Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
File: 3VP2PxOgyVKgefRXihDtv246pYs.mft (raw, json)
Hash identifier: uA9cezGbbQgley9Z4nXVAvqdMej7TF7RurvExXVKRh8=
Subject key identifier: 54:A9:18:B8:8C:AF:1F:E8:C4:63:D7:B3:4C:A3:A8:57:53:45:F4:52
Authority key identifier: DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
Certificate issuer: /CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Certificate serial: 019F8FB4F65B792FFF064C08A51E1AA81326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
Manifest number: 1935
Signing time: Thu 23 Jul 2026 16:00:28 +0000
Manifest this update: Thu 23 Jul 2026 16:00:28 +0000
Manifest next update: Fri 24 Jul 2026 16:00:28 +0000
Files and hashes: 1: 3VP2PxOgyVKgefRXihDtv246pYs.crl (hash: 3lKMEZHh1MneHSKctC0sjTM3366sZ6rX9+9IDDDAy6I=)
2: TWjQ2gsQUU9MXDJP00l8lOI_i8I.roa (hash: PtqnNrTefbS8Cw3BlkL6LKO9S8DUkKbOBZ0zbUviWfs=)
3: WoaNei28YSaPDdcENSu3LjSXLKg.roa (hash: YXB0+7Vswy/qgNB0Agbnb+glIUAaceZRMWc/efKKqKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:f6:5b:79:2f:ff:06:4c:08:a5:1e:1a:a8:13:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Validity
Not Before: Jul 23 16:00:28 2026 GMT
Not After : Jul 24 16:00:28 2026 GMT
Subject: CN=54a918b88caf1fe8c463d7b34ca3a8575345f452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:2c:71:8c:db:79:02:bd:d6:0d:ef:0b:48:
cf:2d:5e:38:f3:bc:09:0d:a7:41:45:f5:db:ef:e1:
aa:0f:f2:25:bf:dc:6e:f7:4a:b5:64:13:b6:04:a2:
bc:83:d3:81:2a:a7:b9:31:30:26:03:f8:da:ce:f8:
73:b0:e2:00:a6:d9:aa:bd:ae:c7:ac:34:9c:56:2b:
09:7d:c1:5b:82:11:9e:64:7d:e9:a5:93:54:1e:0a:
6e:b3:f9:d7:0b:95:ee:1a:c2:cc:97:ca:7b:c1:01:
f9:f6:93:5b:60:91:58:fd:38:99:cc:36:52:57:f9:
7a:7d:5f:13:44:e0:69:d9:44:8f:cb:70:a2:81:ba:
54:00:13:cb:36:9d:eb:15:dd:64:ec:52:a1:ec:54:
ee:2c:e1:34:a6:80:db:77:d2:f2:36:9e:82:4b:ca:
67:95:33:0e:b5:ae:24:bd:81:79:e4:f3:34:e4:96:
57:7e:72:96:23:e9:ce:f7:7d:c2:47:21:b3:d3:9b:
e7:fb:f5:ea:98:5d:64:f0:86:97:4d:88:32:fe:94:
82:44:ea:75:6c:8d:59:61:54:95:4f:16:d0:3b:66:
d9:7a:b2:df:f0:f7:84:8f:00:b7:fe:17:3d:40:de:
d3:71:fa:44:c7:7f:71:84:f9:ce:9e:a3:8c:6d:bf:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A9:18:B8:8C:AF:1F:E8:C4:63:D7:B3:4C:A3:A8:57:53:45:F4:52
X509v3 Authority Key Identifier:
keyid:DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:74:aa:30:88:ea:fe:56:fe:a2:42:9e:50:2c:46:e8:bc:08:
9a:7d:06:10:70:d4:9c:e8:8e:91:bd:f6:6a:ca:95:9a:0e:d3:
00:60:9b:5e:29:b8:26:40:39:34:8d:4e:39:6e:37:0f:bf:32:
87:7e:13:1e:28:ce:46:7c:5f:b1:5c:93:06:c1:91:b9:2c:bb:
69:0b:45:04:93:57:c5:d0:92:29:06:de:00:2b:ad:1b:be:81:
48:cb:39:71:3f:3e:a5:99:48:56:73:5c:c7:a3:89:d8:f2:1e:
46:1d:06:e6:1c:74:26:54:94:83:76:47:2c:dd:4c:ac:5b:e1:
c7:aa:f7:78:c8:5e:92:73:9c:fd:41:5c:fa:f8:b7:36:5f:8c:
69:b7:fe:b7:8b:f7:06:9e:6f:05:26:ca:50:34:a8:d4:e0:45:
b6:34:03:3e:4c:65:bc:23:df:da:16:6b:ee:ef:dc:af:39:cd:
94:f4:a0:f3:39:eb:19:b6:77:8f:3f:d9:63:1b:a6:8b:64:28:
bc:86:97:51:c3:6c:a4:5f:2f:75:3e:46:0f:4e:ca:32:16:33:
43:d7:dc:4f:c7:04:80:6b:50:58:43:ba:75:3b:c3:49:d5:96:
3f:a0:7d:58:ac:47:d9:cc:17:13:42:e1:a7:26:13:80:97:63:
19:b0:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:15:27 2026 by rpki-client