Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
File: 3DC4_dBG72WGgJfwNrinyFVyqtA.mft (raw, json)
Hash identifier: o9C4+3UFHXYr6VwVAuhzkiYLf+h+F3fLkXai0eKhZ/o=
Subject key identifier: BC:6F:EA:37:70:92:65:19:62:5A:08:CD:14:3D:C1:9E:17:69:3B:67
Authority key identifier: DC:30:B8:FD:D0:46:EF:65:86:80:97:F0:36:B8:A7:C8:55:72:AA:D0
Certificate issuer: /CN=dc30b8fdd046ef65868097f036b8a7c85572aad0
Certificate serial: 019F916C33D9110C4326393F4F37DE968FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
Manifest number: 19C3
Signing time: Fri 24 Jul 2026 00:00:15 +0000
Manifest this update: Fri 24 Jul 2026 00:00:15 +0000
Manifest next update: Sat 25 Jul 2026 00:00:15 +0000
Files and hashes: 1: 3DC4_dBG72WGgJfwNrinyFVyqtA.crl (hash: 4ESMYIGoxPvj0RYEGrnajd4OvW9/Ch5JylCee3Yqut0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:33:d9:11:0c:43:26:39:3f:4f:37:de:96:8f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc30b8fdd046ef65868097f036b8a7c85572aad0
Validity
Not Before: Jul 24 00:00:15 2026 GMT
Not After : Jul 25 00:00:15 2026 GMT
Subject: CN=bc6fea3770926519625a08cd143dc19e17693b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:63:bd:a9:95:7b:ad:e8:c0:83:4a:c4:c7:
cc:ee:65:30:98:f4:99:55:d9:35:b1:27:02:5a:1a:
e5:9b:a9:ee:79:89:80:ec:d8:87:e1:87:6c:78:41:
4e:0a:21:40:ab:0f:b0:d5:da:ea:ec:ef:c8:ec:48:
cc:84:c0:a4:00:b7:00:09:65:78:89:44:c3:61:1f:
20:a6:7d:28:9d:6e:81:fd:e7:79:65:9c:dc:c2:c7:
f6:69:35:e9:4b:61:13:f6:ca:de:ea:bf:9c:94:0f:
d7:e8:92:ca:1f:ea:94:e1:49:cd:0c:92:15:15:3b:
ad:e4:a0:1c:44:b6:d4:0d:d5:f7:a1:cf:6e:99:87:
ac:14:58:6c:9c:ff:45:24:c9:8f:fd:4a:d0:c5:e0:
78:a3:22:1f:41:20:9a:4d:c7:08:99:60:f4:10:2b:
fd:63:7e:f8:4e:55:bc:03:05:83:42:64:2b:f7:df:
ff:16:e5:88:d3:5c:fb:d1:31:ad:df:a2:1b:1a:25:
99:4b:c3:74:8c:99:e7:fd:4e:ac:2f:ee:c2:a5:36:
8f:a9:1e:ab:95:f7:20:53:78:21:75:21:9b:ad:c1:
b3:a1:bc:37:6f:9d:b8:09:a0:cd:5e:dc:aa:2a:18:
8b:a3:c4:d6:3f:70:99:53:04:35:68:26:e7:d3:71:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6F:EA:37:70:92:65:19:62:5A:08:CD:14:3D:C1:9E:17:69:3B:67
X509v3 Authority Key Identifier:
keyid:DC:30:B8:FD:D0:46:EF:65:86:80:97:F0:36:B8:A7:C8:55:72:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ba:c5:43:33:a7:c2:3e:10:d6:74:f7:ec:4f:ef:ed:80:b4:
e7:22:d8:f1:13:06:ad:b7:7f:ff:87:b8:c4:c6:1f:69:38:e2:
ab:72:cc:c1:9c:ac:6e:f3:88:84:4a:f8:ee:0e:cc:e6:17:bb:
57:45:ce:6d:ab:ff:f8:45:c0:70:06:76:02:5f:0d:6c:2a:c3:
df:55:27:28:06:1a:62:2b:3b:f7:2a:75:23:d7:09:dc:13:8a:
39:8e:c6:73:1b:fb:0f:12:60:20:c8:ae:ea:68:f8:8d:a0:83:
ae:03:03:9e:b2:f8:d2:71:01:71:b8:59:a6:61:b4:4e:9d:0b:
07:5b:18:91:67:f7:8d:e0:58:2b:dd:cb:14:51:7a:dc:9d:59:
a5:ed:2c:c9:6a:f6:24:3b:78:ce:a8:27:46:c3:f8:11:aa:a8:
a7:25:45:a3:6e:48:97:b6:a8:24:50:e0:aa:14:f1:01:98:31:
da:8f:9e:9c:9b:a7:f9:da:c5:b3:91:93:10:e4:68:f3:59:c3:
73:96:fe:44:b5:8d:c3:ef:4b:4a:15:05:24:fa:2f:68:74:dd:
ea:b7:3e:08:d6:74:8c:61:69:ac:49:f2:37:4e:7e:0e:a6:00:
b9:06:d4:f1:b2:35:63:e9:b7:ab:e8:25:10:3a:da:66:d7:63:
c7:d6:3b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:55:01 2026 by rpki-client