Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: n48m+Ngg/9grYeOZ7WZC+fcgmG+gOiz8ID/yT68dAQ8=
Subject key identifier: B3:57:B6:D6:D4:2E:4C:F6:45:5A:24:F9:EA:82:1B:59:AE:1A:E8:57
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 019F91DADE63A1AE704A9EC681CF61BDF6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 02:01:07 +0000
Manifest this update: Fri 24 Jul 2026 02:01:07 +0000
Manifest next update: Sat 25 Jul 2026 02:01:07 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: ONI66oMZPTfEavjVr93/iQnssGuJE24LYIl18RAiuKg=)
2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:de:63:a1:ae:70:4a:9e:c6:81:cf:61:bd:f6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Jul 24 02:01:07 2026 GMT
Not After : Jul 25 02:01:07 2026 GMT
Subject: CN=b357b6d6d42e4cf6455a24f9ea821b59ae1ae857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:9e:1b:91:25:7d:1d:85:e2:ad:c4:9a:7e:
00:73:97:06:e3:71:fa:cc:47:63:bf:13:ab:38:1b:
50:14:0a:55:29:a8:63:9c:00:b2:e2:80:5b:1a:bb:
eb:7f:ab:1e:fa:96:b3:ab:8c:c6:dc:17:c8:a8:9d:
7a:1b:d3:98:28:b3:85:03:5c:6d:8d:4d:f9:ec:48:
a6:db:e4:7f:d2:96:45:4f:6c:23:0f:ae:70:b2:24:
75:bd:a1:e3:c0:b6:73:3e:7d:37:4a:67:53:8c:63:
3b:32:55:cb:7a:c4:7f:3b:08:a0:01:10:04:6e:21:
5c:0f:aa:fe:47:4b:92:ab:c7:b8:ee:3b:35:b9:36:
bb:63:c1:a3:2b:d0:bc:2f:24:ea:23:f5:e6:5e:ef:
68:ae:cd:a8:b4:a4:d6:59:8d:b6:ad:ed:c3:86:b6:
7c:fd:ed:02:35:1a:76:9b:d7:79:60:0c:e4:e2:d9:
36:ab:4f:c8:25:7d:5e:81:0c:b2:8e:59:d5:cd:14:
ff:d2:4a:c8:01:dd:dd:6f:6c:c3:e2:32:83:cb:6e:
55:8e:c1:60:07:cd:0c:ee:2c:db:4f:f9:8f:25:b0:
fd:f3:b0:cf:1d:8a:50:cb:61:9f:10:89:d4:2a:7e:
8d:ca:d3:0c:50:02:ba:05:c2:5c:dd:53:27:49:a3:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:57:B6:D6:D4:2E:4C:F6:45:5A:24:F9:EA:82:1B:59:AE:1A:E8:57
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f9:76:f3:47:e2:11:73:0d:c6:24:6a:28:7b:50:55:04:ae:
e8:86:ec:af:96:b3:87:32:0a:2c:ce:35:c6:e8:ea:9d:cf:37:
b0:f1:47:04:eb:3e:da:e1:a1:24:61:d2:fd:b6:5f:4e:4f:51:
54:6d:5f:bd:92:f2:d1:36:9c:99:a4:2c:f8:8c:ea:75:61:82:
f2:7d:76:ae:f9:58:e6:1e:13:f5:a3:e4:5b:57:53:a5:2e:f3:
b9:e7:4b:97:1f:9a:43:2a:1d:d3:0c:37:75:9b:8a:6d:77:11:
4c:ea:5c:3f:c3:68:d0:bf:9e:83:33:2c:39:b6:94:c6:20:7a:
89:5a:f8:96:7d:81:5a:a2:38:de:ba:43:f7:1a:ee:2f:c3:08:
42:be:18:5b:ab:d3:09:13:ee:4e:32:da:3f:08:4b:47:ca:66:
94:83:93:fb:16:5c:72:70:c3:53:18:f5:24:05:6a:d6:07:ba:
a9:db:c3:0a:f8:ab:5c:df:05:b3:9b:f7:f6:3d:02:4e:4c:31:
4c:07:d9:ba:af:70:65:48:57:fc:2b:a5:43:a6:10:d4:ed:71:
a2:63:7a:2f:23:97:b8:c3:1c:15:b2:e7:db:33:f1:d6:71:29:
e7:0b:d9:1d:ae:63:97:5f:8f:5c:d6:48:5e:b2:28:66:a8:98:
67:22:fc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:41 2026 by rpki-client