Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
File: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft (raw, json)
Hash identifier: bNabiVZEcg9PsjtabtsNC5Qz5osWOja3Pw6H8Qu8ytw=
Subject key identifier: 3C:91:31:BF:A5:EA:26:30:2B:08:13:3E:DE:38:E6:38:16:91:52:8B
Authority key identifier: 30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
Certificate issuer: /CN=308dd357bc316287c3264299e30170765c1a32c4
Certificate serial: 019F95806E4DC8F4C9075B692D8507A1DD91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
Manifest number: 0169
Signing time: Fri 24 Jul 2026 19:00:49 +0000
Manifest this update: Fri 24 Jul 2026 19:00:49 +0000
Manifest next update: Sat 25 Jul 2026 19:00:49 +0000
Files and hashes: 1: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl (hash: 1HaZ1ZIJ36Z9sdn0TBQzDnCFIoQdmgqenL6og8c0tR0=)
2: qUd2LDyRm3Mc4QqBTCIWUHxm9KY.asa (hash: JWJWQndeDRgVNRYgTaVF4Zb3Aiwbr3beQwuqCBRvJ7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:6e:4d:c8:f4:c9:07:5b:69:2d:85:07:a1:dd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308dd357bc316287c3264299e30170765c1a32c4
Validity
Not Before: Jul 24 19:00:49 2026 GMT
Not After : Jul 25 19:00:49 2026 GMT
Subject: CN=3c9131bfa5ea26302b08133ede38e6381691528b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:10:29:5d:30:0a:06:b6:43:9d:3b:2b:3a:
3e:54:9d:57:08:64:8b:28:6f:4a:ea:b0:e3:3f:a7:
d8:19:65:6a:08:ac:ad:f3:08:30:f8:eb:18:a5:1f:
d6:55:83:f2:96:60:fd:12:8b:ec:54:d0:f6:97:97:
6f:a3:e7:f3:5e:ed:58:37:cf:3e:06:b5:05:8d:bd:
a8:f4:4f:4c:86:70:47:fe:d5:f1:8e:1a:aa:5c:39:
09:4b:db:98:a5:95:af:23:2c:b4:13:6e:63:9b:d4:
54:30:44:6d:ef:c4:91:dd:b7:34:27:b2:fc:6e:a3:
66:25:37:20:06:a9:1d:82:e7:b3:18:d7:0b:68:52:
00:e8:56:48:98:7f:3a:7e:26:2f:0f:ca:4e:e8:f4:
3c:84:34:7c:b8:17:f2:aa:3f:75:5f:82:62:2a:d4:
81:ac:20:b7:24:75:83:4d:e1:07:97:5b:bc:87:98:
35:d7:dc:df:eb:49:98:5e:d9:e8:da:7b:57:bb:9c:
d6:d3:21:07:62:1a:e9:fc:21:66:e7:2c:7b:61:ad:
72:61:15:bf:6b:6e:38:64:83:63:46:a6:d8:08:d6:
68:48:64:13:46:44:1d:88:bf:d6:44:f0:b7:5b:6e:
b6:f1:2a:f9:a5:e4:be:66:66:b1:97:3a:96:c3:0b:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:91:31:BF:A5:EA:26:30:2B:08:13:3E:DE:38:E6:38:16:91:52:8B
X509v3 Authority Key Identifier:
keyid:30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d0:7b:aa:22:0a:c9:e6:66:bd:7c:10:92:5c:d2:69:0c:a0:
71:28:c6:44:32:5f:ad:bb:a7:f8:a5:5a:12:ad:15:3d:29:87:
a2:d9:4b:21:75:21:00:9b:e8:f9:2d:84:ff:ce:0d:0d:fe:05:
6a:7b:1e:e7:7e:9e:3b:6f:8f:6e:9c:a2:d1:eb:eb:ce:14:c2:
08:6f:b8:cf:55:a3:a1:dc:9b:99:28:3e:9e:de:15:61:b5:b9:
09:88:45:c7:ec:fa:d3:1c:9e:95:18:7a:ca:ed:0c:7c:d5:45:
18:04:23:14:e9:8d:c8:fd:a4:5e:a0:3d:31:eb:82:a0:af:b9:
41:ee:75:ba:97:a5:80:32:a1:6e:c2:6c:77:f1:b3:3a:4c:47:
91:6d:16:93:82:d8:08:43:4d:f6:a8:ee:db:e7:1f:e0:10:8b:
fe:b4:3f:68:e9:88:dc:b5:2f:0d:4e:08:29:dd:7f:05:97:61:
99:e7:f7:04:7a:46:f2:7f:9b:63:ed:f8:41:31:2c:f8:cf:e2:
5c:3c:91:dc:f6:83:9d:eb:18:5e:96:41:b2:2c:e0:5c:0f:1c:
47:5b:89:74:fa:8d:de:6f:d2:1a:25:6a:55:37:f8:77:51:4d:
e7:a9:1d:1d:c9:4a:c2:10:fe:dd:3a:79:66:d9:77:92:b7:24:
58:63:e5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:27:58 2026 by rpki-client