Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: 58kyrJ99tnHgQEU2QJiUYbtu6njuOHH1ej15Y4PJsZU=
Subject key identifier: EA:BE:14:61:0A:5E:00:18:7B:59:F1:8C:45:AF:94:8E:BC:D1:C7:1F
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 019F916D9981C31789C5B00A1F3A331BEA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 147A
Signing time: Fri 24 Jul 2026 00:01:46 +0000
Manifest this update: Fri 24 Jul 2026 00:01:46 +0000
Manifest next update: Sat 25 Jul 2026 00:01:46 +0000
Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: /WTinbghMqKDypTQnuZwFuFPErjUy21q2QIe3aKDEEA=)
2: SO6QjR1hksAlM1LEwjsSfqyQA6I.roa (hash: ywShTaMxtKmWmIhHqGYn82a6dMwPRqUZ2JHI/iurJ+w=)
3: Y89C32NzpkA3PQGSAOSpiB1CVZA.roa (hash: A3b0H1rBdmLPnm3DdKs/p6L4k7I984tyefEWdXhVLr0=)
4: csf31rqb-Vtp8DxAcvND5Xzia2g.roa (hash: tIcC2hzx8VFbqFhPv8CNA+NzwFonxl1ILY4nFDsUkqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:99:81:c3:17:89:c5:b0:0a:1f:3a:33:1b:ea:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Jul 24 00:01:46 2026 GMT
Not After : Jul 25 00:01:46 2026 GMT
Subject: CN=eabe14610a5e00187b59f18c45af948ebcd1c71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:b0:db:c0:a7:b7:a8:a4:de:bc:47:b9:60:
78:ea:b0:26:cd:eb:02:fb:16:e7:1b:5e:90:65:3c:
2e:c0:6f:47:f9:3a:be:0f:37:95:73:09:59:1a:b1:
e5:22:7b:7d:a9:b9:a6:5f:5f:51:56:67:ec:62:5b:
13:5b:6e:39:79:bb:5d:69:3a:d9:d8:17:ef:ff:ca:
db:cd:6b:0f:79:a9:86:66:d0:24:c5:e0:7b:ac:57:
55:53:a3:85:72:46:0b:7d:b6:ce:ab:0b:04:10:5c:
42:38:57:c9:f6:c1:b8:f4:1e:77:eb:bb:eb:91:b9:
1e:b5:38:2d:70:3d:0c:74:d9:68:e5:20:86:ee:56:
9f:8c:07:f3:ec:5e:51:eb:3d:7b:91:7e:66:1d:af:
e2:83:33:c6:5a:ff:cf:aa:50:e8:be:ee:e5:30:9b:
6a:4f:b7:5b:c9:4b:17:35:0f:31:4b:fc:36:e1:55:
9c:c1:80:3c:fc:25:12:46:ac:41:e5:af:35:24:d5:
46:3a:e7:fb:d6:f0:4c:29:d0:d8:2e:68:0b:15:a5:
5f:59:bc:90:87:50:4e:de:71:32:7f:53:a4:ca:81:
a0:e2:be:07:c4:ad:0c:ff:a7:b4:d2:74:3f:c8:7c:
e8:62:3d:b0:c4:d0:61:10:ac:8b:11:00:c1:8a:12:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BE:14:61:0A:5E:00:18:7B:59:F1:8C:45:AF:94:8E:BC:D1:C7:1F
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:19:46:81:04:56:f5:10:4a:65:e5:33:cc:11:ce:78:de:b0:
e3:81:92:95:d3:d5:3d:0c:20:8e:f1:7d:21:a1:c8:3f:50:e0:
7d:2c:ea:54:f6:10:95:24:6c:68:02:bf:1b:82:14:71:02:7d:
90:ac:89:2f:93:22:86:cc:47:32:c2:95:cb:f7:ce:fb:1d:f2:
b4:a1:b2:a4:31:1c:16:3c:8b:d0:56:e6:36:4b:b4:53:bf:0a:
c1:e2:38:ff:45:8d:8b:50:76:66:fc:bf:ce:e4:d5:2a:bc:7e:
6b:66:9d:7e:17:be:1d:53:82:a8:89:96:57:a4:e9:c6:3d:78:
72:14:45:96:60:0c:fb:d7:73:53:f4:59:50:10:d3:3d:d1:94:
f7:38:57:25:ad:9b:5a:3d:0f:c2:78:f3:f9:c3:2f:0c:22:97:
ac:47:6f:6e:6f:3d:9b:5f:f4:9d:79:a0:c0:f2:76:0e:08:dd:
79:1b:fb:b0:67:3b:33:e9:7b:0d:04:a9:e3:ff:7b:61:c8:22:
66:a5:dd:be:07:10:2e:32:9e:50:51:60:67:21:43:a9:ed:1e:
a6:8a:c4:52:c5:89:df:15:3b:64:d6:12:4a:35:ab:d0:e5:fc:
2d:2d:52:12:a6:61:be:52:ae:34:e2:b0:2f:f6:d1:db:51:cb:
9f:58:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:59:18 2026 by rpki-client