Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
File: 3dBY7vGdEboOq68EbnKibl5XJkM.mft (raw, json)
Hash identifier: bgfTcC9wXBwfmZwNx1A7fCgqvhGUf26z7L5hrIAgs5U=
Subject key identifier: 19:42:C5:E4:E0:4F:C1:A1:D4:28:50:D1:05:FB:CA:1B:6F:DD:D2:A0
Authority key identifier: DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
Certificate issuer: /CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Certificate serial: 019F90FF650338F2A0993526253BDFC10F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
Manifest number: 01DE
Signing time: Thu 23 Jul 2026 22:01:24 +0000
Manifest this update: Thu 23 Jul 2026 22:01:24 +0000
Manifest next update: Fri 24 Jul 2026 22:01:24 +0000
Files and hashes: 1: 3dBY7vGdEboOq68EbnKibl5XJkM.crl (hash: RawWPuxI9S+vakdZi4JooPXyg7N3ZLvooXr/+JrvrP8=)
2: 6w_LmvhXnOF2ik3DDNvsrEWVCI8.roa (hash: 6W4Vav7RSMNSHDF7FWCiUK0cI2saEqhD9eRkDI4fbG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:65:03:38:f2:a0:99:35:26:25:3b:df:c1:0f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Validity
Not Before: Jul 23 22:01:24 2026 GMT
Not After : Jul 24 22:01:24 2026 GMT
Subject: CN=1942c5e4e04fc1a1d42850d105fbca1b6fddd2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:2a:70:6f:19:94:f7:59:ae:7a:70:90:71:
95:f0:35:28:ca:d0:95:1d:51:70:93:05:e2:3c:13:
c4:48:76:5a:d3:0d:8d:6f:7f:7c:04:15:a3:93:a4:
44:14:99:de:56:e6:8a:00:e1:51:a1:7a:ea:c5:a4:
17:45:0b:f6:d5:22:ea:be:e7:e3:3b:f2:c1:6b:bf:
6c:6d:f6:9e:b2:9a:a8:05:04:1b:7c:3e:70:98:75:
dc:78:c7:b0:16:dc:99:54:2f:14:08:2e:60:af:cc:
dc:13:2b:06:47:2f:83:7c:d1:19:a2:a5:f1:b1:e8:
3a:cf:76:9d:a3:01:16:06:3a:47:9f:1b:6a:f5:61:
6c:82:5b:61:c7:dd:6f:40:45:34:e1:c8:5d:42:1c:
93:0c:c8:eb:e9:c9:0e:30:c6:d4:27:28:fe:35:9e:
49:e4:7b:e6:e2:c0:2a:37:d8:1f:85:21:54:88:76:
b7:a6:ba:14:a7:31:36:a3:8a:fe:c1:14:cb:27:b8:
70:27:47:42:6a:41:11:e6:57:35:ab:5e:de:7e:77:
e4:2a:51:81:43:8a:7f:af:f8:44:3f:df:5c:14:97:
77:7d:64:db:8d:d5:be:d0:61:18:7e:fe:0e:a7:17:
37:7b:52:a2:ff:92:91:75:e9:d5:0d:b3:6b:51:18:
97:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:42:C5:E4:E0:4F:C1:A1:D4:28:50:D1:05:FB:CA:1B:6F:DD:D2:A0
X509v3 Authority Key Identifier:
keyid:DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c4:68:60:14:44:15:99:ec:8c:d0:2d:34:25:99:3c:be:f9:
ca:b1:61:5b:03:d5:aa:36:03:09:f7:d5:d3:46:d8:e7:e7:64:
9f:47:4a:b1:e5:ab:53:c4:9a:b2:24:3e:f9:f6:60:f3:34:d4:
c4:a9:93:6f:28:14:58:e9:7d:9d:9c:22:b7:85:59:4a:2d:d0:
3d:c8:a4:8e:53:b0:6d:8a:eb:b6:65:c4:d5:cf:e6:1f:48:74:
01:a4:89:6d:b0:e0:87:d0:0f:b8:cd:7d:30:eb:36:e5:a7:45:
26:43:92:62:37:41:75:6a:c9:42:82:11:46:8a:08:37:6e:e7:
89:a5:58:64:73:2b:84:b4:d2:cb:a0:75:19:5b:df:53:10:fa:
80:48:e3:83:14:16:ce:b0:5b:6b:7e:77:44:e4:21:6f:bc:99:
9b:13:74:09:92:4c:a9:74:09:fd:78:b2:4c:c8:8b:24:1a:18:
1e:4f:09:df:00:bf:2f:1d:39:3d:50:d4:76:c4:a8:c7:8e:39:
c3:63:a8:72:1c:a2:9a:d2:dd:20:60:22:a2:c9:03:2b:bc:f1:
6c:05:0c:36:31:dd:5e:bc:aa:ff:c3:83:76:d3:f8:06:b3:24:
90:1b:48:92:e9:f7:91:b5:3d:43:5c:dc:1c:8c:1c:e0:47:38:
f3:c6:91:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:34:53 2026 by rpki-client