Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
File: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft (raw, json)
Hash identifier: UCpGO+ntsC1S0jW1wC6d/DOsI9zZ92hKwKByKsXcqcY=
Subject key identifier: F1:5E:26:DC:1F:23:E6:70:35:85:B7:F6:F3:2E:DA:EA:83:4F:50:82
Authority key identifier: DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
Certificate issuer: /CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Certificate serial: 019F909096515D89A7C53A93843863FBCFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
Manifest number: 01B3
Signing time: Thu 23 Jul 2026 20:00:22 +0000
Manifest this update: Thu 23 Jul 2026 20:00:22 +0000
Manifest next update: Fri 24 Jul 2026 20:00:22 +0000
Files and hashes: 1: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl (hash: QHao8j5sJs3trGucSAry6dDNhl4Q3dB+BfiLySxqyzI=)
2: Eczgp2EFr8e_XSlXUgSdJTrIAak.roa (hash: FsSSezhMi82MyPxKqmo1dtY5pOhu7CRckdx69CzRJss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:96:51:5d:89:a7:c5:3a:93:84:38:63:fb:cf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Validity
Not Before: Jul 23 20:00:22 2026 GMT
Not After : Jul 24 20:00:22 2026 GMT
Subject: CN=f15e26dc1f23e6703585b7f6f32edaea834f5082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:13:58:72:17:f2:b9:3b:ea:78:3b:90:cf:
03:ba:ee:37:56:53:98:ef:9b:c0:92:ae:f9:40:fe:
1c:c8:6f:8f:68:5b:52:80:31:52:2a:d1:d4:16:cf:
6d:bf:f8:6b:78:bc:94:51:11:a9:23:db:b2:ce:54:
0b:23:5f:4f:f9:de:b2:36:15:38:0c:c8:c9:a1:ad:
05:a9:0d:d2:0b:20:89:5e:49:92:01:f3:63:fe:92:
6d:f3:87:6d:c6:b4:1d:9a:c9:fc:c5:b4:b7:55:09:
8c:8b:31:0b:97:5d:4d:15:f4:a1:ad:a8:43:16:f0:
2d:ee:08:31:0c:ef:89:45:e2:28:99:d5:4b:47:47:
ee:7e:5c:4d:01:f0:69:d4:f3:0e:bb:aa:b8:36:01:
8b:d8:66:3d:2f:0e:1a:4e:29:37:82:4b:ab:22:f9:
c5:50:18:21:16:a1:11:1d:09:66:a0:d9:f7:bb:aa:
d6:5a:69:cc:d7:e3:b1:69:62:fe:f3:47:ef:9a:6e:
54:e2:5b:da:04:2a:d1:89:1c:00:36:dd:0b:ba:bb:
9f:9f:65:bb:a1:bb:45:d4:00:96:82:96:f5:78:40:
b1:ff:99:25:c9:1b:3b:c9:ed:b1:89:fe:81:46:28:
9d:28:29:cd:90:22:b6:10:30:4e:4c:58:1a:22:72:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5E:26:DC:1F:23:E6:70:35:85:B7:F6:F3:2E:DA:EA:83:4F:50:82
X509v3 Authority Key Identifier:
keyid:DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:90:3c:11:02:58:84:5a:96:16:9c:aa:c4:e7:14:f7:98:a2:
48:ef:36:42:eb:17:06:8a:2e:23:bc:a1:ae:b4:b8:08:08:99:
0c:44:30:4d:a2:79:08:a3:5f:d7:a9:ff:a1:ae:c3:4e:01:ef:
dc:e0:97:64:9d:f6:53:d7:c6:1a:f2:53:fe:da:0f:6b:9c:2e:
be:9c:b7:bf:31:91:51:61:83:c0:2d:d0:ff:e3:f0:2c:17:60:
03:0c:67:d6:0e:02:ab:60:28:7a:00:c4:85:c9:45:d0:bd:46:
8c:e0:a5:e2:1f:2e:5a:49:e0:0e:17:00:83:50:c6:f5:8e:ff:
a1:2c:54:cc:58:d4:70:59:ac:f4:84:20:58:46:04:52:93:f2:
9a:36:82:c5:a2:99:44:08:52:83:b6:ec:4d:b5:73:76:6f:b1:
91:79:c1:0c:9c:8a:37:4d:da:ca:4a:ab:00:53:eb:93:1d:93:
e5:1a:58:0d:30:9d:80:da:8c:57:03:fc:6d:b5:52:f0:5a:49:
6b:43:9a:70:8b:05:20:e6:d3:6a:0d:b9:97:a0:8a:7d:12:6b:
51:2d:88:49:19:c0:53:71:b9:17:35:0a:02:02:75:ab:e8:70:
ec:c2:41:3b:ce:50:3e:a8:bb:a5:e1:a3:8e:b1:42:85:62:3e:
6a:b0:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:19 2026 by rpki-client