Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
File: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft (raw, json)
Hash identifier: nvW8mP8e9cKV9tWbtcRvtqOyW9r2oOshnrCqIKmgHxs=
Subject key identifier: 81:7A:B0:BC:05:29:FC:42:25:8C:7C:C1:01:8A:49:20:82:0A:24:27
Authority key identifier: DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
Certificate issuer: /CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Certificate serial: 019F90FF57E78542C8FCAECD417871C5B6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
Manifest number: 01DE
Signing time: Thu 23 Jul 2026 22:01:20 +0000
Manifest this update: Thu 23 Jul 2026 22:01:20 +0000
Manifest next update: Fri 24 Jul 2026 22:01:20 +0000
Files and hashes: 1: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl (hash: PDrAfGDX7URt0lQCB7l63fpkpddXjuFnqdLmlyxGWcw=)
2: VGuckUmXD3FffNojHBh4mr4L2f8.roa (hash: 8TbPfvVyzj3G5WKw2nSbHXcBZE5w35KkZHPmx5cAQsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:57:e7:85:42:c8:fc:ae:cd:41:78:71:c5:b6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Validity
Not Before: Jul 23 22:01:20 2026 GMT
Not After : Jul 24 22:01:20 2026 GMT
Subject: CN=817ab0bc0529fc42258c7cc1018a4920820a2427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:3b:4a:cf:3e:ca:09:89:70:62:17:3a:87:
c9:43:4f:2e:21:ab:1e:33:66:94:e8:e9:60:e5:dc:
f2:30:fe:3c:65:e8:2e:8b:25:50:0b:fe:63:72:5c:
df:dd:13:3e:d0:8b:6b:bc:d6:5a:43:b9:d7:7e:60:
1b:39:af:b3:19:fe:08:52:5c:0e:b0:4b:08:c4:f8:
26:21:08:55:b2:94:01:86:e3:f8:e9:c6:31:bb:91:
3d:ce:de:6f:0d:da:a9:9d:3b:9f:68:11:1c:9d:a1:
b9:28:e9:27:17:8c:32:50:23:3d:91:ce:d7:8b:48:
ed:56:23:f0:52:ea:b0:c8:b0:ba:19:5f:36:49:42:
c3:e8:02:67:14:dc:bc:77:18:9e:66:a4:71:ee:6f:
5f:94:f9:f2:3d:1a:b1:53:df:0d:3a:4e:5b:63:89:
23:c9:35:de:1c:c7:60:62:42:b7:28:a4:a7:16:95:
bb:4b:c7:17:50:9b:0d:76:d2:0f:e5:17:22:8b:c3:
3f:42:cc:19:ca:3e:ba:f4:9f:bd:e3:62:2e:36:08:
a7:ca:26:c6:78:bd:37:7d:5a:72:f7:24:87:04:6d:
5d:54:7d:bd:ca:f6:a4:b6:3c:58:e6:e9:ca:3a:9d:
25:7c:14:07:27:7f:31:b6:ea:4f:b8:41:a1:3f:9c:
ad:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7A:B0:BC:05:29:FC:42:25:8C:7C:C1:01:8A:49:20:82:0A:24:27
X509v3 Authority Key Identifier:
keyid:DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e5:c1:cd:d9:4e:d7:0e:ea:11:49:47:d0:7e:76:40:88:3d:
5f:aa:15:cd:be:3e:eb:ef:8d:e6:f6:27:a4:14:38:e6:a3:90:
c9:2a:69:67:56:12:48:fc:e0:9c:71:bc:9b:56:9f:09:e6:f3:
35:ee:75:f9:7d:ac:20:11:77:83:9f:bc:df:89:65:5f:a1:29:
1c:b7:d6:de:18:28:cf:cb:40:dd:32:38:2e:03:0e:84:b9:89:
31:5f:64:fd:dd:c3:ed:8e:8c:ad:f5:c6:c3:00:d7:d5:36:82:
a7:9c:69:fb:20:d2:08:58:94:0e:3b:19:c5:1b:3c:6c:82:57:
83:6c:37:59:ed:1b:d2:1f:cf:09:9f:12:ae:1a:77:af:d7:e4:
72:08:76:71:62:02:c8:6c:22:27:96:26:04:f2:14:b4:f5:3b:
1a:c5:bf:9c:57:d7:40:ea:e9:33:5c:c4:8b:5b:25:32:ca:3b:
71:32:66:06:44:54:30:c9:ba:03:38:8f:9f:12:63:c7:aa:40:
b4:5b:23:e6:0f:7e:85:5a:53:0a:69:c7:86:39:5c:ec:98:65:
e8:8b:b5:35:ed:06:15:1e:ee:27:ec:a5:05:57:e4:71:b4:a3:
86:30:c9:13:72:eb:1e:fc:9e:f0:f1:16:46:df:b6:31:21:fb:
88:a2:19:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:56 2026 by rpki-client