Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
File: 3SoSF2c-sRypijUTlSBAfJdo38M.mft (raw, json)
Hash identifier: PeICFBvjpW/EPKK3fTof1bApjlAGvTOXIJ5FS/17pyY=
Subject key identifier: DB:CC:DC:F3:54:F6:54:89:F8:FE:E5:4D:57:E8:0C:20:11:97:AB:0E
Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Certificate serial: 019F8FECDA3203C0DAE114437BFB9416FFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
Manifest number: 02C9
Signing time: Thu 23 Jul 2026 17:01:31 +0000
Manifest this update: Thu 23 Jul 2026 17:01:31 +0000
Manifest next update: Fri 24 Jul 2026 17:01:31 +0000
Files and hashes: 1: 3SoSF2c-sRypijUTlSBAfJdo38M.crl (hash: 1qbcoVaoDAmAaKluAeCOADqXyH3jQFdwJn+EFyuJ5Yo=)
2: WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa (hash: 8pC1xGdRfwbbzKrCgP0LBKBZ1huDVz6z9MO3fLjaue8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:da:32:03:c0:da:e1:14:43:7b:fb:94:16:ff:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Validity
Not Before: Jul 23 17:01:31 2026 GMT
Not After : Jul 24 17:01:31 2026 GMT
Subject: CN=dbccdcf354f65489f8fee54d57e80c201197ab0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:66:b4:5f:2f:b8:7e:2a:41:dd:21:4d:6e:cc:
54:ca:39:60:18:77:cc:21:2b:75:48:08:48:ad:c4:
be:b8:4c:fd:e7:a1:86:65:b3:87:e2:46:f8:74:ed:
84:cd:81:ba:b9:fb:40:08:66:58:5c:88:0e:5d:d9:
29:04:2e:0e:2b:19:58:de:f8:5f:8a:68:f0:78:25:
de:15:07:ad:58:41:1e:01:90:25:76:19:e6:a1:a4:
8a:f5:19:dd:6a:dd:6a:4f:00:cc:04:89:db:54:f2:
87:7a:1d:8e:15:c8:1d:4c:36:39:3a:1f:be:0c:8c:
90:e0:93:3e:8f:07:8f:71:67:26:d9:ff:86:df:28:
b0:89:73:30:3e:78:54:2d:bc:1e:30:9e:17:8d:9d:
73:29:44:53:df:1c:ff:c0:79:9c:0c:f2:07:ca:a7:
c2:04:7f:29:4f:89:14:29:13:db:54:13:91:82:23:
c9:d3:d9:ab:44:88:98:50:b7:5b:b6:44:5a:4f:5f:
30:0d:1f:27:68:d4:4f:af:7d:d2:69:ad:d5:cc:5e:
16:39:ed:49:0c:41:90:28:f0:cf:c5:6d:8e:7a:85:
c2:90:a5:f9:41:f2:4e:6a:5d:9b:64:b9:ab:fc:dc:
e3:a0:74:09:b9:4e:fe:6a:e4:48:de:db:aa:25:59:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CC:DC:F3:54:F6:54:89:F8:FE:E5:4D:57:E8:0C:20:11:97:AB:0E
X509v3 Authority Key Identifier:
keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e8:17:67:c3:a2:21:85:86:55:cb:43:88:2a:ad:17:44:73:
d1:02:fb:4f:f8:b9:09:7f:6e:13:d4:74:4c:93:a9:b1:d2:c7:
4f:26:12:c0:bc:30:c0:6c:40:2d:a0:30:2f:04:67:4f:d4:c1:
9f:07:80:06:74:31:96:ab:be:e4:17:d6:25:5f:f0:9f:82:29:
5c:3d:dc:fe:a9:1d:37:53:a2:bd:73:c0:16:63:9b:34:c6:5c:
12:62:69:ef:fb:72:47:6c:30:41:74:c1:0e:78:37:4d:fb:09:
3e:2a:b6:5c:c5:60:89:d3:71:e4:d3:93:83:da:50:61:da:ad:
d7:92:ac:72:ec:e3:b1:cb:59:01:4d:7b:21:12:51:e6:c0:eb:
e8:9f:b4:2a:56:7f:ed:04:8e:4f:7e:ec:95:f3:df:8e:5a:af:
46:4d:f4:95:7b:df:31:6c:ec:0f:f0:a8:f2:0f:17:a7:f6:1c:
88:92:f3:f3:3b:3f:07:aa:74:be:af:fc:92:53:11:49:d2:cc:
08:ea:43:c1:28:54:87:d2:ff:1c:df:b2:81:a0:b1:aa:b1:21:
61:7e:33:19:80:e3:89:bf:83:2b:6b:f8:3a:f6:70:48:a0:cb:
ba:2e:c2:7b:b7:75:bf:bd:60:22:04:68:bf:68:a8:76:71:05:
8b:65:fa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:20 2026 by rpki-client