Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: yy6bRs+mPiit6VLTEJcZMw8A82bJPMYVDbnxraLwbbY=
Subject key identifier: 1E:64:59:3C:77:6B:0D:41:F0:BB:9F:47:B2:06:41:7E:6D:1D:B8:92
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019F8F7EE200C6F3DCCFC7708CFD9DBEE2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 1708
Signing time: Thu 23 Jul 2026 15:01:25 +0000
Manifest this update: Thu 23 Jul 2026 15:01:25 +0000
Manifest next update: Fri 24 Jul 2026 15:01:25 +0000
Files and hashes: 1: 0_VDRwikWTvRQIQsMp3aqjlVQuQ.roa (hash: X74/QCu3+W4NQQ4c/uIC5xYm7kaBm7r/kGt68bnJBmk=)
2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: 7bwWPj2QCNTVHRK2j1P9qDblk0lEPPIHtCyKO7CSyXU=)
3: EuhZP1AZU_rcBrUtpebBNKpZGDs.roa (hash: 4fJyMfdftWEjgJj30JHbQU1JK+JRhaZwjIp1NhaWeFg=)
4: EvJXEnC7zFUYWLsUXhzwJeb526c.roa (hash: 2yJuq+SaVzl7mv1pagqpW7rfh/6PNh11sR0zDQ+hDZo=)
5: JMtxM_e2f4IyQOe7ag83ATmrnwo.roa (hash: rSI4U1a3IADB916oOPX87Zu4Y5DYpWavrDRX8n8/D+w=)
6: WuAI-H8NlswYvvMAMOlcviEzotw.roa (hash: B7KPgvRjador4ZwI7bCeT1UxGcCpNUqTQunKcDn/m+I=)
7: jZ3FO_mV9WrcoKTLceS8pJGW3yc.roa (hash: jtA00NOXzw+v3t4avm6wslZ9lfOfAkUHsLwcYHyN6g8=)
8: k9aptvqWA05x4uvgA-vKuzilVzU.roa (hash: BJ061QuQOWlxavQBE+4vNFSfiTJRQL5oGm4+Ibheqps=)
9: uY0sFNMzlqwBju7zNYnP8ksOTWE.roa (hash: SVkZbh6uHodPSzQYZV8KL/YnQleGlnDyzyp+5VJFwZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:e2:00:c6:f3:dc:cf:c7:70:8c:fd:9d:be:e2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Jul 23 15:01:25 2026 GMT
Not After : Jul 24 15:01:25 2026 GMT
Subject: CN=1e64593c776b0d41f0bb9f47b206417e6d1db892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:50:de:c0:29:63:90:b8:ea:d4:fc:b4:1d:
83:e9:cb:71:f9:de:c3:69:a8:07:a4:59:8a:c9:fa:
46:9c:4c:fa:53:70:79:a4:a7:23:9b:d8:2d:65:a0:
13:fb:ae:91:d0:dc:54:52:64:e0:40:48:ca:9c:1b:
48:85:f6:75:29:c9:f0:d6:cc:e1:db:09:ba:8b:34:
b6:69:82:77:70:79:53:41:a4:61:44:ea:22:57:78:
8d:be:43:1e:16:9c:37:dc:fe:ce:35:23:b7:1f:5f:
c6:c0:c6:0f:1d:19:e3:29:24:ad:56:fb:98:8e:46:
c0:bd:05:0c:58:4e:f6:4e:23:79:90:ad:b2:7b:ad:
54:5f:cc:f9:3e:14:a7:da:16:da:51:ce:ed:60:08:
c2:65:5f:59:d0:a0:97:6f:a8:45:b4:b3:56:c5:03:
83:11:b3:e5:db:02:73:6d:d5:e0:ea:d7:5b:53:e5:
17:b2:20:fa:2c:af:5b:b6:6c:8b:fe:ef:57:fc:93:
68:5e:ae:7e:6c:94:8d:ca:75:14:3a:0f:10:2c:72:
25:85:c4:68:ac:5b:bd:40:23:ef:43:a4:2f:b6:22:
9e:e1:a6:47:cf:62:db:4b:df:b3:32:cc:d7:a0:b1:
f7:45:bb:ed:5c:08:c4:5c:c8:ff:c3:98:ee:29:66:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:64:59:3C:77:6B:0D:41:F0:BB:9F:47:B2:06:41:7E:6D:1D:B8:92
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f7:f9:e7:ca:1d:9c:33:0c:b5:ca:1b:9c:aa:91:c9:81:83:
3d:1c:c3:38:05:86:d8:86:76:7a:86:3d:c2:94:92:c0:2f:5d:
53:37:15:da:cc:e9:54:dc:9b:d7:c9:e4:4f:e6:e4:c5:58:c2:
70:c2:49:96:14:43:1c:ba:4d:60:28:01:1d:ee:a4:2d:87:f0:
14:78:58:ec:5e:13:2b:8e:43:dc:ed:9c:f2:7f:4f:bc:45:20:
d5:96:44:f7:47:1a:10:f7:90:67:03:50:e5:9a:b5:d4:c0:82:
a1:30:1b:ed:90:2c:d2:e0:08:c4:bb:ea:a6:e4:38:cd:b5:3f:
7d:87:04:9f:a7:f8:d0:b1:46:94:a6:9f:52:14:c5:16:4c:74:
61:52:db:b5:b8:95:56:6b:07:32:b0:25:39:84:86:b1:fb:f3:
8c:5c:3c:38:3c:91:dd:70:6e:27:79:4a:29:84:6b:3c:39:49:
6c:21:0e:98:c9:e1:63:e2:07:73:95:98:82:6f:b8:b2:29:ec:
ff:4e:ec:47:99:33:bf:45:34:24:c3:7a:cb:04:03:54:34:7c:
49:69:a1:16:e3:c0:be:a4:e1:2e:ec:40:ba:59:d1:d0:3b:68:
99:3c:26:77:d4:42:bf:2a:1f:30:8d:17:b5:fb:fd:7c:83:db:
ff:f7:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:57:49 2026 by rpki-client