Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: BmBc+/5255wqrJlIq5rM5D8cwh/p6KhKbvNI/RO97F4=
Subject key identifier: 47:68:83:89:C3:39:C4:97:A5:D2:72:91:9D:BB:B8:1D:04:6E:88:3B
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 019F9022C0906D23421F5BC92BEA09B1BEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 19D4
Signing time: Thu 23 Jul 2026 18:00:24 +0000
Manifest this update: Thu 23 Jul 2026 18:00:24 +0000
Manifest next update: Fri 24 Jul 2026 18:00:24 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: kopKjPM5caHGxt+SLS4btLBF9smAPYQaRE0zCtiGdzk=)
2: VfPqQIUYDVEcRMuY0y_1WkG7tNM.roa (hash: jXhdAhn6nzRP7djqjR0wEfaKlgEOeT24wYK6k5lvQMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:c0:90:6d:23:42:1f:5b:c9:2b:ea:09:b1:be:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Jul 23 18:00:24 2026 GMT
Not After : Jul 24 18:00:24 2026 GMT
Subject: CN=47688389c339c497a5d272919dbbb81d046e883b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:83:05:98:c3:bd:bd:7d:cc:cb:b6:23:ff:2e:
38:d5:89:47:97:9c:01:37:51:0e:57:45:74:75:81:
16:c2:2f:42:f8:c3:c8:c5:cc:18:1a:e7:51:d8:d0:
ac:41:3b:e6:5e:46:8f:cb:b4:bb:ab:98:bf:58:24:
13:45:38:c0:8a:c9:87:4e:88:e2:f9:24:e6:1f:f4:
96:35:4e:1b:26:83:48:d3:fd:22:a2:2b:8f:f2:bd:
e2:cf:78:97:78:0e:d8:95:21:82:7c:24:2f:21:f1:
57:3b:25:85:c7:c9:be:36:49:50:42:8a:93:4a:4d:
bd:64:65:c8:34:88:23:70:a7:09:93:1c:f2:48:13:
58:f8:b8:05:f0:3b:a8:65:9c:97:3c:80:72:3e:08:
66:ed:19:07:0f:1d:58:cd:32:24:f0:ff:6e:e5:20:
4c:95:ca:69:8b:2a:ea:46:53:a1:33:f0:d3:76:15:
c5:5e:53:26:a0:94:96:75:86:59:57:c9:a0:23:40:
64:f2:c2:5d:07:f5:af:8b:a3:3f:f1:4d:c2:97:07:
15:ff:a9:5e:3f:04:7c:03:22:fa:c8:23:26:c2:c0:
62:7c:0f:9d:e7:4a:cc:de:54:b6:b5:38:70:9c:4e:
fd:58:b0:ba:98:bc:43:7b:5c:db:c9:34:b0:e8:39:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:68:83:89:C3:39:C4:97:A5:D2:72:91:9D:BB:B8:1D:04:6E:88:3B
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5c:1a:cf:25:0d:3a:70:07:f7:3a:96:53:46:94:ef:41:97:
19:fe:d9:b5:21:b0:f7:89:df:fd:09:79:06:53:3c:99:85:1b:
f3:b5:e3:94:dd:95:3f:25:1a:e5:b9:f5:16:15:2e:d2:d5:54:
90:2e:1c:ed:d9:7d:89:24:3b:e8:06:1e:85:fc:fe:6c:84:11:
15:99:e3:5a:c0:f4:c1:53:11:cc:1e:0e:01:95:d5:1c:9d:6b:
6c:3f:78:2b:e0:dc:88:aa:39:c8:55:3a:bc:8c:b9:7a:8b:7c:
69:75:96:cd:8c:1e:e7:6a:8f:d0:3a:87:01:7e:6f:a3:4a:db:
83:02:88:eb:9d:a5:37:b4:4d:51:71:b8:d9:df:29:f9:bd:12:
d8:e1:81:c9:00:01:c6:3e:b0:43:2d:07:83:c6:47:ec:d2:d8:
4d:de:0a:ef:f9:50:cb:a0:50:a7:9f:eb:8b:d6:06:f7:2b:f1:
42:1a:c3:2f:5e:68:12:ca:73:07:1d:78:7e:87:fd:9d:c0:f9:
d7:78:44:03:93:b4:2a:f9:5b:d2:f4:f4:c2:69:92:42:8a:fc:
2d:a7:9e:ff:be:e1:92:09:96:ba:cd:d4:5c:3b:1c:90:59:15:
e4:71:18:e2:85:c5:c0:e5:6b:8a:ad:4c:0f:3a:7c:21:44:89:
23:41:42:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:50 2026 by rpki-client