Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: /QYE4fYeYP2C4izcpdVEZDNazb6NWWzEHiEelAYLlX4=
Subject key identifier: C4:F4:EC:B0:10:BD:F1:30:8D:88:24:DD:FF:6F:4E:79:6E:F9:75:B7
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 019F8FEC5C8501E852EA5EE03A73E930385E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 14F9
Signing time: Thu 23 Jul 2026 17:00:59 +0000
Manifest this update: Thu 23 Jul 2026 17:00:59 +0000
Manifest next update: Fri 24 Jul 2026 17:00:59 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: KHdsTpTd1D7SlkD9DLuwx6q8JkU0Az+Jhm+MO22pihI=)
2: S_e75AZV3-MMHLgXTcVLGq4T6uc.roa (hash: AVmxa5KmaRL9M9i0sdO8A9BbJeQGosTTukip4Q42nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:5c:85:01:e8:52:ea:5e:e0:3a:73:e9:30:38:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Jul 23 17:00:59 2026 GMT
Not After : Jul 24 17:00:59 2026 GMT
Subject: CN=c4f4ecb010bdf1308d8824ddff6f4e796ef975b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:cb:f7:8f:6f:ec:41:fa:bd:4d:d1:ed:eb:
02:14:35:e6:1d:0b:d1:e3:3a:60:54:77:20:ed:cb:
4d:91:bf:b9:86:84:4c:ca:fd:39:09:9c:88:00:cf:
27:40:4d:55:21:ce:d6:d6:e6:be:22:da:36:05:e8:
86:62:d9:f4:bf:88:0c:8c:c4:91:fe:16:b1:cd:b4:
ea:7b:9a:62:45:8d:ca:dc:23:0d:06:28:ca:1f:a6:
11:bd:70:32:42:6d:1c:f4:90:f0:6e:a4:cc:17:f6:
cd:dd:e8:66:88:42:0f:fb:37:fe:c5:29:c4:f7:fb:
57:44:4d:63:3b:b9:1b:69:fe:05:99:e2:54:93:87:
31:f2:7d:f4:7c:e6:d9:e6:30:33:01:87:0b:29:4e:
17:dd:d3:47:d9:4f:93:1a:5f:d9:99:8f:66:1c:5a:
bc:70:35:af:b8:a6:8a:72:fc:21:68:b5:e3:71:88:
b5:55:c2:ef:00:13:af:bc:6d:85:fc:9b:f3:61:7b:
1a:ee:09:e1:c7:51:fa:c0:03:0a:3d:d8:e3:a5:ef:
1d:84:c6:71:cb:66:a9:0d:cd:be:5e:79:5b:fe:43:
fe:f4:92:87:cc:64:80:12:c6:c8:d7:e8:f8:2c:c4:
4e:22:45:67:17:b0:c5:3a:24:d5:58:13:8c:7a:23:
87:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F4:EC:B0:10:BD:F1:30:8D:88:24:DD:FF:6F:4E:79:6E:F9:75:B7
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f5:31:1f:d6:34:de:ed:d7:ba:0c:c1:9f:54:62:11:c3:d1:
bb:01:b1:85:90:6d:70:e9:2d:7f:57:d7:26:df:c8:9b:71:8b:
70:aa:8a:9d:5d:fe:31:78:86:c4:54:71:47:1e:a5:d5:eb:e3:
c5:a5:10:6d:af:9e:db:c9:5d:af:2a:42:8c:82:7d:f5:5c:09:
b5:e5:a2:50:97:00:5b:54:1a:06:32:be:66:5f:34:f3:9f:ac:
2d:2a:7d:7f:2a:b4:e0:17:96:96:99:91:d0:e7:92:c6:47:b9:
a1:06:8b:6b:58:fc:13:79:cb:65:1f:d1:44:2d:a0:32:1f:06:
5c:87:54:48:3b:a0:36:2b:ec:6a:d7:bc:69:49:31:b9:b4:10:
37:db:20:83:3e:8b:a8:74:56:ab:18:78:f2:b7:d6:28:4e:30:
eb:5c:f7:b1:9c:7b:67:fb:77:a1:d3:9d:a8:da:aa:07:eb:26:
4d:ee:ed:24:8a:98:4e:26:5d:86:b1:f5:d5:ba:e6:3c:73:cc:
bd:86:70:e8:db:a2:7a:11:d5:bf:dd:6a:a2:33:4c:8a:6c:da:
c5:7d:0e:eb:0a:81:d3:68:10:3f:fd:6d:50:6a:8d:22:d1:87:
9b:5f:27:b5:22:6f:bb:37:31:fe:36:e1:f0:e8:cb:b3:53:23:
07:5f:99:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:02 2026 by rpki-client