Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
File: 3BZzebWR6VcQz38x3i7HP_v7Wuc.mft (raw, json)
Hash identifier: acCC0VGf6027fmPnXoGEGSq3pDxijOj4SAtdoVb9a3g=
Subject key identifier: 5A:CF:54:72:96:41:42:CF:93:1F:67:00:A4:23:AF:26:34:02:FB:22
Authority key identifier: DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
Certificate issuer: /CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Certificate serial: 019F91356451E816A3D0FE99957F6E6600F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
Manifest number: 0AE8
Signing time: Thu 23 Jul 2026 23:00:22 +0000
Manifest this update: Thu 23 Jul 2026 23:00:22 +0000
Manifest next update: Fri 24 Jul 2026 23:00:22 +0000
Files and hashes: 1: 3BZzebWR6VcQz38x3i7HP_v7Wuc.crl (hash: FX8o5dbvMBc8PPmL8/OHOR7jnMsjQTL40ArD8bwBHAw=)
2: 751Hu9ZI3DqojMJGB1I0rXnda_M.roa (hash: YsN2FofLzMH/lt9gntXVVlk6Piw3TDvammcUwDb+SmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:64:51:e8:16:a3:d0:fe:99:95:7f:6e:66:00:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Validity
Not Before: Jul 23 23:00:22 2026 GMT
Not After : Jul 24 23:00:22 2026 GMT
Subject: CN=5acf5472964142cf931f6700a423af263402fb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:c2:dc:0e:c5:af:05:ac:ad:57:36:75:03:
65:7e:88:ae:39:47:e6:54:1f:10:54:f5:a9:65:9b:
02:23:1e:fd:67:8c:ad:f1:f7:e1:19:75:2b:94:9c:
e6:bb:b7:bb:77:51:87:f7:81:94:dc:34:97:42:09:
fd:eb:3f:20:06:2e:c8:ef:8f:5b:b6:c0:4d:9c:b4:
2c:b7:4c:b5:6c:b1:92:9e:55:12:76:1f:8b:e0:31:
ff:c2:de:9a:67:23:3f:8c:b8:f1:a6:dd:c8:43:47:
cb:b7:8e:e2:31:c6:4c:de:4b:93:6c:e4:f9:4b:75:
4c:7e:e7:f2:e2:89:98:90:10:38:8b:85:92:af:84:
d2:db:4f:a6:6e:be:b0:ae:b6:d8:e6:3d:93:36:10:
42:22:66:be:70:fd:55:be:ec:a8:31:fa:59:a7:d5:
e2:6b:c0:7c:44:06:31:40:19:31:56:43:67:3b:b5:
59:0f:d6:40:76:dc:0a:e2:ac:73:b0:d5:40:8c:ba:
6d:7e:b2:9e:6d:f8:a1:e4:b8:7f:91:4a:76:20:86:
9c:20:e8:ad:06:8a:f6:ca:81:3c:41:e8:bc:b8:4e:
ff:d2:a3:5a:2f:10:8e:7b:e3:71:88:a4:6c:57:5b:
fa:cd:da:85:c6:bd:77:20:b2:97:ea:91:7b:96:a1:
22:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CF:54:72:96:41:42:CF:93:1F:67:00:A4:23:AF:26:34:02:FB:22
X509v3 Authority Key Identifier:
keyid:DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:68:44:09:9d:79:5c:f6:57:18:f9:95:44:c6:5c:80:35:28:
b6:40:45:43:9d:59:86:a5:fa:cd:46:c8:2a:dd:13:fd:49:39:
af:b1:63:a4:f8:24:29:fa:71:82:06:7f:d3:6f:e0:01:6d:7d:
92:63:23:94:b6:35:59:e3:82:ef:c4:21:c8:f0:aa:37:20:d4:
c0:4d:5d:6b:ea:30:68:ad:ca:93:2e:57:58:9c:1b:ae:d3:42:
8d:17:8f:a3:7e:6c:f3:f2:11:53:26:e5:77:91:cc:7a:96:69:
c3:e0:60:9e:c9:4b:5e:b2:8d:5b:30:51:0f:53:f8:38:0d:b6:
30:e3:b1:aa:9e:19:7e:2f:6c:17:71:10:a0:85:3a:40:62:49:
10:b9:90:60:cb:d4:6f:94:8e:4c:33:d7:f1:ca:41:fd:a9:f0:
e4:83:43:20:9d:d0:79:1e:13:fb:03:a6:bc:67:b3:81:42:e9:
54:36:d7:80:33:64:c9:f1:08:53:40:30:5d:c8:76:60:30:bd:
37:f3:73:4f:3e:ee:62:e0:75:c6:d9:e9:8f:22:1c:6b:d2:f5:
4e:e7:11:cc:d5:dc:66:5c:97:9a:a9:17:ef:77:3a:f1:53:29:
01:6c:27:87:54:86:a1:ac:37:77:99:a9:f2:07:b5:f7:69:3f:
f7:da:5b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:57 2026 by rpki-client