Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
File: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft (raw, json)
Hash identifier: GkWJt/IZJqkGSlJuye3NohcDYQhayY8hI1alRgRVuRY=
Subject key identifier: B7:B4:92:13:2A:C4:3F:7F:83:A3:16:52:F9:7F:88:E5:B1:14:00:58
Authority key identifier: DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
Certificate issuer: /CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Certificate serial: 019F8F110472B4206B4E1BAA884A203C3C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
Manifest number: 01AD
Signing time: Thu 23 Jul 2026 13:01:24 +0000
Manifest this update: Thu 23 Jul 2026 13:01:24 +0000
Manifest next update: Fri 24 Jul 2026 13:01:24 +0000
Files and hashes: 1: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl (hash: 8rLqrkEJpDj1muBuoOPw6eFjLQTlUP54WgPMxpbDIaE=)
2: FiJY_f6GKm6veDvPVDNX9LWOSRU.roa (hash: SMTBlb+NpQPNeXGuJJJYcwSp8wfNIzukvM7Bw3VT8hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:11:04:72:b4:20:6b:4e:1b:aa:88:4a:20:3c:3c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Validity
Not Before: Jul 23 13:01:24 2026 GMT
Not After : Jul 24 13:01:24 2026 GMT
Subject: CN=b7b492132ac43f7f83a31652f97f88e5b1140058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:68:36:4a:8f:0b:bf:9d:7b:3e:7d:1c:2a:
49:b4:27:ba:72:c1:7d:21:ba:18:0e:0b:a6:ce:42:
a9:70:41:ce:c5:0e:64:5b:8e:54:a8:c4:96:33:aa:
90:0f:e0:06:4c:d6:b4:e3:21:ab:5f:c9:ae:cc:f7:
63:ad:7b:8b:1a:b9:e0:9b:5f:8f:3a:2c:96:19:19:
94:37:0a:a3:6f:85:3e:53:d3:85:66:4a:2b:5f:bf:
fd:0a:c5:aa:d3:aa:85:96:ed:5f:92:9a:30:7b:89:
c9:0c:d7:3a:52:78:97:57:88:db:d1:34:0f:64:b7:
3e:cf:2c:28:43:0c:e6:58:d1:40:83:55:99:0a:af:
af:04:8c:5f:f5:80:6a:a0:fe:29:58:5c:dc:4e:6b:
e5:99:98:6a:b4:cc:88:01:75:94:81:c4:32:8e:ef:
8d:42:3f:40:1e:be:ea:c4:91:5a:59:43:55:ec:da:
2e:2a:7b:40:4b:f7:9f:63:1a:92:09:a4:b2:8c:b2:
ba:86:e5:fc:6a:73:46:ac:df:81:b4:77:c3:d9:e2:
05:a0:e1:a1:52:98:b9:99:b2:1a:1d:37:55:4f:5b:
94:8b:42:7a:e8:e2:ee:cd:d3:d7:7a:df:5c:e1:32:
ea:a3:99:21:ca:73:34:bf:00:9f:56:7a:0f:df:ae:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B4:92:13:2A:C4:3F:7F:83:A3:16:52:F9:7F:88:E5:B1:14:00:58
X509v3 Authority Key Identifier:
keyid:DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:85:ef:11:9f:f8:c3:b0:78:d8:ae:48:f5:91:83:69:a8:85:
ae:39:69:ba:a9:82:4b:3b:d6:5f:1e:05:d5:fe:ca:58:ca:94:
84:39:57:4a:2c:43:ac:15:a5:f9:55:ea:d5:43:ee:42:7e:08:
6f:ac:4f:28:1f:a5:dc:70:45:6e:31:31:1d:82:32:d7:fc:a4:
48:c8:8f:97:89:97:e6:10:74:21:49:99:ac:c8:bb:f5:96:fc:
c6:f1:8e:6d:73:7b:f2:c4:90:00:3d:7b:f0:83:ef:e6:3d:0c:
d7:1e:e0:85:29:12:6f:88:07:b5:70:f7:08:22:cb:a1:f4:ed:
32:9d:b0:0d:d8:b1:5c:c4:07:05:48:78:f0:24:59:f9:ae:bc:
a0:c4:2d:8c:c5:5d:41:bb:fe:9d:4b:ba:87:77:73:4e:30:10:
73:17:a7:20:1c:1a:66:75:c3:e8:cf:44:3b:e6:55:84:5b:62:
c4:55:55:5a:b8:0b:d0:ce:e8:be:71:07:24:6d:51:dc:52:6a:
af:25:d3:b8:f6:66:9d:7a:61:44:a0:16:93:d7:9d:e7:5d:ee:
9e:21:8f:b1:39:55:c7:d2:cd:a0:02:b6:0e:95:95:c0:0b:3e:
22:d4:8a:41:ff:bc:01:ef:83:da:44:6f:54:8f:d4:34:d1:26:
f9:d8:3d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:28 2026 by rpki-client