Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: d09cFKWtqVJV6/eTP7uXpoVwU+Lc0P+1HSc4qMjBpaA=
Subject key identifier: DB:A5:51:43:13:7F:C8:2F:1A:0C:C9:52:CA:48:FA:92:F0:2B:78:FE
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 019F90FF8789548D9D6F9A90450EF7A9D20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 1383
Signing time: Thu 23 Jul 2026 22:01:33 +0000
Manifest this update: Thu 23 Jul 2026 22:01:33 +0000
Manifest next update: Fri 24 Jul 2026 22:01:33 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: dBpydkNI7EtUA8d+IulTnUoKpnTwDMHqIksGPGgOAcM=)
2: cIxKBh6oU9S_NcB8Ln8qgQPRqMc.roa (hash: qT7a6QcaDtE4QIrrmB5EqTQOJdhXraa8fLtpECGlH+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:87:89:54:8d:9d:6f:9a:90:45:0e:f7:a9:d2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Jul 23 22:01:33 2026 GMT
Not After : Jul 24 22:01:33 2026 GMT
Subject: CN=dba55143137fc82f1a0cc952ca48fa92f02b78fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:db:e7:d4:82:30:0d:eb:11:19:0a:51:ac:
58:8f:e6:53:52:82:1a:00:8d:2c:9f:cc:0c:95:20:
0c:8c:78:32:da:6a:74:41:f8:9d:0d:79:8a:a9:85:
75:c8:c8:12:dc:97:f9:71:72:40:c4:1f:eb:ca:e9:
43:b6:90:d0:36:9d:96:ce:4a:f8:00:54:2b:0d:33:
4d:d6:b1:ef:82:b7:1a:32:fa:d4:ab:2c:29:57:ad:
e4:b1:cb:7f:86:33:2f:f2:ef:69:d1:56:1e:3c:9b:
f3:75:0d:ef:b0:4e:61:61:ce:02:15:20:90:df:9f:
a4:15:64:e4:12:21:2c:05:62:27:b9:94:e6:9b:d7:
23:24:46:d4:30:25:57:b1:41:9a:d6:8a:f5:57:8a:
ca:79:60:a4:0d:bd:05:41:91:c7:c5:94:32:08:e0:
22:66:a6:b2:3d:90:53:a9:ec:9d:04:3d:ef:e1:0a:
4d:1a:e6:b1:69:f7:12:1c:7e:c9:ad:3b:3a:e2:ed:
97:c2:8b:80:c9:cd:b7:b0:d8:ca:fa:9e:70:3b:87:
2f:5a:f1:23:6b:4a:85:73:3f:87:4f:58:80:f7:a5:
c0:62:20:16:9b:d2:8e:7e:95:ed:45:39:f6:2b:41:
f6:42:c1:c8:11:d5:53:64:f4:34:6d:17:29:81:c9:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A5:51:43:13:7F:C8:2F:1A:0C:C9:52:CA:48:FA:92:F0:2B:78:FE
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a9:d1:aa:73:ed:4d:c3:c0:9b:6b:4e:9f:55:24:58:f5:14:
7a:3f:dd:ad:bc:77:0c:60:1b:4e:8f:fe:d1:ff:3e:dd:fb:57:
3e:65:0e:54:1e:8e:00:4e:12:29:68:66:a1:46:02:d4:07:c7:
c8:d6:e1:85:e3:cd:39:fc:66:e6:6c:83:59:0a:9f:e9:3c:39:
07:e6:61:bc:6b:96:e6:ac:c9:79:5f:07:7f:1f:b9:1e:3a:85:
4f:1c:ee:7d:7a:b4:f5:8a:ef:32:8a:64:7c:3b:9e:83:49:bb:
66:ed:90:c2:99:d4:b4:eb:d0:eb:31:08:1a:ba:61:16:c7:62:
7a:06:8d:02:4c:27:bc:72:ed:84:b4:01:7d:d2:31:4c:32:1e:
6f:72:62:5b:64:d6:12:dc:28:10:87:3b:fe:c8:2b:f2:90:44:
4a:e6:b8:b3:d9:ae:de:60:90:45:d5:6f:77:fe:9b:11:fa:62:
6f:a3:4d:c0:e1:5a:95:7e:f4:f7:8e:6b:eb:86:d4:db:b4:42:
60:a4:2c:53:82:07:15:eb:e3:7b:8f:22:1b:31:df:02:76:5b:
14:ce:58:a2:e1:7c:ed:88:c6:e0:20:21:1a:15:1f:f2:7c:85:
fa:1b:5b:a8:1a:cd:74:a8:8a:dc:bb:e5:a3:10:b9:7a:f4:4d:
4b:8d:53:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:12 2026 by rpki-client