Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
File: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft (raw, json)
Hash identifier: 0hpvMeuSSuebcO9nLVdRy39awTRxaMqa6mXZN4HfA+g=
Subject key identifier: CA:14:5B:26:8F:EA:AE:6F:1A:8A:FF:F9:59:63:5A:52:D5:08:03:21
Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
Certificate issuer: /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Certificate serial: 019F927EFECD3A12B0ECDE831CAC8FFFA5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
Manifest number: 02B4
Signing time: Fri 24 Jul 2026 05:00:23 +0000
Manifest this update: Fri 24 Jul 2026 05:00:23 +0000
Manifest next update: Sat 25 Jul 2026 05:00:23 +0000
Files and hashes: 1: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl (hash: ntUr88vWl+SdAfmMNa1Y8u79iaZQCT4R0n+sG+b78IM=)
2: hitJJLRKZoeTjFy1UdVtOKCeU3E.roa (hash: P3W2mUUG6W+rjdD2ot4LgXNOj0ClkdXmzifsh0+3Km0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:fe:cd:3a:12:b0:ec:de:83:1c:ac:8f:ff:a5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Validity
Not Before: Jul 24 05:00:23 2026 GMT
Not After : Jul 25 05:00:23 2026 GMT
Subject: CN=ca145b268feaae6f1a8afff959635a52d5080321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:88:ba:6a:05:1b:e7:3d:35:43:44:a5:64:
98:46:2b:95:c5:a5:4d:f4:5b:36:5c:8a:f9:7b:5c:
e2:41:2d:dd:94:01:bc:09:e3:1f:4b:d3:db:da:bd:
5d:3c:25:f0:02:40:93:06:42:29:6f:ab:31:96:21:
94:5c:a1:bf:e0:66:99:c9:2f:36:64:1f:95:80:ea:
02:7b:6e:88:9c:8e:4d:63:75:ca:21:23:bb:95:00:
4e:7c:4a:31:9a:9e:4e:b3:d8:17:85:f0:38:a2:0d:
48:c3:f2:15:f3:9a:dc:39:5d:de:fd:97:2c:d6:e4:
59:58:2a:64:7b:21:3c:7f:ad:45:3a:d0:68:ea:be:
39:7d:cb:5a:f2:aa:6e:1c:d8:72:78:5b:c5:7d:c6:
4e:b3:7d:b3:44:a4:f5:44:97:b1:b3:26:17:d5:45:
be:25:a3:1d:5e:2c:9f:98:46:be:90:80:cc:9a:ba:
7a:ba:ae:4f:68:c6:4a:d8:5e:32:92:bf:79:b9:c2:
05:7a:3b:c7:fd:c8:77:18:fa:04:5b:2e:8b:a1:d5:
41:0e:8e:a1:fd:6b:c0:89:ce:10:e0:f2:84:be:95:
b7:22:9b:ab:8c:ff:e8:0c:4d:8f:a1:af:7b:b3:51:
c8:a5:49:a9:03:b2:68:d1:f1:bc:23:6f:aa:0e:a6:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:14:5B:26:8F:EA:AE:6F:1A:8A:FF:F9:59:63:5A:52:D5:08:03:21
X509v3 Authority Key Identifier:
keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:83:f7:89:05:8f:7a:ff:55:8d:fb:ca:fe:ec:cb:04:69:62:
25:8b:ec:03:bf:fb:8f:ae:b9:33:fa:f9:a9:36:3f:40:86:a4:
d4:d2:93:ec:74:f3:3e:7e:f6:75:8e:c5:d6:33:01:dd:aa:47:
58:02:6d:26:21:c6:7e:b0:82:54:af:6a:2b:a4:6e:43:2e:cd:
d6:34:3a:d1:c4:74:c1:0a:72:25:f2:99:12:74:44:38:e2:98:
4d:e0:dc:78:c5:05:df:e3:70:97:d5:df:91:a7:3e:41:28:34:
67:2e:03:64:97:27:fe:df:bd:8e:de:81:a3:c6:51:63:d7:4c:
4a:48:b6:49:3d:9e:49:20:41:21:05:85:41:12:2c:f5:f3:7e:
22:b9:f2:9f:92:27:49:73:ee:80:cd:4a:ef:4c:7c:21:89:2e:
69:12:a8:c6:54:3e:2c:1e:af:89:33:78:27:5b:51:aa:4b:f2:
d5:0b:1d:3b:1c:30:10:8c:cf:a3:0c:08:1b:e5:b7:f2:79:79:
56:db:fc:c3:65:94:5f:21:79:25:3e:2c:80:d6:e0:fb:e5:4d:
b9:ea:23:79:c8:ed:13:65:c1:77:cf:86:58:e0:99:6e:60:df:
da:31:13:6e:8e:8f:e8:8f:1c:7d:9f:79:e3:5f:02:cc:5f:87:
f8:d1:21:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:39:51 2026 by rpki-client