Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: FI/8zsjC5xJvPSnZXpRqucbK7JL81K3vXpomm/KKaPY=
Subject key identifier: 8E:AB:2D:EF:EC:BE:E1:98:26:BC:C7:62:B8:3F:4E:19:11:72:E9:18
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 019EBEEC36B524736C779E2281D6C04D8873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 108A
Signing time: Sat 13 Jun 2026 03:00:11 +0000
Manifest this update: Sat 13 Jun 2026 03:00:11 +0000
Manifest next update: Sun 14 Jun 2026 03:00:11 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: qayzD3xE1+QRAhUHvp/U/dGsnXz05seweEe8/DkX/ho=)
2: TmN-dr45oTfR8pksVoCNgmVOGLU.roa (hash: vnALMBgUiF5Ge/N8pDhGThN8hB7OAP8KLzkie3WI7N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:36:b5:24:73:6c:77:9e:22:81:d6:c0:4d:88:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Jun 13 03:00:11 2026 GMT
Not After : Jun 14 03:00:11 2026 GMT
Subject: CN=8eab2defecbee19826bcc762b83f4e191172e918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:8f:38:e3:30:16:4b:18:17:d5:81:13:54:
0e:63:15:a4:de:22:c0:fd:94:c3:56:65:8f:25:08:
59:03:eb:22:d6:1a:84:67:23:f2:19:6d:c8:63:8e:
ab:33:2e:74:a2:53:a1:f5:17:d3:07:79:d5:7e:63:
a3:7c:c1:61:4a:0d:43:b4:b1:a6:47:19:7c:76:fb:
51:a9:b4:ed:60:07:ee:0b:15:6e:bc:d1:55:21:69:
13:92:a9:3d:5b:d8:f0:39:ae:b6:03:33:4c:f0:31:
1d:2f:f8:42:7d:cb:d5:1c:ea:ed:75:ed:d7:1b:53:
a9:d7:46:5b:09:53:32:40:a4:66:e4:b9:6a:bb:57:
ca:28:3a:36:bc:09:06:23:f3:10:cf:ee:4f:b3:61:
be:e8:04:5c:af:56:74:30:c1:38:44:98:5c:ca:9f:
04:71:b2:55:23:b6:71:14:c2:32:0f:e8:4b:f5:38:
78:9b:66:c4:50:bd:3a:81:34:3f:b0:7c:18:f0:d7:
07:9a:3f:dd:79:06:17:a4:87:17:db:eb:92:74:82:
cc:75:32:29:09:cd:39:e5:3c:f9:39:6f:6e:ce:6c:
d0:95:f4:32:83:1f:8f:2d:98:cc:12:5a:f2:d5:a8:
f9:4f:41:02:e5:7d:26:25:d0:8d:92:a0:0b:de:b4:
ba:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AB:2D:EF:EC:BE:E1:98:26:BC:C7:62:B8:3F:4E:19:11:72:E9:18
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:85:40:c3:ba:c4:30:ec:dc:61:1f:58:e6:ab:77:44:47:94:
67:0d:30:e8:d5:e3:66:7f:fb:81:60:b2:fb:c3:9b:07:3d:ea:
b0:98:20:ac:b1:bc:f1:c7:e4:1d:4d:1a:3d:76:41:cb:8d:44:
95:06:f4:f3:57:03:da:73:f9:cc:00:7f:44:5d:cc:09:ff:8d:
ac:da:b9:d5:69:eb:b7:40:32:32:e4:03:9f:d2:dd:ef:98:68:
5a:84:90:af:60:0a:07:58:1e:22:82:8d:3a:85:75:f3:15:f1:
9b:f3:27:ee:31:58:cb:2a:d3:05:d2:39:65:f6:eb:b6:b5:97:
a2:42:00:23:50:7c:7b:6d:2b:bd:76:b0:39:6f:90:77:f4:59:
21:bc:80:05:ba:a6:0d:95:ec:81:87:1e:79:d3:8e:4d:b3:04:
58:c2:e4:6c:61:c9:fb:15:ba:72:6a:2f:7b:b5:e4:1c:32:74:
09:c2:d4:23:12:7a:1e:b9:3b:51:e2:af:97:83:67:ba:c3:5e:
52:ab:cc:d0:f8:45:63:85:36:b9:90:ea:e8:4d:f7:15:43:7a:
04:a6:be:02:c6:95:5d:53:3c:78:dc:84:19:df:e5:d6:dd:48:
e2:13:9e:f3:fc:20:76:59:49:10:b3:8b:5e:28:e1:8f:44:46:
12:95:72:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:18 2026 by rpki-client