Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier: fki/XfxcarvXgik6OLKqD+RmrTmGhY87rdQZG14Ztfo=
Subject key identifier: 57:C0:42:25:26:39:14:0B:EB:B0:E0:7A:D5:BE:6D:81:54:CC:FE:EF
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 019F90C770E2723D0F0EDFA95E6BFAE889EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number: 1522
Signing time: Thu 23 Jul 2026 21:00:17 +0000
Manifest this update: Thu 23 Jul 2026 21:00:17 +0000
Manifest next update: Fri 24 Jul 2026 21:00:17 +0000
Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: mTCy9DtWaIJA1H7ccUl/gDMpa8QNHwGCsiz7uuDyAtY=)
2: FT--4t0eY_HMytLIaG7T71X7cUo.roa (hash: 095emcTK3nDAck/cjTBbtBo2FJ9TXj6HZHetumiraec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:70:e2:72:3d:0f:0e:df:a9:5e:6b:fa:e8:89:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Jul 23 21:00:17 2026 GMT
Not After : Jul 24 21:00:17 2026 GMT
Subject: CN=57c042252639140bebb0e07ad5be6d8154ccfeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:07:8a:74:37:c7:43:0e:86:29:6f:b6:cd:
b4:e6:f7:e4:03:48:fa:d8:b1:30:93:6e:c6:c1:d8:
d0:41:c0:6b:13:d2:6f:33:b3:f0:99:93:8a:3c:ff:
a1:1b:40:ce:ec:bd:1c:21:fc:28:e4:ce:d6:4d:eb:
28:4b:9a:7a:70:5a:e9:f5:d1:ac:ee:3e:9d:f4:6a:
9a:74:ab:8e:35:ea:66:75:4b:e8:99:3a:dc:c6:e4:
7e:81:e4:77:51:ab:c7:4d:87:ec:f4:41:02:e5:ed:
53:35:8e:a1:90:40:a1:8a:dd:3d:05:02:4c:de:3c:
e7:59:1b:0c:c8:2a:e2:16:8e:17:ce:b0:7a:78:e5:
a7:76:99:c8:56:ec:4f:6c:c1:e4:e4:2d:1f:98:f1:
b8:fd:2a:39:d8:bb:36:ee:6d:ad:f3:02:9b:17:b3:
4d:eb:de:fe:f3:5c:35:cb:63:2a:7f:2b:2f:b1:fc:
69:50:ab:4e:92:31:75:38:51:8a:51:6a:eb:6d:99:
e2:91:8e:50:66:15:d2:d9:ee:d1:78:04:5a:79:ca:
08:d3:64:2f:0e:b5:12:e0:eb:ad:5f:79:be:fd:70:
6e:8c:b4:88:54:15:a0:1e:85:a3:d6:b9:be:b7:b6:
d5:4d:48:9e:9b:2d:33:c7:ec:b5:b5:96:bc:ad:f6:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C0:42:25:26:39:14:0B:EB:B0:E0:7A:D5:BE:6D:81:54:CC:FE:EF
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:81:b1:85:9e:ee:93:16:78:c7:ed:06:38:0a:bd:9b:6f:8e:
78:3e:f9:02:2a:2f:79:12:aa:45:1b:a1:2a:cc:aa:4f:2f:a8:
e4:aa:43:ef:b6:98:7c:ea:98:a3:4a:11:b1:75:d4:d8:b9:a1:
8c:2f:6c:1d:10:03:9b:00:12:a9:00:0a:bd:c1:15:4d:46:06:
fe:7c:15:53:94:c1:ac:b8:28:ab:04:83:6d:33:5a:33:4d:44:
a2:a6:89:fc:a4:56:e2:42:3d:8e:a2:61:59:b6:1d:9e:31:94:
fa:07:71:8d:4b:63:b6:7f:c3:f9:89:e3:89:1e:90:18:b6:b7:
df:b8:d0:c5:75:ee:0e:c1:e2:4a:6d:41:b8:77:1f:d5:40:19:
fc:3a:8c:ed:60:62:3e:70:3f:41:80:f3:42:d9:d1:e8:5f:27:
a6:7a:d4:f2:04:64:5f:09:15:45:f8:ad:f7:f0:49:c8:78:b6:
a6:ae:d9:eb:fd:e9:bc:d8:27:09:41:65:37:d7:54:aa:20:50:
cf:17:fd:31:9c:e1:8f:84:06:7e:f9:dd:f1:85:0f:dd:09:02:
56:a9:e2:0c:3a:73:ba:91:60:8a:8d:57:e3:31:d7:3d:10:2d:
42:74:5e:3e:84:4f:9f:8c:02:29:b9:76:b4:2c:f9:fb:c4:bd:
00:69:19:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:04 2026 by rpki-client