Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier: vXn3ZUMonr6o7KMTLjrikZ3tQ4nLd/kaFl4gebf6Ey4=
Subject key identifier: A1:F3:80:40:DC:0C:96:ED:DF:48:C9:CC:9E:65:56:A3:A4:AC:66:47
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 019F90C7DED746C8F96C6C78EF798999ADD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number: 1021
Signing time: Thu 23 Jul 2026 21:00:45 +0000
Manifest this update: Thu 23 Jul 2026 21:00:45 +0000
Manifest next update: Fri 24 Jul 2026 21:00:45 +0000
Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: +561wJaR/Qj4EP47XTXtl9Ob1rm9GP7eCZQJkdV7rlk=)
2: 6oH-q1WmgKlbF7oPFf0VCjT4cP4.roa (hash: 8fxRfcDqePTH9D6GcvyAsB8XOQ2tsAsMINyYJwfwjDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:de:d7:46:c8:f9:6c:6c:78:ef:79:89:99:ad:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Jul 23 21:00:45 2026 GMT
Not After : Jul 24 21:00:45 2026 GMT
Subject: CN=a1f38040dc0c96eddf48c9cc9e6556a3a4ac6647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0f:26:8a:54:a1:1f:24:6f:34:6a:93:df:19:
98:75:a0:d3:19:2f:36:14:de:97:45:b1:dc:4a:5d:
db:c0:7c:fc:9a:70:d9:4d:23:87:83:db:8b:ab:9f:
25:25:21:e1:0e:f7:23:28:a2:e1:75:0e:d9:99:25:
3a:68:e5:e9:0b:67:2b:86:d5:38:1c:4d:ce:6a:4b:
52:dc:16:64:4a:42:f6:9a:ee:30:ad:42:47:30:1f:
75:9a:06:96:f7:f4:d7:5d:dd:b7:48:0c:32:8e:fb:
82:8d:c1:20:f6:a3:59:3a:23:fb:06:19:35:a7:7e:
60:e9:39:78:92:8d:64:64:14:8c:69:96:fc:11:c5:
5c:dc:36:a4:d8:7c:84:a9:78:79:52:e7:f3:15:46:
db:de:6b:a2:da:cd:f5:d5:88:0c:c0:9a:9a:bf:37:
e6:14:51:f6:67:a1:80:b3:f3:1f:74:0f:5d:d0:e2:
ca:b4:44:89:c6:13:e7:e7:78:8d:50:7c:34:81:bc:
ea:cc:50:11:3e:ca:45:18:11:c7:f3:29:74:63:ac:
03:d1:9f:62:f9:72:fb:a5:cb:6a:2a:83:78:bf:c5:
44:4e:df:a8:bd:9c:cf:d6:a3:17:c3:02:b0:bd:8f:
d8:8d:29:0c:fa:62:e5:95:ac:25:45:80:32:75:4d:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F3:80:40:DC:0C:96:ED:DF:48:C9:CC:9E:65:56:A3:A4:AC:66:47
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c5:be:f5:47:9f:c2:17:d6:a5:21:70:52:f0:14:cf:9c:7a:
7b:74:74:5d:87:c5:04:37:50:41:4b:e8:8a:5a:c7:60:97:91:
7a:70:92:7a:2c:2d:d9:77:8d:09:b0:17:ee:32:e1:0c:88:e6:
81:5b:d1:23:cf:09:80:b8:a9:16:82:dd:37:5b:e0:b8:0d:7e:
c5:c5:12:43:42:bf:c7:4c:c5:c5:25:46:3a:64:27:da:01:4d:
2f:32:82:9d:22:ba:60:2c:92:16:cb:6c:06:9f:c8:65:a5:ce:
38:ed:1e:60:40:2b:da:61:a5:65:5a:5b:40:27:48:b6:f9:15:
56:99:4a:06:79:72:26:0d:83:9c:80:35:e6:f5:c1:40:c1:15:
af:6e:10:09:42:7c:88:4d:36:2e:d9:02:b7:42:a1:41:1c:24:
6e:94:aa:35:8d:5c:ae:de:d7:de:1a:96:89:ee:a2:67:54:86:
8b:ac:49:d2:6b:14:f4:51:5a:6b:ae:82:45:02:dc:da:db:69:
a1:13:f9:90:ab:ba:46:02:27:7e:6b:df:2f:bf:e9:84:e0:50:
7a:75:30:75:46:04:9b:2e:57:ae:fc:95:11:4a:02:5f:fc:17:
c8:01:93:6f:09:16:76:6b:b1:bc:fe:6e:06:47:b1:bd:40:13:
9e:82:80:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:07 2026 by rpki-client