Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: wli/uqLYnLao66xBlLw3TvLSe9oaDHr2Xjyb6JwTVQY=
Subject key identifier: 95:E0:1B:01:1A:89:D0:7A:4F:03:5C:F1:72:B7:5D:45:2C:97:01:53
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 019F8EA2B833191564E866060BE204882D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 103D
Signing time: Thu 23 Jul 2026 11:00:56 +0000
Manifest this update: Thu 23 Jul 2026 11:00:56 +0000
Manifest next update: Fri 24 Jul 2026 11:00:56 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: FDoFcWkuCkha1Zu43q6rbCCFf2TeevijKo4q9dQwrqQ=)
2: IFcPSJLrXOIb360qpvfjslM8AeU.asa (hash: Uoj3vnQ4WI4zOKZ/VBdpJT4g8J+jbJ0SehrMNsQWEOg=)
3: mN6LPum92-oppYTfVnse9pFdGGY.roa (hash: Az1RSnzhomoH0PRWVFUSJEmI0WtwP1548LAxILCV7N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:b8:33:19:15:64:e8:66:06:0b:e2:04:88:2d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Jul 23 11:00:56 2026 GMT
Not After : Jul 24 11:00:56 2026 GMT
Subject: CN=95e01b011a89d07a4f035cf172b75d452c970153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:fb:0e:91:27:05:b4:ee:c1:d4:d1:43:dd:
73:ea:fe:8e:85:d8:27:59:34:7f:1e:3a:96:8c:5f:
75:5c:ae:03:5c:84:5f:85:9f:56:7e:f5:83:32:38:
f0:8b:8d:b8:62:00:50:0e:45:9a:da:19:b9:43:1d:
08:5b:69:7b:bc:74:c1:a0:11:f7:33:64:f4:67:6e:
46:4f:50:50:e3:d9:de:45:27:74:02:df:67:e3:40:
99:d1:29:e3:8d:11:71:48:d3:96:8f:62:8a:f8:7a:
0c:75:3f:24:a2:4d:0c:db:93:c4:53:d5:f7:db:a4:
ff:d4:10:64:df:20:ac:50:c4:a4:da:5a:80:3e:b5:
8d:0b:2f:be:6b:99:de:64:de:e2:44:54:29:06:28:
b9:c1:85:b6:22:01:b4:83:cd:bd:21:ec:6e:73:b2:
82:a2:5b:3b:ec:4a:ab:8f:5f:e4:27:7f:f9:f4:3f:
3d:1a:b4:d6:26:74:38:bf:de:2a:a2:e0:69:22:92:
e6:6e:3b:26:d4:26:58:60:04:d8:a2:65:65:b8:7c:
b5:5b:74:14:8f:95:d4:a5:6d:13:9f:05:70:79:b5:
0e:76:a2:ac:89:a8:77:c4:7f:5d:e8:20:dd:07:59:
d1:be:e1:51:e1:e4:bf:c9:ca:cf:2d:c9:63:16:c9:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E0:1B:01:1A:89:D0:7A:4F:03:5C:F1:72:B7:5D:45:2C:97:01:53
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b3:0e:42:64:a0:8c:00:5b:21:e5:86:11:c1:d5:61:57:2b:
3a:12:06:d7:24:06:78:d5:18:38:5c:43:7d:4f:da:80:53:62:
52:a6:5b:8b:8e:7a:a3:9d:c2:5a:af:19:70:27:5f:da:9f:51:
fa:0d:39:75:17:ca:2c:8d:57:94:29:56:58:85:6a:ef:06:dc:
ac:d1:fd:3c:e0:e0:1a:08:05:c3:ea:32:2d:87:35:88:5c:9e:
9d:32:b4:c2:f9:ac:55:1d:0b:48:89:31:6a:c3:20:3a:57:f0:
5a:54:a5:76:49:43:49:75:1f:21:9b:5a:51:08:d7:38:0d:f3:
18:36:e0:ea:1a:c4:28:8a:85:62:63:84:50:a9:41:3f:8f:85:
e1:a9:6a:b8:35:d6:c8:50:25:1e:68:d2:dd:62:b0:e1:94:06:
87:51:20:e1:ca:95:00:ec:f0:fa:3d:7a:3c:99:4a:51:43:e5:
74:d8:fa:17:aa:e4:d3:1d:89:eb:18:57:b9:5c:53:8f:fa:7d:
3a:19:b9:e7:c0:82:e3:ae:85:ba:f4:b6:5f:ff:7f:41:20:9d:
44:95:0d:59:27:2a:c6:18:c6:eb:d2:dd:eb:22:47:00:d3:e5:
90:28:f9:04:df:1c:7e:e5:e2:bf:bf:38:55:59:80:37:73:e2:
05:80:ec:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:43 2026 by rpki-client