Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: VAIR5J0w1YPaKEmsPER83VAcgqXB4PbTJMl25v+qo7o=
Subject key identifier: EB:75:F1:09:12:C6:66:73:12:6E:65:B0:85:3D:7E:EF:06:70:AA:24
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 019F8F7DCE2718486C0673CC83CB0692359C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 1461
Signing time: Thu 23 Jul 2026 15:00:14 +0000
Manifest this update: Thu 23 Jul 2026 15:00:14 +0000
Manifest next update: Fri 24 Jul 2026 15:00:14 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: T/qufgD+t9FWYMTlJlipWSo5Huz/Kj8a6F4My0LilVE=)
2: 8LiOuIicwsY8-ml0zZmX3B_CKY0.roa (hash: PGF9mG8gxQZuhtHniYJ4M8QD71XqK/WXHLHoKAZKACI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:ce:27:18:48:6c:06:73:cc:83:cb:06:92:35:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: Jul 23 15:00:14 2026 GMT
Not After : Jul 24 15:00:14 2026 GMT
Subject: CN=eb75f10912c66673126e65b0853d7eef0670aa24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:ad:1b:bb:f1:c6:de:eb:67:e2:d8:31:fe:
d4:51:b4:e5:97:70:cb:98:51:e8:97:25:fc:9f:ca:
84:27:03:f0:d8:7d:dd:22:af:ee:b8:b1:08:a4:6a:
c6:1d:57:da:23:38:9b:53:ae:97:19:47:a1:41:9c:
06:75:dd:d8:95:77:6d:db:51:a6:c4:fb:fa:52:b5:
89:d1:50:3b:ee:30:b7:1b:98:ff:79:b6:71:51:ed:
58:ae:fb:01:9b:bd:a2:e1:97:a1:2e:9f:fe:53:fb:
5e:7f:dc:11:aa:52:30:fb:3b:ba:b4:8c:45:e9:b3:
6d:d2:e1:4b:b4:bf:52:28:43:70:94:84:ca:ae:df:
96:b5:21:3b:5f:0b:c9:b7:f6:ad:9e:e5:61:ea:c8:
36:ee:ba:b0:d5:cb:81:82:88:17:41:6d:a2:a9:46:
62:76:2e:89:6d:0f:00:e1:58:79:fb:60:d5:47:8a:
b4:0d:fe:5a:8c:a0:9a:86:94:53:7f:9d:75:08:53:
33:5d:b9:fc:4e:54:66:82:21:8a:6b:d5:39:c7:2c:
0c:4b:89:ea:5a:11:a2:08:13:b0:6c:9b:ec:30:4a:
19:fe:24:ea:23:e8:69:a0:0d:30:49:8c:4f:9f:88:
85:f8:c4:22:b1:74:f1:a9:17:f4:a7:89:f9:a5:e7:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:75:F1:09:12:C6:66:73:12:6E:65:B0:85:3D:7E:EF:06:70:AA:24
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cc:c8:e1:1b:c7:4e:13:93:1a:eb:d5:24:df:dd:d1:5b:eb:
95:ae:eb:66:c0:5c:d6:8f:72:d0:46:3c:dc:dd:23:d2:12:03:
4f:af:8c:bb:46:5a:08:81:4c:14:dd:03:03:08:26:89:45:2c:
85:19:7b:ec:e5:88:b9:66:e0:b5:05:b9:c7:80:a1:12:55:5d:
0a:82:4e:1a:3c:b1:a3:1c:80:d8:78:03:af:52:45:34:16:fe:
13:96:39:fb:fd:11:c5:bf:d3:88:4f:4d:96:ae:f9:cb:c1:9e:
8a:d6:ed:b6:9c:c2:38:fe:1d:ba:9a:41:80:5c:0f:08:9f:30:
d6:18:70:2c:fa:ac:9a:1d:0a:5f:7c:cb:f5:b8:2f:a1:fd:dc:
98:2c:e5:45:df:e1:d2:72:41:a5:fe:e7:9f:64:6e:53:25:e5:
f6:05:3b:ed:6f:a4:fd:f7:77:f5:a3:bc:40:fe:12:cd:19:44:
40:07:aa:17:d7:b4:47:b3:c6:e7:ce:b2:92:7b:67:c6:35:66:
36:db:b6:89:fe:b1:3d:73:b0:c9:88:11:3c:64:3c:8e:67:ed:
fe:c8:08:2d:16:5a:32:cb:0a:b9:85:7b:7d:34:1d:d9:90:25:
89:04:5e:02:e4:8b:c4:d7:e7:74:71:5a:3e:c4:d2:57:06:e5:
72:6a:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:39 2026 by rpki-client