Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
File: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft (raw, json)
Hash identifier: ILlY+eM6QC9doHD1gxA4+nk0U7v5Lu7bfH8I+49ipTM=
Subject key identifier: 2A:72:4E:B0:20:2B:91:83:98:B2:D8:9F:E7:4A:D8:20:D1:78:7D:6A
Authority key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
Certificate issuer: /CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Certificate serial: 019F8FEC5B3B90A36D0D8614943A37F8B17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
Manifest number: 04D9
Signing time: Thu 23 Jul 2026 17:00:59 +0000
Manifest this update: Thu 23 Jul 2026 17:00:59 +0000
Manifest next update: Fri 24 Jul 2026 17:00:59 +0000
Files and hashes: 1: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl (hash: qvWfkGop+hWMOQRMZmp/Cg/RRPlqNNtFEbn/wlbk8fo=)
2: jMWE95cdXToEzGHRnrJGNVd_shY.roa (hash: ggn3Fl2wZwmOiQ6vfdHYpUj0Mg0aJO8O6vjWtwjQjkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:5b:3b:90:a3:6d:0d:86:14:94:3a:37:f8:b1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Validity
Not Before: Jul 23 17:00:59 2026 GMT
Not After : Jul 24 17:00:59 2026 GMT
Subject: CN=2a724eb0202b918398b2d89fe74ad820d1787d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:0e:4f:9e:2d:6c:8f:3b:a8:98:14:16:b7:
e7:53:df:f0:45:99:38:33:3e:51:27:fb:c3:e9:46:
4b:4c:76:d6:6c:d6:3e:04:96:e4:a4:1b:28:17:7f:
e4:09:b9:5f:c8:06:f2:52:2d:45:2f:62:13:ee:1d:
60:57:9f:a5:87:3e:35:db:c9:bc:fa:a5:58:27:9d:
1a:07:34:79:9e:a8:03:6a:e3:8e:47:ca:49:9b:f0:
1c:80:1e:70:b7:74:1f:20:c3:31:24:60:20:11:62:
52:9f:8c:ed:da:b0:04:f2:80:b4:c5:82:da:03:a1:
4a:b9:84:8c:f7:6d:f4:72:90:21:be:d6:e4:9e:6a:
73:e9:86:f3:bd:af:ba:18:ea:b1:e5:9d:a0:54:a4:
87:8c:87:a6:5f:3c:ba:a2:8c:f0:9f:7e:c9:30:ef:
e3:7f:36:28:fc:93:21:b5:a9:4b:bb:e8:27:43:5e:
71:f3:67:86:c5:8d:d0:d7:6b:ab:42:99:04:f3:56:
7c:62:c4:f1:32:cf:fc:5b:95:b0:e9:9e:81:e1:84:
90:ee:f4:84:37:62:cb:ea:33:c2:ee:c6:30:f6:9f:
4c:55:63:6e:3b:a0:bb:18:cf:64:6a:7f:d1:61:88:
84:a6:04:93:93:90:f6:9d:98:94:d4:e8:af:97:d8:
5b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:72:4E:B0:20:2B:91:83:98:B2:D8:9F:E7:4A:D8:20:D1:78:7D:6A
X509v3 Authority Key Identifier:
keyid:DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:58:28:7f:76:73:1d:83:ec:12:88:12:a9:9e:63:35:72:72:
d1:00:6d:08:a2:16:96:51:77:fc:47:92:74:44:a2:e1:7c:a7:
86:09:20:f3:37:b8:48:8b:d0:b5:4c:b2:e0:ed:ef:ac:09:b9:
5b:d8:83:e0:37:2e:76:46:2a:be:9f:ac:d1:36:2b:c0:1a:a5:
d3:7a:17:bb:67:81:fc:b6:c8:e0:d0:03:fa:77:c7:65:cd:ae:
16:3b:17:e4:8e:57:1c:bf:72:6f:ea:66:6b:1c:33:f5:0c:f0:
af:e3:12:cb:79:bb:8f:d3:24:f1:69:65:77:3f:ac:8f:3b:7e:
0b:ac:d3:77:32:47:04:0b:09:dd:bd:ec:22:2c:59:7c:75:3a:
d6:b8:95:d1:b8:a8:f9:ee:f8:70:12:92:6f:74:b4:e0:98:d0:
7f:41:aa:0f:71:1c:8e:ae:84:e1:0b:89:bd:f6:ec:40:04:cb:
4f:96:5b:c7:3f:cb:16:7c:45:93:40:fa:0b:2b:39:4b:31:03:
ec:9a:9e:ad:1b:03:ef:c7:01:84:9a:65:6f:e2:9d:c1:e9:a5:
e6:b5:52:3d:d2:29:ac:80:f3:ca:96:54:02:30:f4:12:67:82:
df:1e:7a:4f:2b:b6:35:93:bd:73:3e:8a:d7:14:e0:7b:c9:b9:
39:64:ed:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:55 2026 by rpki-client