Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: Ir4mtNaJw6Xh3uMsKmfWpS1K54nbl7xKPi3HmwxGs3U=
Subject key identifier: 9F:B3:B2:92:58:DF:7D:40:68:F9:6A:98:5C:36:6E:BF:FB:16:BE:21
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 019F8FEC2A59C93CBD7D97CE8FD6895D3836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 137A
Signing time: Thu 23 Jul 2026 17:00:46 +0000
Manifest this update: Thu 23 Jul 2026 17:00:46 +0000
Manifest next update: Fri 24 Jul 2026 17:00:46 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: wHCnQZzb96spE2ybjGpYRWS25DRN95aaxLIz5gvuPJg=)
2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:2a:59:c9:3c:bd:7d:97:ce:8f:d6:89:5d:38:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Jul 23 17:00:46 2026 GMT
Not After : Jul 24 17:00:46 2026 GMT
Subject: CN=9fb3b29258df7d4068f96a985c366ebffb16be21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:90:eb:78:3a:52:4e:b8:56:88:82:f5:74:
53:c1:f9:f2:92:ae:5a:82:c6:1b:56:ed:a0:4b:68:
b9:f9:37:8f:6d:9d:88:de:2b:3f:0c:a8:60:4d:ce:
ee:5b:b2:fd:4e:2f:f4:bf:75:8e:82:a1:2a:a7:2a:
42:04:e1:b2:56:bf:cf:a4:58:46:5b:87:5f:ac:f9:
cc:27:b5:aa:00:92:1e:aa:6f:ab:44:62:e6:3b:1a:
87:3b:18:45:3f:a2:6c:ca:ca:72:ba:df:b3:54:b4:
42:60:4c:fe:2b:4b:9c:24:f5:38:d9:1b:53:84:fe:
80:69:68:4b:01:5b:52:e5:cf:ca:f4:df:d7:88:b9:
38:ab:e2:f2:3d:fb:0a:74:b2:ee:22:70:30:29:62:
05:45:ab:79:d0:6d:b3:f8:fa:ce:d9:03:be:9f:45:
90:87:dc:d9:6a:1a:83:99:54:3d:87:01:58:10:b1:
f8:f0:cd:1a:3c:88:df:eb:91:94:5e:51:9e:06:58:
42:ca:7b:d9:cf:bd:fd:d2:4f:90:19:8d:76:61:38:
76:ff:93:6a:3f:f2:e3:f8:d3:f8:78:db:43:a3:83:
b1:ec:41:3d:64:55:c7:7f:d0:3e:d0:ba:18:12:36:
bb:c7:d4:58:5a:30:96:72:29:71:1f:47:34:b5:54:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B3:B2:92:58:DF:7D:40:68:F9:6A:98:5C:36:6E:BF:FB:16:BE:21
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c2:6b:8e:9e:ac:88:9c:44:69:8b:a4:2c:88:38:ea:f8:a6:
83:b8:14:f6:8d:ed:93:50:9b:ff:c7:2f:57:9b:63:50:d1:04:
bb:28:7e:f5:30:82:58:89:35:c5:9e:c0:3d:3e:e2:c8:bf:1c:
4b:88:a2:d7:d8:a5:f4:cb:ca:fb:c6:e8:93:e4:7d:81:04:46:
48:28:ab:ed:9a:c7:60:d8:81:aa:94:c4:3c:3f:3c:57:3e:0c:
0a:b3:b4:cb:e0:57:fc:0f:b4:0c:40:95:cd:f2:f8:01:82:45:
cb:56:10:90:6a:57:67:0a:e8:9e:fa:20:f1:b2:2d:5a:28:ab:
3c:f7:03:91:47:69:0f:86:94:1d:57:05:53:37:51:91:ff:bd:
74:7a:f4:53:30:34:6d:8b:5c:87:c3:4e:17:8d:2b:d3:a1:0f:
ac:27:41:25:d2:bc:32:2b:0f:d3:0a:df:17:2d:4b:e8:a5:84:
da:1b:11:32:45:42:d7:9f:bb:48:eb:82:6e:a5:e2:56:30:ee:
7f:57:99:74:bd:f3:8f:32:44:2a:e3:c4:f1:b8:cf:49:76:74:
96:8d:a4:29:76:e4:5c:64:ef:25:64:2b:80:71:7c:7e:9c:1e:
18:da:a8:77:b3:0d:75:ba:6e:d4:0a:79:48:30:82:a8:3c:86:
c4:7d:0f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:58 2026 by rpki-client