Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: 187dr4I4j35B8bJabaHEOoNzYpQqVQTDwpbD5dWL0gI=
Subject key identifier: 0D:BB:61:8C:67:B3:D2:88:81:38:4C:EF:E5:25:BC:34:29:D0:51:EA
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 019F91A43D84B64C977006700C8BE808B140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 15BE
Signing time: Fri 24 Jul 2026 01:01:27 +0000
Manifest this update: Fri 24 Jul 2026 01:01:27 +0000
Manifest next update: Sat 25 Jul 2026 01:01:27 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: hdSwigth/5T5BAuwKsfGfT+DfMaGzwM0Fb+j8o6HrTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:3d:84:b6:4c:97:70:06:70:0c:8b:e8:08:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Jul 24 01:01:27 2026 GMT
Not After : Jul 25 01:01:27 2026 GMT
Subject: CN=0dbb618c67b3d28881384cefe525bc3429d051ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:c6:87:43:86:fd:45:d3:9e:7c:6c:57:26:
cc:d5:5c:ad:f5:87:a1:64:b7:99:b5:0b:71:48:c1:
44:fe:75:d3:c0:3c:f1:79:0c:2b:dd:b9:16:5a:b2:
e9:f0:81:59:26:e3:c8:27:25:63:51:7e:2e:83:52:
ed:9a:31:a2:69:65:97:98:55:a5:58:fa:ed:75:bf:
2d:a1:a5:6c:bc:3a:4b:26:72:b2:f2:fb:bc:f2:c3:
4c:58:34:a6:48:2b:6a:3e:5b:ce:78:4c:c2:f4:28:
48:93:29:b9:30:0b:62:b8:22:3a:8a:60:b0:e2:6f:
5a:e5:db:d6:77:34:c3:70:f2:6b:04:dc:53:13:3c:
6e:df:71:db:9d:df:c6:ab:40:af:8b:87:af:b7:10:
a0:28:e4:60:ee:6c:6d:3b:3b:92:b0:b4:00:8b:a1:
05:b3:f5:be:14:42:21:dc:63:77:35:aa:1d:95:83:
73:91:32:fa:0c:0f:8e:fb:00:5d:37:89:0b:05:0b:
f2:8a:84:fb:0e:e9:3a:50:0f:9a:e5:78:2a:8a:80:
50:b5:c2:4b:9a:80:fb:b2:23:f0:00:52:08:38:0d:
e5:07:68:88:1a:67:0c:63:d7:72:37:d1:d0:eb:1f:
4d:ae:99:65:7e:56:4d:b2:a7:19:81:7f:4f:1d:3a:
01:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BB:61:8C:67:B3:D2:88:81:38:4C:EF:E5:25:BC:34:29:D0:51:EA
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:de:df:9f:15:77:17:0e:14:14:ce:9c:62:11:5d:f8:24:5c:
61:58:e4:85:f3:98:4a:d2:80:e2:c4:60:19:dd:b2:26:85:bb:
08:a9:e2:38:0e:f0:f6:49:4b:07:1f:ef:b0:9d:d1:da:95:83:
18:a2:70:7f:6a:0e:b7:07:4b:46:2d:40:5a:57:a4:34:ce:b5:
f1:7d:94:92:08:40:05:cd:c5:11:c5:af:4e:c7:87:cb:31:80:
74:61:7a:5b:2f:53:49:3a:39:b6:4f:59:0e:68:f5:cc:f9:dc:
9f:0f:2c:6f:c0:e0:27:56:7c:45:dd:a2:ef:be:ff:f5:e4:ed:
b5:ba:36:2f:6f:46:cc:d8:70:fe:be:f0:6b:0f:3e:4d:79:89:
9c:9f:fa:33:1a:ba:e4:1f:75:82:fc:88:65:0d:f9:c8:73:a5:
d6:10:ce:51:b5:3e:dd:a0:19:6b:ce:ca:26:38:93:73:45:4c:
b6:08:3d:26:d6:b5:08:6f:af:94:b1:8f:0f:37:e6:8e:f6:31:
16:1e:57:a7:40:e5:1f:ab:31:6c:68:fc:79:28:0b:0e:19:4c:
22:96:7a:ed:b1:4c:93:64:91:99:7b:04:d4:33:f1:30:23:1c:
a3:f3:b6:eb:58:c1:81:19:0d:50:10:a1:a9:a1:5a:24:24:5d:
4e:cf:d6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:26 2026 by rpki-client