Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
File: IiiCdVNULJSfFKzFYZw4aimzL2g.mft (raw, json)
Hash identifier: hE62EFpah0uH7ysBRIpFa/n2Sc4HapaOiiWysdeXSVk=
Subject key identifier: 38:C6:6C:86:70:26:09:28:F5:D4:5F:FA:B3:39:07:00:C0:5C:BD:21
Authority key identifier: 22:28:82:75:53:54:2C:94:9F:14:AC:C5:61:9C:38:6A:29:B3:2F:68
Certificate issuer: /CN=2228827553542c949f14acc5619c386a29b32f68
Certificate serial: 019F8F7EBB8DA6B3D9A539B078ECBDEC2577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:15 +0000
Manifest this update: Thu 23 Jul 2026 15:01:15 +0000
Manifest next update: Fri 24 Jul 2026 15:01:15 +0000
Files and hashes: 1: 1-0P5V5UyueMNdvNd2DfvuSJDLmI.asa (hash: nyGQDkF0li5XOfPiwvvNf9NjNB6Be0Rtz+hzPp9tCT8=)
2: IiiCdVNULJSfFKzFYZw4aimzL2g.crl (hash: cuygxv/llAIsI1+W1hh1azbUxJUG1DK6E7b2vD0Ae5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:bb:8d:a6:b3:d9:a5:39:b0:78:ec:bd:ec:25:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2228827553542c949f14acc5619c386a29b32f68
Validity
Not Before: Jul 23 15:01:15 2026 GMT
Not After : Jul 24 15:01:15 2026 GMT
Subject: CN=38c66c8670260928f5d45ffab3390700c05cbd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:48:07:49:b1:ab:70:f7:16:40:6b:6b:d6:
46:a8:92:2f:64:8b:51:1b:6d:e6:85:ad:a6:5d:72:
68:10:b9:2d:17:b4:7b:94:1a:a6:0f:33:ac:de:85:
32:41:19:b6:25:0c:38:81:42:c1:b5:74:b8:c0:12:
77:f1:ee:43:ed:07:d3:34:9e:a3:1e:3d:62:83:01:
5e:27:0c:b3:c5:e9:98:02:bc:e9:a1:f7:eb:fc:45:
ab:23:de:ab:01:67:65:61:7c:ab:37:64:48:a8:9c:
a9:7c:5d:14:0c:b2:a1:4d:40:93:68:58:2f:d3:be:
2d:17:b8:dc:2b:25:75:4a:92:ae:f8:0f:73:c2:7f:
1d:44:7e:f3:b2:54:9e:3a:4e:06:64:4a:c3:b0:e6:
7f:fc:10:45:94:d7:2c:f5:df:c2:6d:0e:95:42:a2:
95:f2:7f:df:6b:48:f1:60:82:6c:bb:de:2a:a3:ee:
e7:d2:bf:6d:3c:1b:32:b8:67:c6:94:43:32:ea:61:
05:d8:3b:84:ab:dc:75:d5:fe:7d:83:9d:3e:2c:c1:
45:13:47:4f:71:2a:31:e1:3d:59:7e:0e:1a:2e:50:
1b:94:fd:05:98:de:a2:26:62:86:7f:19:af:74:fc:
cd:c5:84:3d:1d:9a:05:49:e0:31:6f:3c:d0:b8:27:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C6:6C:86:70:26:09:28:F5:D4:5F:FA:B3:39:07:00:C0:5C:BD:21
X509v3 Authority Key Identifier:
keyid:22:28:82:75:53:54:2C:94:9F:14:AC:C5:61:9C:38:6A:29:B3:2F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:71:f2:44:50:7a:3b:0d:aa:22:8c:3f:e3:1a:08:99:e0:36:
d4:fd:80:7d:57:a4:a2:b6:ba:39:e7:5d:57:24:ae:5c:0f:d4:
ac:b3:ac:2d:bc:81:7a:ff:a6:bf:c8:8c:d2:5f:16:2f:38:9f:
cf:34:39:87:39:91:98:f3:7d:6e:d0:f8:bf:3f:9a:c9:ce:2a:
87:c2:b3:7d:66:38:b8:60:ea:15:2e:cb:87:ee:85:6b:ba:05:
a0:86:c4:93:99:c9:de:0b:3c:20:e8:98:3c:34:f0:66:e4:10:
c4:9e:fe:d3:32:4c:76:2d:7d:ab:00:eb:db:7b:e8:5a:a0:69:
73:7b:33:2c:62:90:dc:8e:7b:f7:f8:12:7f:ca:2c:d3:d5:b5:
0c:f8:43:f8:80:53:10:b2:2b:45:d7:16:e6:63:7e:64:00:e2:
f5:6c:85:59:07:02:49:c9:17:46:b4:0d:63:81:6c:8b:45:02:
49:77:b6:4e:f4:53:fe:90:87:aa:52:2c:6b:19:b9:fb:ba:b9:
da:4e:40:a9:25:d6:02:8a:0d:2e:8b:60:5d:14:4f:74:03:76:
7e:fc:ee:79:7b:a5:87:31:63:25:0e:e2:79:53:86:ae:fc:ed:
c6:80:2b:97:7b:41:b5:8c:68:04:eb:0d:40:03:47:2a:ad:c5:
7a:fb:1e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:04 2026 by rpki-client