Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
File: 0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft (raw, json)
Hash identifier: DRjpzve7GB8tCJo+D530iuHbjT6Wkq4z1yHkScrFAc4=
Subject key identifier: 9D:D1:72:63:DA:9F:2C:06:4A:48:3A:96:1E:1B:F1:34:8B:37:63:80
Authority key identifier: D3:16:B9:21:90:7D:88:45:A5:0C:71:21:0E:A3:94:08:10:F7:74:18
Certificate issuer: /CN=d316b921907d8845a50c71210ea3940810f77418
Certificate serial: 019F8F7F84D1F52F6867A0D66139E2D5085B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xa5IZB9iEWlDHEhDqOUCBD3dBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:06 +0000
Manifest this update: Thu 23 Jul 2026 15:02:06 +0000
Manifest next update: Fri 24 Jul 2026 15:02:06 +0000
Files and hashes: 1: 06qsiTs00oCJ2kROd3qD36mUxjE.roa (hash: z4BUL/0kp3HzAZA+43CMRJbHV1qXo2AEN+PYpjUwUcU=)
2: 0xa5IZB9iEWlDHEhDqOUCBD3dBg.crl (hash: rZhJbTasx48u3lpuqC6U3lQDYrQ3m6CRivgwfXtMtow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xa5IZB9iEWlDHEhDqOUCBD3dBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:84:d1:f5:2f:68:67:a0:d6:61:39:e2:d5:08:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d316b921907d8845a50c71210ea3940810f77418
Validity
Not Before: Jul 23 15:02:06 2026 GMT
Not After : Jul 24 15:02:06 2026 GMT
Subject: CN=9dd17263da9f2c064a483a961e1bf1348b376380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:85:c3:4c:b6:d8:2c:c6:93:3d:47:d9:c0:
f6:2d:43:6d:fc:71:08:da:40:48:ed:0d:65:da:06:
7f:fe:70:7e:c5:2a:cd:16:bd:39:0b:59:f3:4c:c1:
bf:00:7c:f8:07:ff:19:6d:d8:ec:5c:92:63:b9:c9:
21:86:46:f1:8a:a9:10:0a:36:47:4c:0d:f7:01:6b:
42:34:0f:b5:78:e5:e3:aa:54:9f:98:40:f1:70:55:
1b:f9:29:6c:38:10:79:fb:54:a2:71:0e:f7:45:66:
eb:a3:f7:94:67:fb:d0:63:91:04:34:0e:51:9e:cd:
4b:fa:5e:a4:cf:0f:65:1a:d3:36:1d:1f:44:c2:27:
97:ee:d2:30:ca:12:d1:25:c6:81:be:81:8d:c8:97:
eb:69:72:cf:d5:88:29:fc:0b:0f:dc:91:dd:c1:d5:
a8:cf:15:ea:f2:29:0b:3d:ee:9b:0f:99:33:ef:76:
a2:62:71:63:d5:be:d2:86:a4:b5:b9:9f:27:c9:cc:
ac:60:f4:9d:6f:de:44:65:e7:a1:e4:48:ee:c2:03:
36:da:cf:84:2a:db:fb:64:32:4b:9b:5f:b1:7a:5b:
fe:57:ae:c3:b4:4b:45:1d:e9:b0:1f:f6:62:f1:73:
40:63:4e:1e:f9:b7:06:83:37:a3:3f:30:49:cc:fe:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:72:63:DA:9F:2C:06:4A:48:3A:96:1E:1B:F1:34:8B:37:63:80
X509v3 Authority Key Identifier:
keyid:D3:16:B9:21:90:7D:88:45:A5:0C:71:21:0E:A3:94:08:10:F7:74:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xa5IZB9iEWlDHEhDqOUCBD3dBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ad:2b:e5:61:0f:2f:2d:22:47:dc:f0:d6:2c:62:c6:a8:7f:
63:2a:80:b4:3b:59:f0:02:12:cb:1a:40:cc:23:b1:b5:19:69:
4d:ef:6d:25:ab:81:95:33:68:77:69:9c:4b:1c:ff:84:3a:ba:
de:98:61:4b:b6:d3:63:c7:37:d1:99:a7:34:9e:3d:b7:75:ed:
80:23:3d:57:b7:c7:a8:b5:ee:07:80:c5:b7:c7:b4:17:dc:95:
27:f6:e7:35:48:f0:59:a9:2e:bc:b5:f7:20:88:8c:80:52:9d:
cc:ca:ea:6d:e0:75:e0:f5:af:5c:13:19:c1:50:d3:11:7a:d6:
a3:42:f7:50:af:f6:3d:29:97:f0:b4:d0:16:2d:09:13:07:6e:
9c:bf:ac:a8:fd:eb:66:7d:b3:ec:ce:8d:db:fe:29:1b:5d:0c:
c0:82:ce:28:98:7a:30:15:af:ef:18:b6:cb:06:e0:18:68:35:
17:d3:af:27:dc:27:c6:ec:6d:a2:03:b7:96:ef:5c:db:4c:c6:
ec:36:71:1f:56:5f:94:c2:63:07:f6:02:d6:de:cc:fc:ec:53:
5e:00:9e:66:ec:f2:2a:c8:92:23:ae:2e:8a:ff:bf:fd:d6:2e:
00:2f:ae:d0:df:f8:47:0d:3b:bf:07:de:d6:8f:09:23:d0:7b:
53:94:01:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:24 2026 by rpki-client