Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
File: 3Rc4MRWBIorSh1OUS-i88hafq6k.mft (raw, json)
Hash identifier: ummcIhR9gL5VT65hVJS4peQTbby3VGh0i4HGG46ZTfA=
Subject key identifier: 19:40:4A:B5:1A:45:34:6A:E1:D2:B7:CA:3E:98:5E:27:1A:65:F3:92
Authority key identifier: DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
Certificate issuer: /CN=dd1738311581228ad28753944be8bcf2169faba9
Certificate serial: 019F90FF71E5447C08F677619723DF2AA497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
Manifest number: 1167
Signing time: Thu 23 Jul 2026 22:01:27 +0000
Manifest this update: Thu 23 Jul 2026 22:01:27 +0000
Manifest next update: Fri 24 Jul 2026 22:01:27 +0000
Files and hashes: 1: 3Rc4MRWBIorSh1OUS-i88hafq6k.crl (hash: EAht/Rb+ia8ULY6bMxWBcY8fNGP3RppCQBZYyjwd+jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:71:e5:44:7c:08:f6:77:61:97:23:df:2a:a4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1738311581228ad28753944be8bcf2169faba9
Validity
Not Before: Jul 23 22:01:27 2026 GMT
Not After : Jul 24 22:01:27 2026 GMT
Subject: CN=19404ab51a45346ae1d2b7ca3e985e271a65f392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:fb:c1:8e:72:fe:0a:47:d5:6d:d4:8d:10:
ed:ae:ac:51:e8:d3:a8:94:69:22:77:78:35:df:c0:
a5:40:7f:b8:ed:17:de:dc:97:2f:c3:98:8a:77:28:
8c:3f:ef:3d:4c:0f:bf:60:c3:9a:d9:0c:f3:3e:c1:
f3:d0:03:98:3b:d6:39:3c:03:ca:7c:5d:ef:24:e3:
52:8c:81:2c:aa:a3:b4:f2:d8:c4:73:25:56:17:ed:
30:de:b5:8a:c3:28:c8:24:08:78:26:03:67:c7:f0:
85:c3:9f:f3:3b:fa:e4:89:a2:32:49:a9:06:b1:58:
4a:64:2a:dc:e5:31:87:6b:c1:a3:4b:db:88:d6:21:
eb:c9:a2:70:9a:08:d2:bd:dc:df:e7:fc:da:34:e2:
ea:d1:75:2b:ce:df:35:85:d1:d2:2f:71:2e:20:38:
9b:bc:9e:c8:b4:af:27:49:89:c5:62:4d:db:e6:22:
9a:32:77:1e:0e:53:59:f6:1b:42:65:53:bd:a7:59:
09:e8:30:a2:fb:93:d8:bf:e1:8a:ef:ba:ae:47:94:
11:e1:d9:4b:28:89:df:ee:d0:d9:7d:db:52:4d:2f:
40:78:d8:d6:0b:81:4e:f6:9a:8d:97:22:9c:df:b9:
fb:e2:7f:43:89:60:c6:8f:72:22:05:da:bc:b4:8e:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:40:4A:B5:1A:45:34:6A:E1:D2:B7:CA:3E:98:5E:27:1A:65:F3:92
X509v3 Authority Key Identifier:
keyid:DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d2:29:13:25:76:99:b3:b7:49:11:4b:e9:7d:2c:6b:13:8a:
7a:8a:65:93:cc:f1:3c:ed:59:83:cf:30:1e:ae:77:12:b8:e1:
82:1c:60:02:74:d8:c3:56:aa:19:af:d6:fb:e7:2e:9e:99:0c:
95:d9:59:6a:f8:22:cc:20:52:69:1c:41:62:05:8c:60:0a:c7:
4d:4d:3d:00:2a:ed:59:cf:59:37:7d:c3:e7:2a:92:f2:d3:63:
11:0d:cd:c3:0f:9b:6e:b7:13:00:5d:bd:d7:ab:3a:65:7b:c4:
53:56:1b:cd:02:d3:02:3d:2f:63:56:c3:3b:ef:a1:ab:29:30:
9f:31:a7:51:99:94:b4:0b:84:be:f9:37:e2:6f:da:1a:8c:ec:
ea:14:fd:f8:1a:d6:e7:2a:71:66:9e:30:6e:5e:7e:97:20:81:
91:1d:9c:1d:ca:9c:2b:d4:18:30:bb:f4:86:b9:82:33:a5:30:
1e:3b:12:5a:9d:fd:55:49:d4:bf:b3:fa:c8:37:be:da:ec:d1:
7f:33:ad:4c:ba:00:ee:74:78:4a:66:8b:72:33:02:f4:92:14:
cb:69:ab:dd:ba:ed:2c:79:aa:b5:48:e1:9c:c0:5c:44:ea:1b:
ba:9e:84:74:ad:d0:ff:cf:13:32:5c:35:32:61:3b:50:58:cc:
91:87:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:38 2026 by rpki-client