Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
File: 3EFBHpPiXV7GUJlWmxtcX63Brj0.mft (raw, json)
Hash identifier: D7ikCC26Kyn8ieXH982Q/Z/9SWBkPG09A2pi1GfZtqk=
Subject key identifier: 3A:A7:62:C8:F7:6A:51:1C:DA:9A:12:F0:70:E6:04:62:8C:1C:7D:D1
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 019F8FEC9D7E1D196F96D09BCA1033B9F9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
Manifest number: 1590
Signing time: Thu 23 Jul 2026 17:01:16 +0000
Manifest this update: Thu 23 Jul 2026 17:01:16 +0000
Manifest next update: Fri 24 Jul 2026 17:01:16 +0000
Files and hashes: 1: 2uJAkewiUJwsbNaj2yvunQboIco.roa (hash: FFjpTcabKOY4bvHAqUpVIWDG0dv6yHtpa4jSe9dcbIQ=)
2: 3EFBHpPiXV7GUJlWmxtcX63Brj0.crl (hash: kRaDvbZGMI7LbjE/YfmqZz0Z5S3+qKbiHT0XWR40Dec=)
3: B1STsfdesV5NfTBKRKCVN2ABrCw.roa (hash: NWB6mpqgZNqK5Ki19/Fr7idV+OhlroMe3Jwdlj+J+M0=)
4: VaQhwNUDpB1f377_pgDC7bKIVs8.roa (hash: yIsP2S+y7+H5E1qVaCf/heokAGlt0wDZeCh1+1PijTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:9d:7e:1d:19:6f:96:d0:9b:ca:10:33:b9:f9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Jul 23 17:01:16 2026 GMT
Not After : Jul 24 17:01:16 2026 GMT
Subject: CN=3aa762c8f76a511cda9a12f070e604628c1c7dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:c9:66:50:10:3f:fb:62:0e:83:de:92:42:
a1:77:a3:ad:7e:48:f4:9b:c1:d6:f9:ba:e6:80:8a:
f1:2e:db:15:fe:46:fd:1d:d7:af:36:76:0c:2e:9e:
2c:86:b5:e3:60:3d:74:87:b5:3b:b3:6a:44:72:e6:
45:58:66:cb:9c:b1:0b:94:b8:20:d0:b6:4c:57:be:
5d:9f:95:32:aa:7d:8a:89:37:0f:5b:c8:3e:93:cf:
03:ce:02:5d:4b:e3:fc:01:82:c7:9f:c7:c4:e5:58:
96:80:6f:e9:d2:bc:10:09:dc:da:bb:df:1c:11:62:
22:c2:c8:ac:b3:4b:b8:5d:4f:fb:b7:aa:1c:62:d1:
b1:df:e8:e8:6f:88:c0:ac:3a:ce:57:5c:40:ee:85:
62:95:77:30:37:b0:25:89:6d:47:ca:bc:d3:ef:cb:
37:8c:af:3f:46:e7:1f:d7:2f:53:b3:49:6b:bd:6d:
e7:3b:5b:e3:f7:15:03:4d:c3:8b:ec:f3:51:fc:49:
b4:ce:a5:5a:3f:0a:cd:77:60:5f:a9:16:d7:12:00:
36:14:a2:b9:94:40:7b:58:20:1f:3f:2a:3d:27:a0:
c5:1f:ed:9e:dc:16:41:a3:87:72:ec:80:0d:60:d9:
fd:de:cd:89:75:4e:af:57:41:84:74:37:29:05:36:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A7:62:C8:F7:6A:51:1C:DA:9A:12:F0:70:E6:04:62:8C:1C:7D:D1
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:05:43:ff:38:4d:87:1d:e6:3e:98:6f:ca:a3:33:da:3e:92:
7f:ef:a6:1c:ac:c8:18:f9:9c:82:77:54:93:93:96:08:8c:98:
fc:60:f0:44:cf:7c:a2:8a:7b:30:3b:81:ad:e3:82:17:ff:cd:
a3:a7:1f:a7:01:15:59:e3:2d:3d:02:8c:14:b0:ed:33:31:e6:
81:e1:46:ac:84:17:41:63:c1:4e:de:ab:91:4b:5b:18:c0:e4:
f0:d4:48:ec:18:90:67:88:62:af:a2:f2:75:77:be:ca:bf:ab:
be:fb:73:c1:1a:79:5e:18:2f:e9:34:5c:af:e7:8e:29:69:ff:
64:f5:c6:66:12:0d:93:60:ee:7f:7f:f3:fb:6e:3b:18:1e:c4:
89:0f:46:bb:08:a1:24:ed:91:88:83:bc:ae:82:1b:f8:53:97:
cc:4f:a2:81:18:ff:1a:c5:50:b5:87:56:b8:c2:d2:64:a3:b5:
57:62:dc:b0:bf:64:18:f3:90:6b:d6:8d:bd:69:56:5d:5a:9a:
48:5e:36:e1:ac:30:97:92:f6:2c:88:23:6a:8b:ae:6b:b6:61:
2b:87:23:1f:da:87:b7:1d:b9:eb:7b:e1:ec:55:01:dd:26:1c:
f2:5d:b6:68:1e:e2:21:f0:fb:76:06:f5:76:63:26:e7:f0:07:
2c:58:c4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:36 2026 by rpki-client