Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
File: 3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json)
Hash identifier: VJrlRi+C6p5/DnzucLhT+kslqiSgvIDBOAowwnm1ArA=
Subject key identifier: D5:34:3E:43:CC:6C:AB:AE:EE:7C:11:16:12:9D:FB:51:BE:D5:9E:C0
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial: 019F916CC7F9444570ADC9AB1FF323960BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
Manifest number: 1127
Signing time: Fri 24 Jul 2026 00:00:52 +0000
Manifest this update: Fri 24 Jul 2026 00:00:52 +0000
Manifest next update: Sat 25 Jul 2026 00:00:52 +0000
Files and hashes: 1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: kFuHOx5Pcp+GQRXMA6FBc/ggCy0PuIaJD/XAQFt55PQ=)
2: ipwbth9z_kAmFFiQQC69LkO_nQw.roa (hash: NejJVwemsx7RaWRb+qhN37iXZFwIo50zil0wLKpDlFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:c7:f9:44:45:70:ad:c9:ab:1f:f3:23:96:0b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Validity
Not Before: Jul 24 00:00:52 2026 GMT
Not After : Jul 25 00:00:52 2026 GMT
Subject: CN=d5343e43cc6cabaeee7c1116129dfb51bed59ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6d:5f:ef:93:11:3d:0d:fa:f3:3b:18:b3:0a:
85:59:00:a6:18:0c:e2:47:80:cf:f9:c3:20:df:3d:
e4:90:65:82:5b:44:e6:d7:d9:73:67:99:24:64:99:
52:bb:81:2f:22:92:24:ba:9c:ec:f6:6c:b1:89:db:
16:62:ce:ee:16:f8:15:c5:b0:a1:fe:1d:f7:1b:dc:
a0:8f:20:99:2f:77:a8:fc:1b:94:cc:35:e6:30:f7:
9a:74:dd:7f:5a:64:d2:af:96:ef:d9:2d:57:4d:ea:
04:28:d5:16:a4:9c:91:b2:86:80:a0:35:7a:f6:75:
2d:02:e0:bf:8e:b7:f5:fd:1d:6d:4e:92:a4:54:e5:
7d:2c:cf:7d:65:69:98:06:4b:8f:85:f4:41:0b:5e:
83:fa:29:8c:c9:41:f1:13:93:43:19:15:30:07:ed:
9f:a5:06:2d:ac:49:26:5b:f3:6c:3e:07:ec:28:90:
a1:33:83:b7:11:c7:f5:de:c8:94:19:de:94:24:88:
d1:9e:e1:46:67:60:bd:4c:ec:04:68:1d:ae:e3:f7:
93:9a:c9:62:20:ae:9d:43:1d:13:10:b3:aa:49:9f:
f8:e9:10:02:52:ff:0b:68:59:61:81:8b:8e:41:48:
ca:56:72:a5:7a:cf:59:e3:af:bc:06:4b:50:fe:ef:
b8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:34:3E:43:CC:6C:AB:AE:EE:7C:11:16:12:9D:FB:51:BE:D5:9E:C0
X509v3 Authority Key Identifier:
keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:27:b7:a8:95:d0:d0:c3:7d:9a:49:90:51:cb:d3:87:9d:f6:
8f:e0:ac:c0:ff:1b:2b:d6:70:2e:08:7e:fc:4b:35:b1:29:30:
57:b3:49:de:b3:3b:9e:c0:34:b8:e5:76:ec:5e:7f:f5:cb:65:
17:b8:a5:ab:7b:e1:f1:32:37:86:cd:a2:f0:10:f0:ec:4b:38:
73:76:1d:7d:a9:33:ce:66:ed:6f:59:f2:9b:b7:53:5d:f5:b8:
eb:e1:93:1c:ba:26:0d:4f:0a:d7:43:f5:58:e1:54:89:a4:1d:
ea:7b:c3:ae:72:34:48:ce:00:87:62:68:03:43:d7:e7:14:19:
a9:18:22:79:45:bc:24:d5:c3:00:0a:e4:71:45:95:19:8f:c4:
45:92:49:91:4a:7a:c3:e0:58:7e:92:58:43:31:52:09:1f:1f:
6f:71:67:77:ec:a1:21:c4:28:1d:03:13:00:2e:09:a3:a9:64:
47:58:a1:6d:95:99:9b:d7:aa:f2:2a:56:7b:7a:ea:90:04:30:
84:6a:e7:a5:1c:26:e0:9e:09:39:5d:57:ea:0a:35:11:a3:be:
5c:69:03:c1:9a:64:79:96:50:eb:a1:a1:a6:03:7d:41:3b:08:
f3:6a:81:81:b3:9e:83:d8:41:df:c3:17:7b:a4:2a:f0:86:26:
4e:23:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:40 2026 by rpki-client