Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
File: 3g1q1z4YioWTcrYTo6JwS5wzD-0.mft (raw, json)
Hash identifier: a+5jQfi3oByPefOobpNafu8vRCthlHgoPaCvmnTVbf8=
Subject key identifier: CA:02:47:96:D5:73:5E:9D:50:66:69:66:A0:6A:04:CB:09:87:57:F9
Authority key identifier: DE:0D:6A:D7:3E:18:8A:85:93:72:B6:13:A3:A2:70:4B:9C:33:0F:ED
Certificate issuer: /CN=de0d6ad73e188a859372b613a3a2704b9c330fed
Certificate serial: 019F8F7E3A52FAABFB37CF2CB107BE46ABC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
Manifest number: 02C5
Signing time: Thu 23 Jul 2026 15:00:41 +0000
Manifest this update: Thu 23 Jul 2026 15:00:41 +0000
Manifest next update: Fri 24 Jul 2026 15:00:41 +0000
Files and hashes: 1: 3g1q1z4YioWTcrYTo6JwS5wzD-0.crl (hash: n6NM6Cq1zf25Zm681v1UyhDXOzyS4ZoRuAIrkoPJpio=)
2: xlffALi4uBOFmreXz8haweCZNck.roa (hash: 3wXdfGigS71aUdPX9RI8m2mtTK/gKdzEh9NGf1XtL2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:3a:52:fa:ab:fb:37:cf:2c:b1:07:be:46:ab:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d6ad73e188a859372b613a3a2704b9c330fed
Validity
Not Before: Jul 23 15:00:41 2026 GMT
Not After : Jul 24 15:00:41 2026 GMT
Subject: CN=ca024796d5735e9d50666966a06a04cb098757f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f9:41:56:66:95:97:d1:d6:9b:e5:95:f0:89:
f0:db:67:f4:22:18:83:08:ae:f3:5f:8b:d5:8b:49:
fc:93:2e:58:92:2f:1b:2d:83:20:5d:cb:c9:f0:c1:
2e:d3:5a:36:8f:2b:c5:d6:36:eb:66:92:ff:b7:8d:
19:a9:38:ba:c7:93:51:ff:7b:b1:4a:98:69:bc:b5:
e4:23:80:e4:45:ba:9b:6a:49:50:81:95:af:e9:6f:
a5:b1:31:84:60:6f:32:6a:4d:b1:a2:02:7d:d9:fb:
70:8d:3d:7f:46:e1:75:ee:db:87:e6:35:ad:59:c3:
ba:fb:d8:57:d6:b4:24:7e:3d:82:56:fb:c7:65:30:
f6:b6:25:ba:e6:09:78:93:75:d8:02:59:13:c9:60:
b9:b3:c0:b4:09:06:3e:69:4f:ca:d8:4d:0d:c3:67:
43:f5:e5:7f:a1:21:a0:61:01:e3:fb:e3:8f:7a:de:
41:10:2c:2d:6e:95:88:56:e5:06:26:a8:8a:f5:b0:
4c:87:56:28:25:41:69:31:05:dc:89:48:c9:c5:af:
f6:e9:c9:18:97:b0:1c:50:8d:b5:2e:c2:ed:26:d7:
59:cd:56:47:a3:e4:3c:ca:6e:8e:11:b6:c2:8d:99:
a2:f5:b2:d6:a1:1d:0d:67:3e:b4:13:f7:38:06:9c:
69:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:02:47:96:D5:73:5E:9D:50:66:69:66:A0:6A:04:CB:09:87:57:F9
X509v3 Authority Key Identifier:
keyid:DE:0D:6A:D7:3E:18:8A:85:93:72:B6:13:A3:A2:70:4B:9C:33:0F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:92:bb:71:95:13:8e:a6:8b:2b:dd:d5:80:22:49:cc:c6:b1:
2a:28:65:77:53:7d:35:72:29:a3:d7:a4:46:a7:ba:27:2c:b0:
ac:a3:5b:75:c9:a9:23:e8:07:96:5f:25:36:c1:57:03:aa:4b:
5c:62:78:fc:59:12:96:44:de:d5:29:f7:60:de:47:03:1f:0d:
78:cf:83:14:77:21:c6:66:63:9f:58:7f:4f:f2:d3:14:2a:8c:
fe:f5:d8:62:51:5a:ee:91:f5:1c:d1:e6:52:3b:68:16:4a:5f:
31:5f:55:df:ce:2f:f9:b7:dc:08:20:db:84:7d:ab:e3:8f:82:
7b:67:5b:c3:5c:bc:50:03:c3:b3:1f:86:fd:fe:88:08:1c:43:
f1:30:e7:9d:07:ce:9f:03:bc:1c:67:50:7f:b5:41:01:dd:60:
00:4e:50:55:50:f9:d5:f3:4d:74:4a:a9:76:01:b4:8e:93:7c:
93:97:58:1c:47:db:0f:78:33:29:65:fb:fc:d7:3e:6d:18:f6:
0c:4d:f4:ac:07:f1:b6:43:ce:1d:9d:20:49:dc:89:73:6b:43:
eb:52:e0:6c:e6:30:e9:1a:55:e8:54:36:1a:cb:33:f3:da:68:
05:31:ea:b5:f7:a5:2c:3a:96:51:05:11:d8:1d:03:b4:6b:ed:
f0:0b:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:57 2026 by rpki-client