Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
File: 3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json)
Hash identifier: MjmlKVImrdVErvEJJIlXra05DN+e1NXRdZyJFvCA7ZI=
Subject key identifier: 1F:8D:FC:64:70:AE:D8:6B:FD:99:C0:F9:2B:AC:E0:81:63:A4:43:40
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial: 019F905AB54298C496ED35C3DE1B6C1B8939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
Manifest number: 1319
Signing time: Thu 23 Jul 2026 19:01:31 +0000
Manifest this update: Thu 23 Jul 2026 19:01:31 +0000
Manifest next update: Fri 24 Jul 2026 19:01:31 +0000
Files and hashes: 1: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: 2uQngNzSrLmFfpeCFmPs9HgTi3xx2VVGAHe/Dvha/0M=)
2: h3ZDg5youB0K7vntlWcD6_hznfg.roa (hash: 9Ot/r2EVZQa+csMn0s0+LAGhdTl5GbdXVa69dBPCmRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:b5:42:98:c4:96:ed:35:c3:de:1b:6c:1b:89:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Validity
Not Before: Jul 23 19:01:31 2026 GMT
Not After : Jul 24 19:01:31 2026 GMT
Subject: CN=1f8dfc6470aed86bfd99c0f92bace08163a44340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:ff:75:4c:8d:7b:54:33:90:e4:a6:df:64:
85:89:05:f6:1a:e6:be:f7:22:76:f3:d4:ef:c9:77:
11:b5:05:fb:e6:85:77:77:41:fb:b2:45:47:74:bc:
d1:3e:84:dc:c6:3d:4b:e1:43:38:60:7c:fa:bc:5c:
10:d2:70:bb:41:b3:03:6f:04:59:48:21:28:75:5a:
db:12:5c:38:67:57:ea:4d:86:ac:09:ac:7b:a3:26:
e5:80:e9:e0:16:ec:c7:99:34:59:a7:57:ed:58:79:
9e:74:1f:cc:30:5b:d3:c8:30:c4:f3:89:f7:a0:2a:
68:fa:f9:13:be:bb:7e:bf:ae:9f:92:63:80:af:f1:
ee:4b:07:b5:a5:ce:b4:49:bf:61:de:b2:e5:03:3f:
7a:1d:f5:d4:71:44:df:d9:7d:e9:b9:de:38:e1:9b:
94:02:cc:3b:88:8e:94:44:3d:da:8d:bd:47:d8:79:
bc:66:fe:91:d8:0b:e1:25:70:fd:19:a3:72:20:24:
32:72:bd:6f:6e:c4:35:a6:d1:2e:7f:53:4a:b7:96:
71:e6:f6:b5:e6:de:ae:31:e1:39:85:17:67:12:51:
37:22:50:f8:3d:35:aa:a9:47:f2:78:35:11:6d:1b:
83:92:0d:d2:ef:08:64:9c:21:c5:c0:f0:10:1f:cc:
80:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8D:FC:64:70:AE:D8:6B:FD:99:C0:F9:2B:AC:E0:81:63:A4:43:40
X509v3 Authority Key Identifier:
keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:36:71:21:9a:48:27:13:d0:af:c7:95:37:77:a1:52:05:ce:
58:62:1b:60:30:06:3d:7c:da:a2:d8:41:fd:63:d0:a1:ec:98:
9d:e3:bc:06:8a:2c:64:01:14:06:73:3e:a9:86:65:fc:08:0f:
99:d5:44:a1:bb:97:36:fb:1c:83:7e:ac:cb:fe:51:91:09:75:
76:36:39:42:28:1f:38:8f:75:0e:d0:1c:c9:07:1a:dd:eb:20:
fd:6d:b5:1e:11:13:81:8f:63:05:2a:06:c4:46:a7:60:9a:3c:
95:72:e9:5d:2d:f6:5c:28:ca:fa:d8:fc:bb:b7:c3:95:29:7e:
5c:3a:90:17:27:84:4c:d3:7a:ef:c2:64:a9:f1:3d:c8:48:8e:
5c:5f:01:33:26:45:59:ff:28:02:99:d9:2e:ba:35:6a:c0:2c:
12:35:39:33:50:df:34:35:e5:e1:98:a3:ba:99:67:05:a9:53:
b2:a8:46:cf:7b:94:f6:5e:78:44:47:4c:59:b3:1d:cc:98:d0:
48:6f:2f:dc:eb:53:71:c3:83:f9:e0:35:3e:71:18:66:ef:86:
27:b7:f6:7e:23:f9:10:8b:c8:2c:f5:34:ed:5d:6a:07:8c:72:
a5:99:b3:8b:88:56:56:db:3f:44:c8:4c:82:06:fd:ad:bf:b3:
76:08:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:04 2026 by rpki-client