Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier: dZwmKLFx3CNbf77ggr0JrCE319O1Z/tOgLv1tqYgNpE=
Subject key identifier: 40:E9:1E:86:32:59:27:A1:ED:E4:A9:30:12:D6:5B:20:76:02:22:14
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial: 019F91A408937E74A66453426289CFC4087F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number: 0CE5
Signing time: Fri 24 Jul 2026 01:01:14 +0000
Manifest this update: Fri 24 Jul 2026 01:01:14 +0000
Manifest next update: Sat 25 Jul 2026 01:01:14 +0000
Files and hashes: 1: 3eK1ZL7O23CEW3-d4NQhqQce6UE.roa (hash: MyvSzm1E1BuNXsJH9y2br5JSC+bFdaTi0xbtRaMTOVk=)
2: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: Gpl3G0Yj3EumS019jKdZKyu+q6T2wu2Lbtz27xPA0DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:08:93:7e:74:a6:64:53:42:62:89:cf:c4:08:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Validity
Not Before: Jul 24 01:01:14 2026 GMT
Not After : Jul 25 01:01:14 2026 GMT
Subject: CN=40e91e86325927a1ede4a93012d65b2076022214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:ea:c5:f6:c2:17:79:95:fb:a6:49:a2:d2:
ee:b3:bc:2d:e3:f1:8a:6c:92:75:5a:4d:4f:64:a7:
44:e5:c4:da:b8:60:1f:e5:1f:fb:8a:5c:e9:a1:71:
0c:d5:38:65:ba:a2:a4:95:26:12:28:63:96:bc:c4:
45:c5:50:ad:13:a3:e4:3b:9d:29:02:4e:b8:ce:7a:
f6:97:87:b3:05:e6:82:9f:3d:a1:fa:80:bc:92:78:
75:85:19:28:17:1c:76:79:1d:d3:80:e0:ec:d6:95:
c6:91:9e:7a:0a:69:59:bc:5e:5b:5d:7b:df:3a:a3:
cc:80:92:cf:ff:2f:ca:14:8a:c5:10:35:70:b4:b5:
e2:10:17:ac:a5:53:13:d6:8d:df:ca:50:5e:5d:dd:
05:b0:96:56:d5:7c:71:2b:5e:6a:f9:65:3c:9c:a5:
ee:47:70:19:47:ef:f2:40:bb:a5:c3:90:b1:e3:47:
1c:bd:07:c3:6b:a2:f7:29:88:37:8f:a7:fe:31:04:
b3:f4:7d:98:79:7f:bf:d0:0e:7d:31:7c:4f:69:77:
48:69:4b:58:e0:60:e2:f3:0c:11:1a:b4:59:c1:97:
c6:fa:97:ee:b8:34:fe:e4:d7:27:2a:47:74:dd:b1:
3f:d4:85:ea:2e:e6:12:84:30:09:93:46:3b:c9:75:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:1E:86:32:59:27:A1:ED:E4:A9:30:12:D6:5B:20:76:02:22:14
X509v3 Authority Key Identifier:
keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:29:28:5d:36:30:34:8f:cb:80:af:20:83:79:87:fd:9a:52:
48:5f:ed:f5:7c:71:89:ac:27:4b:81:d9:8e:03:f2:ca:ad:19:
b0:92:7d:77:3b:d2:a9:72:fe:e7:29:d2:29:fc:01:de:2d:f7:
88:4d:b5:59:e1:aa:52:11:ac:0a:a7:47:4e:aa:a4:2d:de:86:
e8:8b:80:b5:f1:07:ad:ad:ea:91:1e:ba:3f:8e:fc:b8:c2:a5:
31:27:19:f2:16:76:c7:9d:4b:07:11:2a:b0:0c:15:85:27:ec:
9f:2c:d4:22:a9:dd:82:f7:76:ac:75:88:64:cf:36:69:f7:f5:
a0:a9:84:f2:8c:4e:e9:e2:d8:ba:1f:ab:c5:19:19:fe:83:7e:
b5:d8:93:f9:15:a7:96:3e:73:7f:37:b5:fc:82:ea:42:6d:4a:
6f:9b:38:72:ce:c8:a1:54:19:52:69:9f:3d:95:ce:8a:aa:58:
68:89:f6:65:28:04:68:cc:b4:41:54:a6:f2:73:fe:29:48:d0:
9f:52:eb:99:01:09:91:a8:c7:fd:19:65:08:68:10:4b:87:6d:
cd:62:df:e4:5c:21:e7:e4:15:75:62:17:1b:cb:14:3c:21:c4:
2e:4d:61:0a:71:cd:5c:f8:a3:30:95:92:d0:5a:f9:15:50:bc:
66:d4:d6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:29 2026 by rpki-client