Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: BvRRYVrpRUWCJcGs7HdrXPQ49WUkZaXA3X8/b1EGo0I=
Subject key identifier: 6E:79:DC:90:A0:2E:87:D1:A4:A4:90:C0:0B:33:24:D8:71:20:8C:CC
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 019F8FEBD0E6A694CA886BF613D849F9BD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 14D8
Signing time: Thu 23 Jul 2026 17:00:23 +0000
Manifest this update: Thu 23 Jul 2026 17:00:23 +0000
Manifest next update: Fri 24 Jul 2026 17:00:23 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: XsrRLikYf6bsfwXylZDAOCgjN04kH/JPklGrYxhCxWg=)
2: oglaQX4nFsIGr-Rok7QLUW7-tlM.roa (hash: s+KJpOp9hYCyRUjA+Of2ZWgASyr4epw2ZvVJ2zuqMSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:d0:e6:a6:94:ca:88:6b:f6:13:d8:49:f9:bd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Jul 23 17:00:23 2026 GMT
Not After : Jul 24 17:00:23 2026 GMT
Subject: CN=6e79dc90a02e87d1a4a490c00b3324d871208ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:64:3d:a4:2c:ec:27:86:ad:8a:e4:d9:d2:
d9:4a:90:65:d3:38:1e:cc:e2:ec:92:99:1b:67:87:
53:41:6d:6e:fb:4f:ef:3e:cc:d8:87:74:1a:eb:4e:
4f:bf:9a:5e:4b:6c:b7:b3:1d:47:17:d4:45:d0:47:
0d:0a:6f:ba:ab:23:4a:5f:4f:07:3d:67:e7:ca:b5:
ee:ae:98:4e:58:15:36:32:12:3e:d8:f0:76:fc:59:
e2:6c:07:26:6b:76:75:93:cd:57:82:c2:32:ca:c7:
2c:f6:7b:09:2f:82:cb:cc:3d:03:52:04:d5:14:36:
f8:c0:f6:47:ea:4d:1e:b8:6d:3c:48:2b:33:25:bf:
fc:fc:c0:6a:3b:c9:53:71:ea:b9:2e:e2:e8:03:df:
56:01:45:01:df:f0:42:35:e3:78:14:68:6d:25:6f:
2f:33:4d:f1:18:fe:44:e8:47:5c:1a:34:f2:d0:4a:
c2:97:89:60:c3:9d:38:27:29:49:64:4f:43:a4:d5:
a8:bc:8f:20:4d:4a:2e:d1:a4:e4:6e:0b:d6:15:96:
b3:9f:3f:3b:74:f9:7e:8e:1f:38:af:4a:97:8f:8d:
9e:13:d8:69:50:75:f4:a1:90:7b:97:7e:d5:53:55:
15:66:ff:db:16:02:68:52:52:cb:7f:b7:73:16:c6:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:79:DC:90:A0:2E:87:D1:A4:A4:90:C0:0B:33:24:D8:71:20:8C:CC
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8b:07:84:da:0a:3a:f8:55:72:22:51:95:0f:ea:9f:75:91:
6f:83:59:cd:80:c4:8d:67:5d:5b:2d:96:a7:85:92:a7:28:21:
b6:06:2d:7c:13:f9:aa:be:75:a0:94:7e:7d:64:10:a3:c9:98:
7a:25:42:dd:26:f8:17:d8:f1:7d:7c:37:b3:e5:c9:ea:3e:a9:
61:db:42:b0:3c:6a:a5:55:b5:ac:12:40:ec:ee:46:a2:a9:dc:
19:00:38:e7:9b:dd:1a:74:c8:41:cb:18:e9:eb:6f:df:71:b2:
59:46:e2:15:6d:7d:bd:5a:9e:85:51:aa:8a:f5:d4:fb:05:82:
38:c7:48:fa:bd:4b:3a:8f:4d:a2:90:c8:73:a9:d7:b3:2d:41:
38:bc:21:f0:1e:f6:ac:32:1a:11:37:31:84:93:7c:a3:0e:94:
2e:7a:d8:6c:85:19:95:d1:e4:71:96:c4:f6:43:d4:30:cc:30:
53:a9:0c:ab:52:6a:aa:66:81:9e:bc:b3:57:ad:92:bf:af:23:
59:83:b0:ed:dc:8c:53:08:0b:b1:59:e3:49:bd:36:4a:98:64:
10:8c:75:83:26:d7:0e:49:e7:9d:7d:7a:d0:47:96:05:99:a6:
16:d4:3e:b9:58:a6:9a:c9:53:62:bb:8d:d2:70:ce:b8:0a:dd:
23:2b:77:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:08 2026 by rpki-client