Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
File: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft (raw, json)
Hash identifier: zbX1vAYHILh5IQwzRm48BRzhp1DRoZ6iYG+sjdKWL+M=
Subject key identifier: A6:86:93:16:4F:8C:1D:A1:9B:06:4A:70:93:15:09:FA:E6:3F:86:62
Authority key identifier: DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
Certificate issuer: /CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Certificate serial: 019F8FB4C38C45D77B18B00B6199A7AA1003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
Manifest number: 0932
Signing time: Thu 23 Jul 2026 16:00:16 +0000
Manifest this update: Thu 23 Jul 2026 16:00:16 +0000
Manifest next update: Fri 24 Jul 2026 16:00:16 +0000
Files and hashes: 1: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl (hash: njlth6pQf1sxXzt7le1fMnl9gFTOc6gIWwmdPbS56OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:c3:8c:45:d7:7b:18:b0:0b:61:99:a7:aa:10:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Validity
Not Before: Jul 23 16:00:16 2026 GMT
Not After : Jul 24 16:00:16 2026 GMT
Subject: CN=a68693164f8c1da19b064a70931509fae63f8662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:c6:6d:cf:f9:b6:51:90:74:9f:fb:a3:25:
16:63:51:e2:c6:52:28:a6:e0:3c:aa:6f:45:35:8b:
57:64:ec:15:0b:b0:cd:c2:54:d9:88:25:41:51:8c:
4e:3d:80:f0:4f:cc:f2:25:13:35:1a:79:59:36:61:
72:c8:12:8c:41:6e:75:1a:b3:82:95:57:90:9c:f4:
bf:01:fc:ff:35:c6:a3:0a:3a:fc:dc:8c:30:1c:48:
95:29:ba:b5:e5:54:94:95:50:03:22:0f:a5:10:8d:
9d:e3:51:0f:36:a5:af:e5:e0:1f:9b:3c:f7:de:ff:
a9:a4:92:7f:49:de:da:53:ac:54:08:99:f5:15:d4:
3e:7c:52:d5:ce:3a:c7:f8:d7:8f:5d:f6:07:01:08:
a7:67:1e:ff:6a:51:fd:a7:79:16:59:7a:66:57:cf:
a9:c6:e0:62:50:46:55:14:1c:b4:b5:49:ac:a3:b0:
e3:98:6a:b5:d5:bd:4d:6e:fa:c3:f7:24:bb:0e:43:
78:86:22:db:43:62:c2:08:ae:c3:c8:4c:d3:5a:4d:
66:44:bd:5c:e8:b4:04:98:b0:b5:a3:46:54:96:f2:
49:53:dd:89:9b:fa:fd:a2:e6:2f:b6:ec:eb:22:bf:
c0:35:9d:dd:e4:73:ba:87:25:da:67:dc:3f:aa:16:
cb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:86:93:16:4F:8C:1D:A1:9B:06:4A:70:93:15:09:FA:E6:3F:86:62
X509v3 Authority Key Identifier:
keyid:DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b7:58:46:34:0a:8e:e2:2b:3f:73:5b:0e:60:b0:c3:0e:6a:
cf:85:63:d3:5e:2f:ef:fa:01:fa:f9:ca:e2:1e:36:3b:d0:bc:
e0:03:15:b4:39:9c:fb:6c:04:b5:d1:e7:75:da:fd:9f:d3:7f:
4b:f6:0f:02:b4:da:84:e0:14:69:80:40:9a:f3:ac:9d:be:d6:
95:ec:64:17:7f:9b:65:e8:0b:40:f3:ac:62:21:79:0a:6b:23:
0e:ab:ed:0f:05:38:98:37:02:47:46:5d:b6:24:8e:79:2b:67:
55:c0:19:29:9d:41:04:3f:02:e8:14:63:c7:52:10:3d:bb:18:
40:33:0c:8d:c0:fc:39:2a:74:e3:3a:c6:a4:6b:90:ff:15:70:
f4:93:48:89:6e:86:6a:8c:5e:17:43:57:54:60:09:55:17:2d:
b8:4d:cc:26:9e:f7:e9:9a:bc:65:20:56:fa:5c:20:80:ba:60:
3f:17:3b:2b:11:15:a7:1c:76:27:69:f6:dd:34:9c:be:5e:56:
ab:47:4d:35:3a:58:fc:38:97:c2:58:f9:0b:c3:9a:17:d2:32:
bf:59:ad:1f:fa:ba:c8:00:d0:b9:13:2d:b7:93:54:bf:bc:a3:
f4:95:92:4d:14:51:36:8a:91:1e:03:7f:0a:c4:3c:4f:75:d3:
7a:2b:4e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:36:33 2026 by rpki-client