Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier: n748AGKtGeAIAwzfOhKfFBiF07JFzi1y6+SiYXKIuGc=
Subject key identifier: 6A:96:C9:80:BE:40:95:4C:C7:44:3B:18:04:98:31:53:4D:44:A0:AB
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 019EBE47A09804FAB6244359B09A7FC0A9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number: 08C2
Signing time: Sat 13 Jun 2026 00:00:25 +0000
Manifest this update: Sat 13 Jun 2026 00:00:25 +0000
Manifest next update: Sun 14 Jun 2026 00:00:25 +0000
Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: D8awr92jVEbBjDo1FwE2eDpiXw/OtftfALLo7rbE0jc=)
2: _sKUqr_T2WU5wpJt5pENqGxaGNg.roa (hash: 26WyPtt0JWgZh/PV/eTd/0WIUbfzzYa6z8NjLk7cJ+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:a0:98:04:fa:b6:24:43:59:b0:9a:7f:c0:a9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Jun 13 00:00:25 2026 GMT
Not After : Jun 14 00:00:25 2026 GMT
Subject: CN=6a96c980be40954cc7443b18049831534d44a0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:30:88:77:34:85:9b:7c:aa:ca:69:ab:fa:
cb:e5:6e:fc:0b:b5:83:a6:59:88:a2:5a:3e:f9:cb:
d9:bc:01:b2:72:91:e6:e5:ea:54:87:3f:dd:01:6a:
2e:b6:d5:0b:af:2c:a2:5e:d7:df:54:2d:48:2e:67:
03:66:81:84:30:0f:cb:c2:21:08:0a:80:5a:d3:f1:
0c:dc:30:20:80:e6:52:cb:9f:15:4e:f2:6f:ce:0d:
c5:8d:b6:41:c4:51:f4:db:16:71:e3:33:39:80:d0:
56:9c:44:8d:15:33:26:8f:9f:93:a9:f4:ba:56:d0:
99:36:75:a3:3e:7d:9e:e2:38:d3:bb:bb:19:fc:3b:
65:96:2e:6e:d2:2f:d4:ea:5b:da:de:a3:a2:3f:aa:
58:91:28:95:e3:48:80:26:1c:4d:33:91:2b:d8:f9:
f4:b9:af:a5:ad:4e:4c:fb:fb:97:e9:79:26:70:d9:
e5:e6:b4:53:89:d7:b1:09:89:45:1e:3c:18:2d:e3:
68:4a:4e:32:00:4e:64:81:0b:96:b3:77:7e:d5:8a:
89:0f:7a:73:19:36:96:9d:b2:d4:41:14:7b:1a:78:
7c:e7:e2:0a:e5:d9:09:25:36:66:dd:f3:28:e7:d6:
3f:be:f9:b8:d8:70:76:6e:2a:cf:40:3b:ba:f4:ba:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:96:C9:80:BE:40:95:4C:C7:44:3B:18:04:98:31:53:4D:44:A0:AB
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:42:2c:0d:ed:7c:f1:68:b6:ea:6e:ea:37:f9:96:99:7f:39:
d7:40:5f:38:74:e5:c9:4d:68:ae:9d:ac:5e:95:d2:6f:f4:ff:
70:51:db:4e:f1:e5:d5:cf:d2:f0:55:2d:ff:1f:bd:ef:5d:ef:
a5:93:8e:63:b6:18:3d:b9:3e:66:e5:52:c3:9b:c2:52:da:bf:
be:8a:96:ef:1b:09:e7:e9:e8:9b:d4:4a:da:13:34:e0:f6:59:
15:77:12:2e:9b:86:2c:a8:3e:9a:0c:56:cf:02:f6:cf:6c:6f:
ac:2d:da:4f:1c:7a:c8:bf:d5:a8:26:09:2e:54:a4:ec:50:3d:
33:ee:be:bb:3a:65:d4:fd:2a:ec:a2:db:30:3a:a8:e8:21:d4:
d2:57:ba:65:eb:92:fb:4e:d8:6c:66:08:6f:f7:63:ec:fb:93:
01:6d:a1:15:d1:74:1d:35:db:a0:ee:44:ba:9c:56:45:dd:c6:
85:5e:28:5c:49:65:d0:70:fa:a1:01:0a:ca:30:a9:0e:0f:98:
63:a9:8b:a6:26:1e:90:93:46:71:33:17:b7:5c:28:d5:b7:39:
0c:2d:16:bd:89:f5:ad:2e:79:28:43:fb:e9:1a:37:38:93:5f:
3e:44:d2:be:89:e7:ae:fe:38:92:dd:b4:0e:c8:a0:f3:e7:59:
9f:6c:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:03 2026 by rpki-client