Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/2tT3n-03VtwzhVWiaD87My8rPaQ.mft
File: 2tT3n-03VtwzhVWiaD87My8rPaQ.mft (raw, json)
Hash identifier: ITN7Q69lMFhA0SSh86+RxPfrrumjwUGBwbx9JRHdNWg=
Subject key identifier: CC:DA:0F:5B:CC:B8:DE:41:82:FB:4F:5D:9B:20:E3:21:F6:6F:E1:DB
Authority key identifier: DA:D4:F7:9F:ED:37:56:DC:33:85:55:A2:68:3F:3B:33:2F:2B:3D:A4
Certificate issuer: /CN=dad4f79fed3756dc338555a2683f3b332f2b3da4
Certificate serial: 019F90907AF593E59938D1AAC00B1B556F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tT3n-03VtwzhVWiaD87My8rPaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/2tT3n-03VtwzhVWiaD87My8rPaQ.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 20:00:15 +0000
Manifest this update: Thu 23 Jul 2026 20:00:15 +0000
Manifest next update: Fri 24 Jul 2026 20:00:15 +0000
Files and hashes: 1: 2tT3n-03VtwzhVWiaD87My8rPaQ.crl (hash: jjRg2eUf7w17srQvN7z9MtaYu+3s5kNy8+4bdD9H2+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/2tT3n-03VtwzhVWiaD87My8rPaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/2tT3n-03VtwzhVWiaD87My8rPaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tT3n-03VtwzhVWiaD87My8rPaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:7a:f5:93:e5:99:38:d1:aa:c0:0b:1b:55:6f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad4f79fed3756dc338555a2683f3b332f2b3da4
Validity
Not Before: Jul 23 20:00:15 2026 GMT
Not After : Jul 24 20:00:15 2026 GMT
Subject: CN=ccda0f5bccb8de4182fb4f5d9b20e321f66fe1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c7:8c:b6:64:d5:98:66:c1:07:5b:bb:6e:86:
5d:2a:d2:2a:be:ff:67:cd:57:b1:ba:a8:0e:84:53:
eb:54:b3:0a:e4:2d:42:43:da:52:cb:7e:9e:3f:8b:
32:0b:4c:c2:6c:b6:be:b7:8b:d3:99:32:80:fc:ee:
01:54:33:4a:f1:d2:7b:65:f3:1f:da:a3:bc:fa:c6:
2c:0b:42:7e:b0:da:fb:81:7f:fa:f7:77:c8:3a:a1:
f6:55:b0:71:5b:ab:95:ab:a9:b6:72:4d:4d:11:61:
5e:54:72:5f:93:6b:fa:23:33:80:71:33:26:3a:d4:
af:87:d2:f3:ae:1d:a8:fd:ae:ba:e9:bc:64:50:9c:
d5:86:7c:2f:51:61:68:89:4d:54:49:fa:82:c0:cf:
67:89:c7:e6:f5:8f:78:de:05:0e:22:2e:2b:7b:da:
32:fd:96:ea:5f:f3:bf:d8:b4:c2:1a:e1:a1:e2:ac:
cb:d4:91:80:a6:5c:86:21:21:fb:eb:8e:50:a4:84:
a9:25:d0:56:70:23:28:85:83:dd:d0:d2:74:b7:c8:
20:b7:e1:08:7c:10:98:99:bf:be:a6:70:39:0b:7b:
5e:f9:a2:26:e5:89:49:f5:26:f3:7f:f1:d5:cf:e1:
d1:66:f1:4e:78:8b:81:af:9a:14:51:ad:b7:cd:60:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DA:0F:5B:CC:B8:DE:41:82:FB:4F:5D:9B:20:E3:21:F6:6F:E1:DB
X509v3 Authority Key Identifier:
keyid:DA:D4:F7:9F:ED:37:56:DC:33:85:55:A2:68:3F:3B:33:2F:2B:3D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tT3n-03VtwzhVWiaD87My8rPaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/2tT3n-03VtwzhVWiaD87My8rPaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/2tT3n-03VtwzhVWiaD87My8rPaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1f:f1:22:bf:33:66:04:f7:c8:2b:a4:89:7a:c2:25:68:89:
f2:47:7f:cb:ca:35:c9:0c:2a:55:c6:e5:39:3b:a6:96:c8:e5:
c9:a3:37:4f:24:38:0c:77:ea:3a:6c:38:c2:ab:af:79:c4:05:
1f:06:ab:01:84:47:fb:56:ab:91:83:04:4b:86:b9:93:63:fd:
0d:11:8d:01:e4:5e:49:6d:00:31:04:20:23:66:1c:d8:96:a8:
0e:b8:f1:20:b1:e2:16:de:64:10:4f:29:d3:76:38:f0:e0:e7:
5e:f7:9f:98:cf:47:13:65:f3:ea:fe:c0:49:61:34:d3:62:fe:
6f:35:6f:19:0d:da:f2:ef:26:8b:9a:95:09:63:a8:35:7c:29:
18:3f:4c:e7:3f:8e:88:d7:39:b9:af:7e:8d:0f:ed:d8:1b:63:
18:5b:91:4e:0b:ae:55:ff:83:90:89:47:78:62:87:11:5c:cc:
47:6f:f2:ef:e7:ac:e0:a1:eb:2f:79:97:df:02:00:b9:21:26:
79:7b:f3:ba:c2:5f:4a:67:10:db:1b:67:c2:06:ae:88:6c:04:
80:07:f9:b3:86:0c:d3:b7:66:f9:80:e8:40:70:62:63:54:d8:
ca:db:92:e1:89:0e:c1:a2:c5:dc:4d:43:52:b6:8f:b8:1c:2e:
11:94:6d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:49 2026 by rpki-client