Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
File: 3rwtwyLztJZucDtdjIi3FvDZsOk.mft (raw, json)
Hash identifier: 3wf6Q9AMxL66LpHDPOIFet30WPHXyeZyec0tfKnBhOg=
Subject key identifier: 6C:17:D2:A7:DD:31:F8:5D:1C:06:F8:29:30:1D:8B:90:BE:76:38:B3
Authority key identifier: DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
Certificate issuer: /CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Certificate serial: 019F90C7E27944E33EB87AB53E0A918D54AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
Manifest number: 1784
Signing time: Thu 23 Jul 2026 21:00:46 +0000
Manifest this update: Thu 23 Jul 2026 21:00:46 +0000
Manifest next update: Fri 24 Jul 2026 21:00:46 +0000
Files and hashes: 1: 3rwtwyLztJZucDtdjIi3FvDZsOk.crl (hash: vfmXmXE3wCrGcbovwWElskcRXPmBigKL29wazR38h1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:e2:79:44:e3:3e:b8:7a:b5:3e:0a:91:8d:54:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Validity
Not Before: Jul 23 21:00:46 2026 GMT
Not After : Jul 24 21:00:46 2026 GMT
Subject: CN=6c17d2a7dd31f85d1c06f829301d8b90be7638b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:5c:2f:1e:15:b0:9b:79:1c:37:41:9e:68:
e0:f5:92:3e:30:ee:1a:27:f7:e4:f2:46:56:6e:ea:
1b:2a:6b:e4:2d:5e:96:6c:27:6b:07:19:62:12:00:
3b:eb:0d:36:06:77:25:a7:79:df:5a:2c:cc:b8:70:
bd:54:a4:cb:6d:a4:44:9e:e0:47:a5:e7:1d:67:fe:
6b:29:3c:3e:e3:52:c3:f1:14:9d:b4:2a:c3:29:d1:
af:b2:11:94:04:78:13:9d:1b:b8:33:fc:d5:c3:a6:
d7:5b:69:f3:49:37:b7:14:b9:75:5f:c8:5c:7b:60:
da:66:e5:bb:bc:0d:4a:63:5f:36:c1:21:8b:bc:7f:
77:26:57:49:dd:d5:ed:ff:db:a0:3e:b1:6b:af:ca:
81:1a:b3:fc:4e:3c:3c:c6:4b:34:b3:93:52:7d:9a:
3c:48:71:87:98:2d:18:10:2d:c0:9f:90:17:4b:ae:
39:2b:2b:be:09:0c:f6:ba:82:ad:cf:e5:f4:00:9e:
0f:34:f3:8c:16:ec:72:20:41:c1:45:54:1e:4e:c1:
79:0c:f6:9b:3b:66:6b:ad:70:57:5e:58:4a:ae:36:
cf:1a:35:18:85:33:e9:47:84:a8:ae:27:e3:6d:56:
10:9d:cf:b4:ba:81:ba:f6:53:99:81:11:ff:31:ef:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:17:D2:A7:DD:31:F8:5D:1C:06:F8:29:30:1D:8B:90:BE:76:38:B3
X509v3 Authority Key Identifier:
keyid:DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cc:03:f5:a1:82:db:0c:2d:55:8b:12:0a:55:e5:24:d5:c1:
d0:cc:a4:58:9b:0a:83:1a:74:e3:2e:b0:b8:67:c4:ee:42:a5:
ab:0f:80:ef:25:ca:34:60:66:22:96:62:8b:61:9d:5a:5f:7b:
fc:22:0d:c4:c5:25:7b:7a:f2:8d:6b:9d:4b:df:17:08:28:86:
c8:d2:aa:f0:71:9f:c8:b1:bc:54:1c:a1:5c:cf:85:6f:78:c5:
cb:8e:0d:4d:56:89:6e:c6:4b:65:8a:9a:a3:10:e9:32:0e:27:
c3:e9:45:9e:66:da:6b:3d:34:1a:c6:57:77:2f:54:16:b4:f7:
39:2b:9f:83:e1:b4:f5:8d:8c:1f:49:fa:68:9a:51:81:30:8e:
36:41:83:02:4f:cd:c1:e7:28:19:01:0e:88:94:4a:3e:ef:71:
12:4f:b4:40:27:78:9c:25:b2:97:63:d9:0f:f9:e7:13:71:bc:
1b:78:8e:8c:e5:80:e9:88:09:38:b2:2f:91:59:b0:d7:d4:1c:
2e:5f:56:a9:6b:3d:79:4c:c2:35:43:7b:4c:3b:55:2c:c7:2d:
01:f7:39:c8:2d:64:1a:48:f1:c9:0d:37:81:59:80:1b:e9:3c:
62:95:23:ec:25:28:51:d7:d9:6e:17:14:6d:39:dd:e1:8c:40:
3e:b4:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:05 2026 by rpki-client