:b0:ae:18:8b:b3:ee:3f:19:b5:dd:52:67:
8d:f5:f6:d2:b7:32:d4:2c:38:c5:d5:5a:73:59:14:
9d:4f:a3:e6:65:b8:89:d5:e1:6c:13:bf:98:e8:ff:
bd:c9:11:f5:2a:9a:b7:6c:7e:95:a2:36:67:62:68:
ff:7c:c7:21:c4:bb:26:4a:dc:e7:75:e0:85:09:38:
90:24:62:82:98:c1:ec:f0:b5:45:8f:b5:d4:82:df:
b6:e7:eb:7b:e3:54:7d:29:df:3e:12:ef:31:55:62:
81:50:aa:11:2f:75:3e:0d:53:d6:41:34:7b:0f:f6:
38:69:5e:6b:6f:48:08:8a:08:28:88:cb:0c:0f:d4:
a1:c8:09:e9:ed:d4:eb:98:d8:7c:dd:e3:c4:cb:d8:
b9:4c:07:64:c6:65:24:e6:dc:6d:f2:ff:16:c5:a2:
a5:8a:95:47:44:98:31:1c:01:a6:51:2e:0b:b3:5d:
de:ad:09:52:34:76:80:02:63:64:37:2d:cf:ac:02:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:1D:5C:51:C2:D7:01:66:4B:96:22:80:05:6E:B3:8D:CA:B9:7D
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:9a:3d:99:d3:a7:ee:b1:87:d4:03:df:6a:ba:d1:b5:9c:7a:
02:4b:93:5b:8f:d1:77:60:7d:f6:9e:c8:7c:9b:5e:15:c4:82:
3f:3c:2e:39:86:56:1d:8c:8a:ec:72:d3:7c:d4:59:00:e2:a2:
3d:94:58:5f:f6:42:d5:f7:fd:6e:f8:ef:a6:ce:f9:8d:31:67:
41:4e:6b:4e:b8:fc:32:fd:b3:33:8d:12:12:fa:f6:64:46:bc:
d6:b3:a6:3a:64:dc:e2:7b:6c:aa:95:a2:0a:38:c3:26:f6:e4:
ed:e4:11:d3:44:8e:8e:31:2b:33:ea:1a:f8:43:e9:3c:36:d4:
a0:b5:55:6d:c6:6d:26:2c:24:f4:5c:cc:18:f9:9c:dc:f9:69:
d8:a3:70:c4:25:f9:f5:2d:ba:67:36:17:35:27:b0:6e:3d:4a:
3d:3b:36:bf:41:0c:55:64:14:39:3f:9a:63:ac:e8:df:1a:b6:
36:1b:fb:f7:da:ac:db:7a:31:19:dc:16:58:b4:8b:29:b7:b0:
8e:6f:fd:a5:82:9c:0d:42:3d:94:e4:b4:af:bf:fe:2c:d9:88:
a9:b4:f5:fa:25:fb:e2:4f:b0:6f:66:43:5a:3e:5b:ec:f2:90:
cd:ee:9d:5e:e4:68:27:23:68:a9:5f:30:27:a3:3a:fc:dd:fa:
41:24:1f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:53 2026 by rpki-client