Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: 30xALkPExnFAsoFuCDeIe5BckmiimY3Zp3xTz5MSP0k=
Subject key identifier: 64:1C:8D:CA:26:A1:4B:D9:79:76:6B:EC:31:E7:0F:E1:A1:FB:D4:BF
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 019EBF9106B9B895DE392E90FAD9CF249F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 0353
Signing time: Sat 13 Jun 2026 06:00:13 +0000
Manifest this update: Sat 13 Jun 2026 06:00:13 +0000
Manifest next update: Sun 14 Jun 2026 06:00:13 +0000
Files and hashes: 1: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: OAT8s5Swiqoso8qaVpJG246wT3bN+E0Ww64mfriOWIc=)
2: k9k26h_wk2KwXBbexASmBckIdio.roa (hash: IkgLudWAy48LS7n3a0wG6CHVGFDidThlfHrJKCCT1wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:06:b9:b8:95:de:39:2e:90:fa:d9:cf:24:9f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Jun 13 06:00:13 2026 GMT
Not After : Jun 14 06:00:13 2026 GMT
Subject: CN=641c8dca26a14bd979766bec31e70fe1a1fbd4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:48:cf:55:92:b7:04:cc:19:7b:bc:f2:d5:
0e:d4:2f:97:56:e5:fd:e4:7e:e4:58:1f:9c:f2:e7:
82:60:c5:77:5c:a4:b6:83:0a:be:b9:6b:b3:0f:d3:
f3:94:88:63:34:d1:26:f9:8a:b4:c3:09:49:21:a9:
9d:0c:72:5a:ec:d5:85:cc:b2:89:fd:36:67:7e:aa:
2b:51:33:8d:75:4d:11:6d:f8:1c:be:7d:66:41:32:
fc:f6:a0:7b:bd:5b:9e:0b:33:50:40:75:28:ea:da:
b3:a3:55:16:32:d6:0e:e9:aa:5d:6e:32:19:0a:49:
53:c6:98:9a:e7:6b:08:86:ef:f3:e5:50:52:ef:99:
5e:af:7d:65:6d:63:97:c2:d6:f5:b2:bc:cb:fc:30:
31:2b:70:08:5f:99:0d:7f:17:b0:a4:97:57:b1:29:
c3:68:5f:3e:76:85:2c:5f:62:ac:4e:0a:af:6c:f3:
68:22:e5:85:90:29:d1:8d:df:45:25:07:96:3b:94:
f2:ed:b5:3f:2e:9a:00:fa:fe:3f:a6:96:32:3b:7f:
05:8d:6b:98:62:10:ec:da:d5:fe:f0:65:15:12:9c:
f6:ef:34:ed:8b:8b:bf:61:13:ad:cb:c5:5c:75:08:
f3:96:2e:59:0c:76:86:83:7a:00:3b:69:9a:8b:22:
4c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1C:8D:CA:26:A1:4B:D9:79:76:6B:EC:31:E7:0F:E1:A1:FB:D4:BF
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:58:ce:b3:04:ed:a0:7a:ae:e4:6d:83:7b:7f:f8:c2:0c:e1:
0c:67:c0:7f:f3:e9:c9:44:76:10:cf:dc:7b:df:72:d1:1e:d8:
20:a5:96:85:9d:6c:c3:ff:5b:69:84:21:94:82:cb:5d:47:fa:
2f:88:8b:d0:9b:e7:71:15:c8:c3:69:3e:92:89:2f:f3:e4:25:
59:ef:2c:e7:f3:67:f3:51:56:6b:5f:57:57:f5:c4:8c:20:4b:
13:a8:91:91:01:c7:dc:b0:d2:60:ca:de:0b:b1:df:d2:6c:2f:
01:5e:ec:59:7b:01:41:cb:da:67:a7:00:16:4d:e7:34:31:0f:
d3:a1:2a:84:e1:85:9a:b8:0b:4f:89:b0:d1:35:18:7c:38:2a:
3f:61:08:5c:58:d1:01:df:79:9e:6d:95:05:6c:5e:3b:3e:98:
eb:61:6d:4a:09:30:e1:52:18:35:3b:19:da:2a:73:d2:31:cd:
92:5b:4d:f0:87:5a:fe:ff:1f:90:49:a9:26:d8:ad:89:89:a6:
5e:81:9b:dc:b1:0e:1f:ff:9c:f7:25:b2:c5:c9:8a:67:7c:e2:
54:59:a9:34:ef:01:a2:58:91:86:9c:23:47:7c:66:05:4e:ff:
8b:42:e0:bc:5e:ea:56:01:4c:63:43:57:49:d2:82:87:9b:a5:
6e:05:31:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kQa5uJXeOS6Q+tnPJJ+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTQzN2JjYWQ5YmFjZmEzYjc2YjdkZDA0NTQxMzNmYjRk
OGNiM2UwHhcNMjYwNjEzMDYwMDEzWhcNMjYwNjE0MDYwMDEzWjAzMTEwLwYDVQQD
Eyg2NDFjOGRjYTI2YTE0YmQ5Nzk3NjZiZWMzMWU3MGZlMWExZmJkNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQtIz1WStwTMGXu88tUO1C+XVuX9
5H7kWB+c8ueCYMV3XKS2gwq+uWuzD9PzlIhjNNEm+Yq0wwlJIamdDHJa7NWFzLKJ
/TZnfqorUTONdU0Rbfgcvn1mQTL89qB7vVueCzNQQHUo6tqzo1UWMtYO6apdbjIZ
CklTxpia52sIhu/z5VBS75ler31lbWOXwtb1srzL/DAxK3AIX5kNfxewpJdXsSnD
aF8+doUsX2KsTgqvbPNoIuWFkCnRjd9FJQeWO5Ty7bU/LpoA+v4/ppYyO38FjWuY
YhDs2tX+8GUVEpz27zTti4u/YROty8VcdQjzli5ZDHaGg3oAO2maiyJMTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQcjcomoUvZeXZr7DHnD+Gh+9S/MB8GA1UdIwQY
MBaAFP/kN7ytm6z6O3a33QRUEz+02Ms+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zZDQ4MjctM2YxNC00MzBlLTljZWUt
ZDEyMWM1YTc1ZDk4LzEvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8zZDQ4MjctM2YxNC00MzBlLTljZWUtZDEyMWM1YTc1ZDk4
LzEvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUljOswTt
oHqu5G2De3/4wgzhDGfAf/PpyUR2EM/ce99y0R7YIKWWhZ1sw/9baYQhlILLXUf6
L4iL0JvncRXIw2k+kokv8+QlWe8s5/Nn81FWa19XV/XEjCBLE6iRkQHH3LDSYMre
C7Hf0mwvAV7sWXsBQcvaZ6cAFk3nNDEP06EqhOGFmrgLT4mw0TUYfDgqP2EIXFjR
Ad95nm2VBWxeOz6Y62FtSgkw4VIYNTsZ2ipz0jHNkltN8Ida/v8fkEmpJtitiYmm
XoGb3LEOH/+c9yWyxcmKZ3ziVFmpNO8BoliRhpwjR3xmBU7/i0LgvF7qVgFMY0NX
SdKCh5ulbgUx5w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:18 2026 by rpki-client