Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
File: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft (raw, json)
Hash identifier: NAvO2J+0RpacoIkd0bxrKovirpK9Gwei/Z0b9lYv8GE=
Subject key identifier: E4:66:FD:72:3C:5B:14:5C:EC:1D:71:CE:67:8B:A7:16:59:2C:1B:F0
Authority key identifier: DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
Certificate issuer: /CN=ddb182a5dbd1bee871de519002d6018fee213670
Certificate serial: 019F8F7E68D4541200E8B757E2FF3A8520AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:54 +0000
Manifest this update: Thu 23 Jul 2026 15:00:54 +0000
Manifest next update: Fri 24 Jul 2026 15:00:54 +0000
Files and hashes: 1: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl (hash: S0IYPxMsWuNdny8oYcXx1xdeLC2dShF9ymhg++gIiPw=)
2: 63JgYqrtG6KoZuuOrK4W3du1Duo.roa (hash: bCSh6KZ5NQdZdMyFJ085Wh626DTWHoPFQnxoetlXdVU=)
3: tmXRQcCYhINr2gZL0cRubH_ch2k.roa (hash: j7OzX8w8hg3VPQ17U1GWH4ZU5mHgI9S7cGktHlSkmlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:68:d4:54:12:00:e8:b7:57:e2:ff:3a:85:20:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb182a5dbd1bee871de519002d6018fee213670
Validity
Not Before: Jul 23 15:00:54 2026 GMT
Not After : Jul 24 15:00:54 2026 GMT
Subject: CN=e466fd723c5b145cec1d71ce678ba716592c1bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:19:8a:86:00:02:5e:b4:d2:9a:d1:8f:4a:
44:e4:b2:f3:a5:d1:1c:91:b6:3e:97:a0:01:20:cf:
2d:92:32:7c:28:60:51:3a:ec:2a:b8:9f:45:37:f3:
f0:36:9f:5e:c4:01:4c:bb:8d:a2:0e:98:79:69:1a:
0a:4c:00:74:1a:57:f4:52:31:d0:08:8f:af:00:c2:
0a:e0:3c:ef:5c:b7:e1:dc:da:75:32:ce:3b:09:10:
f2:b3:87:fa:3d:e0:3c:48:35:96:d2:ac:15:07:66:
03:d0:fb:8f:1d:df:a0:a4:70:44:99:12:ee:dc:16:
97:80:88:9a:07:59:19:6c:96:58:e3:d8:d5:69:71:
46:51:a0:71:04:2c:56:f4:e2:ae:f5:87:2d:3b:c0:
fc:91:82:c6:42:95:a4:ad:a2:b3:b5:b8:8a:36:d7:
17:7e:18:f4:83:38:55:58:d5:61:bb:4b:4e:ca:90:
4d:09:c1:52:a1:e5:d0:4b:a3:90:c4:2f:27:81:6b:
a9:d3:3f:8e:89:09:43:1e:12:4b:d2:25:81:96:0f:
b6:aa:36:78:c8:44:b1:19:1e:66:be:28:43:e8:12:
31:88:ef:3c:23:1b:44:7f:42:a4:4b:33:57:91:67:
d2:c7:93:0f:a1:11:92:72:89:83:03:98:b9:fb:13:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:66:FD:72:3C:5B:14:5C:EC:1D:71:CE:67:8B:A7:16:59:2C:1B:F0
X509v3 Authority Key Identifier:
keyid:DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d1:d0:e8:a5:0a:02:e0:37:08:67:22:56:97:8a:a6:38:74:
be:f6:75:e2:44:13:3c:af:09:b9:a8:0b:ef:73:2a:a7:4a:cb:
76:ec:aa:95:26:aa:1c:02:80:31:27:f4:5a:a8:60:f8:10:46:
39:71:28:ee:f4:48:6d:6d:b0:fd:c1:f5:c6:0f:e8:33:21:25:
74:34:cc:1c:f5:e8:0c:2d:79:5d:9b:d9:03:c6:21:06:ca:12:
2a:56:92:07:2c:38:68:5c:d1:02:f8:97:15:48:26:d2:ff:0f:
e0:cf:37:90:37:89:1b:bc:46:99:9f:b3:09:d6:96:3c:49:39:
eb:c5:39:f9:58:e6:35:1a:d2:be:b5:8c:e1:a4:83:35:fb:67:
e5:54:5a:f2:ea:f0:d0:ed:05:da:70:cf:fc:26:14:3d:7f:4a:
4b:e9:8c:5c:09:91:26:8a:f3:56:ef:a1:b4:af:d6:14:3e:13:
de:7b:ce:7b:e9:4c:46:02:0d:54:8d:67:54:42:6c:96:20:ee:
a4:c8:88:c5:d1:13:fc:94:3f:3e:e0:7b:92:92:d7:71:d6:51:
d5:42:1d:f3:29:3b:bf:6c:27:53:62:8b:d6:40:32:22:ef:85:
2a:25:74:0f:b0:34:28:c4:5e:71:ba:05:f2:58:cd:7a:52:f2:
75:b6:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:15 2026 by rpki-client