Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
File: 3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft (raw, json)
Hash identifier: A+JXgPxgTw+QbBqN3VPh4CnAWlDyLCpKBwLwywoh3aE=
Subject key identifier: A2:0B:2F:E3:75:43:02:E3:7D:0E:A1:91:E4:FD:4C:94:5A:99:D9:14
Authority key identifier: DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
Certificate issuer: /CN=dd5b224b6593e558038a9e40e660c77142755c1b
Certificate serial: 019F90C7689C153496ECAE27A76B298F5D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
Manifest number: 0DD8
Signing time: Thu 23 Jul 2026 21:00:15 +0000
Manifest this update: Thu 23 Jul 2026 21:00:15 +0000
Manifest next update: Fri 24 Jul 2026 21:00:15 +0000
Files and hashes: 1: 3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl (hash: 8kx2KZK2nEF6yCin74gVVPuJkHb5soPhu+ExEufJ/+Q=)
2: qVOiKU3-XCJIV1dlmVqm9Z8OCSU.roa (hash: 1b1b4ZznQQVB7nOvdHCZX+1O8620BLLwp7A6OVcEvQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:68:9c:15:34:96:ec:ae:27:a7:6b:29:8f:5d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5b224b6593e558038a9e40e660c77142755c1b
Validity
Not Before: Jul 23 21:00:15 2026 GMT
Not After : Jul 24 21:00:15 2026 GMT
Subject: CN=a20b2fe3754302e37d0ea191e4fd4c945a99d914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:67:38:1c:35:ff:ad:45:db:01:fc:81:4f:
91:88:3a:8a:89:d0:87:5a:e2:54:38:fa:dd:e3:5b:
9a:d7:38:fb:ed:c6:11:bc:75:dd:cd:86:e6:d6:16:
29:ad:a8:f4:d3:2f:8f:d1:fe:fe:5b:6e:26:61:c7:
32:4c:9e:09:55:a2:0a:6b:c0:49:33:ff:9d:56:78:
cc:c7:e5:58:95:b5:cb:e8:c4:06:08:30:be:c8:bc:
c8:27:de:31:88:9f:61:0d:ab:3b:08:8d:99:c1:01:
7a:f7:e3:cd:d9:2f:c2:ce:cd:41:b0:01:bd:5c:e6:
36:1c:3a:b5:e3:58:c4:10:19:9d:de:d0:69:40:6c:
ac:72:ad:5d:5c:4c:db:89:61:97:14:90:20:94:fe:
a2:4a:18:1b:4d:b3:b0:16:59:c1:60:fa:f8:1c:4f:
9c:06:c0:ba:a9:d0:6c:59:c4:08:01:35:61:ed:bc:
98:24:67:63:50:43:dd:83:8d:ee:b0:e5:cb:ad:4d:
99:b7:18:75:c4:e7:b6:22:6b:32:0f:d2:70:94:30:
cf:0f:33:74:c0:11:88:ee:cf:fc:1d:99:92:75:31:
03:22:79:e9:a5:0c:aa:4d:ce:76:11:9a:e8:6e:01:
65:f3:79:57:b0:fa:00:7a:b6:97:ae:95:11:bd:67:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0B:2F:E3:75:43:02:E3:7D:0E:A1:91:E4:FD:4C:94:5A:99:D9:14
X509v3 Authority Key Identifier:
keyid:DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:08:23:2d:92:f9:bc:62:d4:c7:23:71:85:a4:25:19:01:27:
43:9e:eb:de:5e:5a:e4:cc:91:42:57:4c:7e:74:be:eb:8f:06:
60:e6:c2:bd:a2:9c:f7:46:58:c6:fa:78:af:37:c0:49:64:a0:
75:8a:c7:1b:1e:fe:8b:6a:6b:d4:d5:7a:7d:98:3d:c0:bf:30:
a7:55:1d:8a:95:d2:1c:1b:b4:aa:f1:fa:92:1f:94:83:32:fa:
ba:6d:9a:38:e5:67:9e:b9:59:c2:de:cf:10:77:af:5f:2f:33:
65:1f:59:ed:53:04:fa:e1:98:7a:42:9a:38:16:86:e0:86:cf:
dc:cf:59:ee:dd:24:e8:b0:f7:82:10:54:e2:bf:5b:05:c0:56:
cb:80:df:6b:59:5e:a3:5a:e6:16:75:d1:54:4b:ac:03:b0:44:
3f:8c:0a:bc:c5:69:71:7a:1e:b2:62:4c:1b:e0:6f:40:f0:e4:
be:e1:a1:78:17:bf:2c:c3:36:d9:83:fc:59:65:5a:10:5b:18:
06:99:5a:da:9c:55:f7:1f:36:de:a5:0d:e0:a2:ee:58:67:d2:
da:45:a9:0a:3d:6f:44:92:b1:1e:75:49:d1:b7:68:8a:0e:bd:
74:9c:8e:b0:60:ae:96:82:16:54:d8:26:bb:d7:e2:6e:e4:3f:
93:a8:1e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:28 2026 by rpki-client