Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
File: 3UbviV9ioiHeWcCl4MubNGn-UgE.mft (raw, json)
Hash identifier: gmFwFl7NeUqJvrXmYZ5htB200MGCvCwgR+IyRb2OTDE=
Subject key identifier: B2:F2:46:58:02:9A:C1:84:D7:6B:09:9F:4A:0A:AB:D1:0E:43:1D:49
Authority key identifier: DD:46:EF:89:5F:62:A2:21:DE:59:C0:A5:E0:CB:9B:34:69:FE:52:01
Certificate issuer: /CN=dd46ef895f62a221de59c0a5e0cb9b3469fe5201
Certificate serial: 019F8F7EFCFA7079A8D9A43F790FB44B85C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:31 +0000
Manifest this update: Thu 23 Jul 2026 15:01:31 +0000
Manifest next update: Fri 24 Jul 2026 15:01:31 +0000
Files and hashes: 1: 3UbviV9ioiHeWcCl4MubNGn-UgE.crl (hash: vPTKzjDSQ7pNcdhIHO1WsOXBnorr6/KYOjKhv1cYeZ0=)
2: Sdcf2dHZqQivboyuko2C7HiYjjk.roa (hash: TB/q3GnkSetf9euk52uPTmgDhdeYTD4KIv37dJknSdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:fc:fa:70:79:a8:d9:a4:3f:79:0f:b4:4b:85:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd46ef895f62a221de59c0a5e0cb9b3469fe5201
Validity
Not Before: Jul 23 15:01:31 2026 GMT
Not After : Jul 24 15:01:31 2026 GMT
Subject: CN=b2f24658029ac184d76b099f4a0aabd10e431d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:78:7b:6c:c7:59:b7:54:fc:f2:42:3f:49:
ae:43:ef:a2:70:f8:97:88:54:3d:a1:c0:02:4a:ac:
8d:74:1a:58:d5:c6:ff:bc:2a:06:e0:83:de:9e:25:
62:87:af:cf:0d:e8:ba:e1:4c:87:a6:94:f8:08:0a:
21:3e:d1:0e:07:2a:cb:d3:2c:b9:26:cd:a0:ea:13:
6d:a2:77:e4:05:e7:d1:af:22:67:f1:e7:c5:06:66:
56:4b:6b:db:0a:03:17:89:63:ff:12:a9:ef:9b:0f:
01:4e:58:03:03:cb:69:f8:19:08:ca:4f:75:09:b0:
b3:3e:94:a8:fb:14:0b:18:c6:48:de:7c:f7:88:45:
70:4d:b5:32:a1:bc:f5:e6:97:4a:7e:cc:80:ae:1f:
77:16:2d:5a:23:d9:55:87:82:7b:11:9f:9b:3c:bb:
17:58:e1:89:0c:23:f6:41:4d:20:54:68:f6:23:f7:
c6:5e:41:c8:fa:6c:65:2f:0d:07:4d:52:60:d9:3c:
f8:cc:fb:9a:27:d0:d1:7b:d4:9d:80:16:fa:c6:ea:
07:51:07:3e:c1:0e:06:86:bc:51:71:90:37:c2:a5:
df:82:10:50:ff:ae:05:c4:14:f4:74:78:f2:cf:31:
84:ee:ee:c6:6d:34:8a:aa:26:ab:31:d5:40:75:b3:
c3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:46:58:02:9A:C1:84:D7:6B:09:9F:4A:0A:AB:D1:0E:43:1D:49
X509v3 Authority Key Identifier:
keyid:DD:46:EF:89:5F:62:A2:21:DE:59:C0:A5:E0:CB:9B:34:69:FE:52:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8d:ab:10:f8:73:3c:0a:91:f9:e2:0b:42:a0:07:16:9a:34:
48:2c:96:50:e7:24:28:f1:25:40:44:51:52:0a:b3:bd:7e:32:
72:14:68:52:53:e7:6c:fa:51:12:8b:6a:e5:11:2d:40:29:39:
ea:4b:8e:f2:5d:c4:f7:2d:8f:81:20:62:45:b0:e2:8d:e0:35:
e7:43:06:5b:34:5e:d5:a2:69:25:d2:62:86:91:57:11:2b:ea:
0e:d2:e7:c8:58:69:0a:b9:07:a6:de:70:b0:9f:3d:c3:d4:38:
23:ce:42:f6:0d:2c:73:ce:fb:0f:d2:d3:bd:d8:63:4f:c9:6d:
45:1c:be:6d:7a:3d:76:60:6e:2e:fb:d0:de:56:3b:0b:63:75:
f6:3c:ce:b4:ad:24:54:9d:d2:61:b6:8b:6f:92:52:55:b7:8b:
4f:4c:20:97:21:88:b8:a6:e2:f1:ba:4e:9f:87:78:7c:f9:ee:
fd:6e:e6:d2:d4:a5:69:d5:60:41:88:92:9e:eb:27:0f:db:f7:
90:df:eb:a2:b4:e1:9b:ed:84:19:c3:46:ff:38:03:d9:db:44:
da:f6:62:12:22:64:c6:af:e0:67:9e:72:d4:10:fd:59:2f:cd:
ab:c2:ad:1d:e6:d2:74:62:69:31:d6:a4:d4:5b:6d:d6:d7:dc:
a4:7f:c1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:09 2026 by rpki-client