Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
File: 3fwxxRjdlxX93slYJSfshEjXhA0.mft (raw, json)
Hash identifier: nkdoMgm512LLwL7Gl5YB3Cs3siidbYbX5NmgMlV9xz0=
Subject key identifier: EB:43:D8:3F:56:5B:EB:39:DD:97:FA:50:4B:CA:84:3B:30:70:B8:D6
Authority key identifier: DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
Certificate issuer: /CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Certificate serial: 019F8F7E9FA5E3873C7B9B5D3E02B2993CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:07 +0000
Manifest this update: Thu 23 Jul 2026 15:01:07 +0000
Manifest next update: Fri 24 Jul 2026 15:01:07 +0000
Files and hashes: 1: 2rI5z9MKWkWLbN4Ac0mrTh9wI0Q.asa (hash: gEb+fnmGtGeQVf4nv5uRoOoaQszHv4xPq/xVWvjZho4=)
2: 3fwxxRjdlxX93slYJSfshEjXhA0.crl (hash: wevA1II8z9qU9P9ewiNSfABjzKFtOQhvUkq8WA0lVvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:9f:a5:e3:87:3c:7b:9b:5d:3e:02:b2:99:3c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Validity
Not Before: Jul 23 15:01:07 2026 GMT
Not After : Jul 24 15:01:07 2026 GMT
Subject: CN=eb43d83f565beb39dd97fa504bca843b3070b8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:9e:d8:b1:ec:0f:ec:8f:83:b1:d5:c8:93:
da:b5:0f:e7:9b:57:cf:4f:3c:7f:10:84:54:05:20:
10:a0:95:f1:cc:cd:f0:9c:70:80:0d:a8:13:76:7f:
e5:fd:22:a5:8c:4b:38:d2:2f:2c:13:8e:ef:ae:09:
6f:28:68:e8:07:ae:d7:26:dc:ec:c5:db:89:d6:fd:
b1:91:4c:27:7f:85:51:06:73:ed:7b:e9:48:ca:eb:
e0:e0:b2:d7:64:95:9c:9a:ec:24:35:00:fd:c4:dc:
a8:34:2e:92:07:da:0f:a1:f2:aa:e9:bf:57:dd:d1:
d3:85:9c:86:9a:94:f5:e0:70:2d:07:eb:d1:e7:31:
cf:ae:a0:3c:67:10:70:20:b3:f5:f1:b5:c8:59:99:
d9:25:2f:b5:32:2b:ff:5d:07:8b:d3:d0:71:d5:32:
d1:b8:35:4d:8d:2c:12:bc:84:95:24:4e:5f:75:93:
35:8e:67:07:c8:25:a0:3e:34:87:ef:a5:c2:0b:0c:
40:3a:5a:d8:17:e1:1a:e8:7d:0f:72:64:f6:29:65:
d2:db:06:e5:40:b8:9c:6c:58:6c:0a:8b:71:29:9c:
a9:f1:39:81:f0:aa:57:f9:ae:ce:69:9f:a9:0e:67:
74:21:41:ab:74:01:f5:09:42:84:5a:3d:c3:72:b4:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:43:D8:3F:56:5B:EB:39:DD:97:FA:50:4B:CA:84:3B:30:70:B8:D6
X509v3 Authority Key Identifier:
keyid:DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7a:c6:8a:a1:df:83:73:86:9b:b0:d7:9c:c4:af:b1:d4:4f:
42:e9:2f:bf:e6:36:ab:38:08:39:73:92:cd:eb:c1:68:db:cb:
77:dd:4f:df:d4:fe:36:57:b9:fd:0d:f2:b3:80:6e:1f:cf:e6:
1a:4f:90:2e:c0:9b:1c:5c:8b:d3:ea:e5:42:b6:41:2b:f2:39:
06:58:49:38:1a:06:5e:c6:d1:eb:63:dc:17:ea:35:45:4f:d7:
4c:ab:bc:0c:99:c7:20:d3:a7:e5:6e:74:4a:e0:ba:a0:53:56:
da:14:95:db:c7:9c:bd:0a:7a:e3:0b:9a:43:64:d3:0a:53:6f:
a5:29:5a:db:5f:dd:82:7a:55:94:fb:a4:50:af:72:27:d4:36:
b0:20:f7:6e:fb:d5:03:01:58:6e:44:34:10:80:f4:de:ca:48:
c0:ce:45:b2:bf:4a:30:39:04:e5:e1:0f:ed:82:d8:09:60:a6:
b9:fe:51:cc:14:ad:28:2b:40:0f:e7:39:04:81:fc:33:56:fc:
33:a5:95:88:12:98:1f:7f:5e:dd:f0:a9:d6:3c:57:8a:f0:77:
d0:d4:a2:f1:a4:29:bd:6e:36:9c:b9:56:85:93:a8:53:52:4b:
70:ed:e6:e4:e2:81:82:77:b6:65:cb:77:a7:c2:22:63:0a:5f:
ff:e3:46:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:34 2026 by rpki-client