Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
File: 2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft (raw, json)
Hash identifier: uRB9UqbA1UWbIsZVr4GTwd0JRSRo78lzyhv0Og5QkzU=
Subject key identifier: 4E:7C:F3:B7:22:4D:A2:D4:3C:61:0A:80:C1:E4:70:6B:57:77:74:99
Authority key identifier: D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
Certificate issuer: /CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Certificate serial: 019F8F7EAC2D9CE5C74FABA5F9B5749C93C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:11 +0000
Manifest this update: Thu 23 Jul 2026 15:01:11 +0000
Manifest next update: Fri 24 Jul 2026 15:01:11 +0000
Files and hashes: 1: 2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl (hash: CKBHTR+GP7F+CEW1Z0K3REQiKLFCzE5VV22Nlh1xV2I=)
2: 5Z95gUiSdOG4r_uzAiN80rlQr-Q.roa (hash: 7yWAM4rRw5M/JV2A3HQ3yWCJTTzj2IN/RNPOITjQ4mE=)
3: EycWZ_dfGLG-EqHrgSZrTtUENKs.roa (hash: KJ1RAPm5hecF2qlfjfmX1AbYuEVtEPM/dltRx7gtvV8=)
4: JY1qhMWeHgfaGacafAu9A8pqPOU.roa (hash: vSlOo61MyUjunpp23wCdHaI75o9KFjuwDlia3rSNbp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:ac:2d:9c:e5:c7:4f:ab:a5:f9:b5:74:9c:93:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Validity
Not Before: Jul 23 15:01:11 2026 GMT
Not After : Jul 24 15:01:11 2026 GMT
Subject: CN=4e7cf3b7224da2d43c610a80c1e4706b57777499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:5e:e3:ee:ef:04:b3:ed:0d:da:8b:e5:1a:
5f:2f:84:75:6b:46:49:1b:cf:e2:f8:28:e3:f3:2f:
97:1f:30:25:c1:64:94:f5:62:1f:7b:ca:d8:f1:02:
e6:98:0b:7a:a4:77:09:2c:bf:bf:7b:67:87:25:3b:
6b:53:3e:3a:a0:66:80:43:81:59:7e:c9:53:72:95:
57:86:d0:f2:dd:60:60:05:0f:cd:62:bb:46:7b:9f:
f2:12:02:9b:8c:4c:33:1d:79:aa:6d:63:de:72:7a:
41:5c:01:c9:a1:87:c3:2d:2b:d7:ea:6c:62:f7:d3:
b2:dc:1b:ed:4b:25:07:f9:10:2e:37:13:16:71:3e:
90:bd:94:bf:63:7f:17:23:bb:ee:57:f6:96:7c:0f:
3e:dc:53:a3:5a:5a:bb:ba:32:82:93:33:9b:86:4b:
cd:e7:5a:5c:ef:db:c9:8d:a1:e9:78:8f:4a:3d:38:
d5:bf:1d:27:9a:e7:b7:77:d0:c6:ee:7d:a5:57:3e:
f2:d7:f2:95:00:81:13:7b:b2:78:7b:c8:3b:4b:25:
5c:99:f5:d8:29:75:06:dc:e5:84:6d:12:a8:30:58:
63:54:bb:2f:60:36:13:14:92:cf:c3:11:35:f7:30:
b9:66:3a:0a:a4:6a:54:bf:46:c8:7d:e4:9a:77:8a:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7C:F3:B7:22:4D:A2:D4:3C:61:0A:80:C1:E4:70:6B:57:77:74:99
X509v3 Authority Key Identifier:
keyid:D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:46:14:ce:21:10:a1:52:20:3c:07:c4:0a:90:ea:c7:17:f9:
06:2e:a7:6f:14:dd:d0:42:46:9f:68:2d:32:dd:52:68:a1:13:
23:1e:44:0e:09:78:a4:af:02:ec:e2:4b:2c:d8:fc:c9:4e:d0:
00:91:ca:5d:5b:5c:d2:73:23:be:10:58:35:1c:fc:4e:c3:db:
e2:91:96:d4:78:29:0f:58:1d:42:f0:7e:2e:95:3e:4b:1c:bc:
01:b1:ea:2f:32:17:6f:1f:cd:ef:ee:32:35:f7:fa:fa:ac:9f:
07:19:1f:fb:9f:5b:80:3e:a6:bb:a9:76:63:8e:af:22:86:b2:
5c:4a:86:d8:0f:bc:fc:b1:f4:b6:51:5d:34:ac:6a:84:c9:0f:
a6:6f:ba:c6:e3:b1:7f:7f:11:f2:61:ab:8f:46:12:63:98:61:
c7:88:99:e5:cf:35:55:12:bf:0a:73:4f:69:64:d0:60:22:56:
da:16:c9:2e:07:77:cc:1b:35:0f:09:35:27:03:c6:eb:74:e4:
5b:10:d5:10:0a:a4:70:bc:8e:9e:12:92:02:c0:f7:e0:0c:0a:
87:92:81:e5:8b:b1:db:27:42:73:1a:d2:b0:e4:e2:8b:ed:be:
88:ed:da:5a:0f:2c:44:96:4d:f2:7b:a4:eb:9d:a4:3e:c7:a2:
5a:68:3b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:02 2026 by rpki-client