Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: lPUX7mHw5IsbdwSnSW+SCBbdxaMy3yrkndmBVzRCmME=
Subject key identifier: 23:7C:70:55:72:97:05:55:5A:35:6C:8A:84:96:93:4F:56:44:29:41
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 019F8F110220ADE5F8951BF5BA573813FFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 10AA
Signing time: Thu 23 Jul 2026 13:01:24 +0000
Manifest this update: Thu 23 Jul 2026 13:01:24 +0000
Manifest next update: Fri 24 Jul 2026 13:01:24 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: 5pdUchGbK8IBUX7LKx3FnTcNLKmxTzT7+TpmlIEWwqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:11:02:20:ad:e5:f8:95:1b:f5:ba:57:38:13:ff:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Jul 23 13:01:24 2026 GMT
Not After : Jul 24 13:01:24 2026 GMT
Subject: CN=237c7055729705555a356c8a8496934f56442941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:1e:e1:4b:eb:0f:bc:ce:79:29:a3:4a:73:
47:30:2b:3f:fe:d5:44:3a:51:de:51:eb:c8:fd:bc:
54:8f:b1:d2:71:d1:bf:88:5f:72:d4:5e:6d:0e:ee:
1f:75:ba:b6:16:d0:8b:61:36:bc:cb:98:63:2c:fb:
3f:d5:fe:49:07:bb:c3:21:57:43:92:b9:78:77:50:
e7:73:1d:2e:99:ba:05:13:18:92:98:3a:c3:af:95:
f2:0b:44:db:e6:9a:33:19:8c:f9:ce:35:8c:b2:8f:
0f:16:23:db:5b:fd:1d:a1:e0:65:cd:52:96:14:c1:
05:0d:59:4c:39:5a:7b:18:0e:b1:65:fa:30:62:78:
aa:88:25:7b:d4:f2:d3:e7:9e:39:51:e3:6f:5a:4a:
99:ac:f7:58:c5:6b:a6:3a:d9:28:85:95:f8:5b:23:
c9:84:81:9e:8d:27:36:53:01:a0:d2:d9:96:20:84:
3d:4f:4b:38:f4:b2:27:28:84:f2:7b:68:d3:ee:77:
61:71:01:dc:85:fa:34:71:d3:29:29:e9:4a:23:a4:
15:4e:c1:d7:96:53:0f:a0:65:9a:46:d4:b4:e3:f9:
a5:f7:7c:fb:b1:27:4d:48:71:ea:38:7e:6a:f6:b3:
8d:22:e2:08:ea:3f:99:d1:c0:56:0f:01:58:35:00:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:70:55:72:97:05:55:5A:35:6C:8A:84:96:93:4F:56:44:29:41
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1b:16:a6:a3:c4:7e:e7:6b:91:19:00:2a:68:24:4f:0c:72:
ce:72:74:44:c5:30:9f:fa:bd:2c:56:03:ea:c3:e2:0b:da:e8:
c5:f3:0e:9e:c3:6e:4b:cc:27:0c:3f:7e:bd:9f:93:7c:07:aa:
48:87:1c:a0:6c:02:eb:45:bc:c7:72:a6:18:5a:ce:70:f2:0a:
9b:d2:60:9d:0e:cc:11:15:d3:6b:7b:d7:af:db:13:45:62:a7:
38:76:0c:b2:94:9b:6b:04:bd:0d:bd:a3:b6:67:27:50:04:97:
f5:cb:37:42:45:b6:ec:ac:33:d6:9d:19:54:70:04:0e:7d:8d:
74:49:6b:a2:ca:f4:22:af:50:9a:47:16:6d:54:43:a6:26:b1:
2d:94:98:72:d0:b0:d2:b6:25:c3:0b:fb:97:d5:99:a1:fb:41:
e6:26:8f:80:44:b6:31:c7:bb:13:37:b3:4e:55:bd:e9:c2:7a:
b6:f4:84:b4:b5:69:9e:26:42:fb:4a:f3:10:d4:5b:00:60:5a:
17:0d:32:db:58:05:c5:f4:87:31:df:e8:e9:8a:4f:5c:08:1e:
3e:8c:20:b4:01:c5:40:9d:bd:9b:d8:71:bf:28:81:83:08:93:
b4:33:2d:6c:b2:5c:8c:59:e9:2b:dd:43:9b:17:bc:54:13:c2:
2b:f3:29:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:39 2026 by rpki-client