Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: ImiFCJYMu2tbnA52SJY5pdKZnQFGwzgWVjZJhSlmPYU=
Subject key identifier: 4A:C1:A1:E1:F6:A7:60:77:7C:0F:5A:B8:E1:C4:B3:F8:4E:12:21:FF
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 019F8FEBE129DFCEDB5985203EDB32732DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 10A5
Signing time: Thu 23 Jul 2026 17:00:28 +0000
Manifest this update: Thu 23 Jul 2026 17:00:28 +0000
Manifest next update: Fri 24 Jul 2026 17:00:28 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: S/k+utd4TSv4ZuxzHdMMnP/s0UPuyLe2sU2s2tgUYc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:e1:29:df:ce:db:59:85:20:3e:db:32:73:2d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Jul 23 17:00:28 2026 GMT
Not After : Jul 24 17:00:28 2026 GMT
Subject: CN=4ac1a1e1f6a760777c0f5ab8e1c4b3f84e1221ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:eb:b1:cb:0e:2d:a0:8c:ed:d8:11:6e:5d:01:
a6:7e:47:af:cc:14:c3:38:17:f3:6c:bf:a1:48:55:
48:32:87:78:e4:a2:53:ef:a1:55:2c:ca:ed:55:0b:
0e:33:fb:11:13:80:66:bd:16:9a:d1:d8:3e:3e:2f:
5e:e0:eb:b1:00:aa:c1:42:07:db:40:ae:38:83:89:
3f:86:7a:4d:c4:25:3a:b2:3f:e6:e4:c3:40:3b:f2:
06:90:fe:dd:2f:5e:2c:88:85:09:6b:52:3e:bd:e5:
62:8d:1a:26:aa:d0:b1:ca:2d:b6:55:9a:93:70:12:
c5:88:ee:b0:26:ce:1b:83:be:ef:07:48:50:01:88:
6b:95:e1:e4:93:fb:c2:14:ad:cf:64:9b:8d:3a:e9:
c4:6f:ca:be:e0:c5:61:8a:57:a8:f9:3c:84:e7:55:
1c:d8:b0:94:83:2e:0d:01:5e:01:0c:6c:0a:77:cb:
74:1f:50:00:88:45:9f:81:34:e5:1d:cd:17:92:71:
a9:9c:75:79:27:80:db:93:7e:fb:15:0d:fe:5d:04:
3f:30:37:51:11:d4:9a:35:8c:ae:a2:5d:a3:32:0e:
54:62:79:8b:94:7c:7c:8b:73:91:ee:39:ca:90:90:
32:f1:25:b8:08:26:f5:d3:93:03:cb:12:bf:22:c8:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C1:A1:E1:F6:A7:60:77:7C:0F:5A:B8:E1:C4:B3:F8:4E:12:21:FF
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a9:9b:b6:70:10:6f:95:aa:1e:a3:9a:6a:aa:e7:e1:f2:98:
cb:95:46:ef:02:78:16:95:e9:62:0e:b8:44:ba:97:a1:c4:63:
15:f3:30:f4:68:6d:54:0e:ba:63:cf:42:26:7e:a5:11:1a:69:
8f:b0:18:be:d0:d0:60:89:90:5d:3e:6f:0f:b7:f6:30:d3:1f:
26:e0:cb:72:0e:ac:ee:6a:9c:e3:31:d0:1c:76:12:48:14:47:
03:38:84:de:02:f3:7b:f5:5f:e8:3c:7b:2c:12:b7:cd:53:d4:
dc:9f:36:3c:54:2d:fe:78:ba:b4:11:5f:5d:63:95:ce:da:6d:
ca:ca:99:73:8e:57:c8:27:16:43:a3:8e:c9:2c:3e:fd:d5:15:
84:ae:ac:96:db:5b:53:c7:12:ec:44:6d:05:70:83:eb:47:f1:
30:07:de:d2:e0:32:d0:d8:0f:6e:84:20:1e:12:0f:d4:cf:61:
e2:7e:e0:a4:b1:5d:3d:83:a4:e4:4a:c0:58:c5:0a:00:89:d3:
e9:81:52:fe:8a:9e:05:74:da:b2:35:94:7e:9d:5f:f2:00:35:
84:5c:5d:37:3b:82:e5:ff:7a:0a:4d:48:2e:b1:e8:92:13:4f:
48:23:77:a5:cb:d2:52:e3:36:ec:a7:a8:c3:08:cf:5d:b7:45:
62:91:7e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:05:46 2026 by rpki-client