Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: YQn7azi2sLio55SVsmAGpI+FnKN9kCBWekXy7KVpuKY=
Subject key identifier: AB:DF:32:D6:C1:A8:1F:92:E6:BF:DE:1C:41:CE:EA:8C:56:29:C7:86
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 019F905A46492002193F9CB073037A512CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0ED3
Signing time: Thu 23 Jul 2026 19:01:02 +0000
Manifest this update: Thu 23 Jul 2026 19:01:02 +0000
Manifest next update: Fri 24 Jul 2026 19:01:02 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: ymb0mg/Y1BpIof+nwrRD/J1g7KBb+XYlRWgKHbegIUs=)
2: 7oc8a8fS3DJKvtS40qTcpFXQvEM.roa (hash: 8aVVJ9t5PeC1jL7SS/bu2hleqTmY1JsdKhA8bRBNWso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:46:49:20:02:19:3f:9c:b0:73:03:7a:51:2c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Jul 23 19:01:02 2026 GMT
Not After : Jul 24 19:01:02 2026 GMT
Subject: CN=abdf32d6c1a81f92e6bfde1c41ceea8c5629c786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:7e:ba:4e:76:94:e0:68:56:53:88:ea:92:
15:d1:c8:cb:67:96:b8:52:b9:32:cf:23:0a:e3:ed:
c7:55:90:9a:49:a2:53:e8:a6:a1:a5:99:30:96:74:
98:e1:f9:b8:01:4a:10:ec:d5:ef:79:3f:43:39:9d:
d3:cc:ac:04:dc:d7:a8:19:bb:9c:e3:7c:f4:9e:92:
c3:90:16:08:c3:b9:87:ad:b9:5a:b7:c5:73:59:ca:
4c:08:ac:16:8e:05:ba:e5:27:a0:1c:07:c0:74:b2:
6b:5d:01:1e:84:94:ca:75:65:83:e1:32:a0:30:79:
16:47:4c:c8:e7:48:08:ec:2b:df:19:d0:ca:d2:48:
df:e0:90:2d:b7:2f:08:92:6c:11:f2:81:00:e1:b3:
21:1c:a7:6b:4a:ab:a9:1a:dd:d3:94:6d:df:57:fd:
2e:6e:c0:fe:ba:35:54:ca:80:3d:18:57:5f:7c:b9:
0a:6b:c9:d5:ae:9f:20:25:8a:07:1c:bf:fc:45:75:
90:f7:63:cb:20:95:67:29:b3:8a:da:49:26:8e:a2:
e3:a2:21:48:87:0e:61:a2:23:ec:4e:3f:93:48:12:
c4:92:74:ce:64:e1:28:31:4a:3c:13:08:62:d6:4b:
06:b9:84:9d:37:f0:fa:3c:e1:cd:e0:9d:29:1e:c8:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DF:32:D6:C1:A8:1F:92:E6:BF:DE:1C:41:CE:EA:8C:56:29:C7:86
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:50:bb:95:c1:54:c7:25:e4:39:fb:0f:3c:b7:03:5a:1e:7b:
df:db:f3:b1:ef:ba:05:ae:b5:bf:c4:90:73:16:19:2f:4d:2b:
af:26:1e:cc:af:fb:89:e3:50:81:3b:9c:3b:d8:f7:0e:6f:e0:
79:1f:60:ca:f7:6e:39:59:50:b6:32:63:23:02:ef:ed:67:98:
4e:20:14:2a:14:04:36:07:e8:ec:c0:ba:58:ff:20:0c:e7:13:
7d:d7:35:01:0b:f4:b2:a4:d2:ad:74:1b:47:ea:a9:6e:56:5f:
1f:e3:9d:ab:75:ad:d5:ca:32:ed:8d:16:61:74:f1:e7:d8:22:
92:eb:80:37:2e:0b:59:ba:30:09:01:fd:03:82:7c:b9:a1:33:
f1:6b:1d:c3:e8:88:fd:99:8e:5f:78:76:f7:b9:fa:3d:30:41:
cc:3e:ae:78:74:ca:f6:d9:c0:e8:ac:29:1e:40:69:ec:a5:d4:
ae:65:cd:f1:48:e4:3b:77:82:c4:8f:59:1f:4d:7a:ba:c7:6c:
28:53:33:ca:c7:f8:e8:8b:83:d3:c5:48:fe:ad:5e:f2:20:73:
56:f7:e9:09:15:f9:f6:84:21:62:f9:8f:0c:52:a7:73:62:12:
5e:18:0a:18:10:34:8e:00:42:9f:27:f0:51:a8:c4:46:01:ff:
7f:05:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:16 2026 by rpki-client