Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
File: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft (raw, json)
Hash identifier: h70KR8YzofmZ90fZmr3bNE94/Xk+F3EXPRjXCikE62c=
Subject key identifier: D5:60:E6:38:13:5D:F6:62:C9:BA:47:8E:1F:A8:85:5C:B6:51:D0:F6
Authority key identifier: DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B
Certificate issuer: /CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b
Certificate serial: 019F92ED1556E04E7A44F11F98E78E40F4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
Manifest number: 023A
Signing time: Fri 24 Jul 2026 07:00:38 +0000
Manifest this update: Fri 24 Jul 2026 07:00:38 +0000
Manifest next update: Sat 25 Jul 2026 07:00:38 +0000
Files and hashes: 1: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl (hash: lt3rD4443nH+In7QXWdys9fcSKfQkZXOB7rUZuUhu/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:15:56:e0:4e:7a:44:f1:1f:98:e7:8e:40:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b
Validity
Not Before: Jul 24 07:00:38 2026 GMT
Not After : Jul 25 07:00:38 2026 GMT
Subject: CN=d560e638135df662c9ba478e1fa8855cb651d0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:da:8b:10:bc:14:39:48:3a:2f:d6:57:e6:
d8:bd:eb:8f:6f:fb:31:9f:cf:f2:fa:e0:5a:cc:f3:
cb:a0:26:22:6c:5f:0f:cd:e7:0d:15:b7:fb:67:82:
39:e3:59:e5:e1:21:c1:95:1d:62:5f:ed:62:16:c2:
59:c6:28:5e:7b:75:b4:38:a0:43:70:c6:70:4a:3c:
6d:52:61:43:b1:0c:c1:aa:7a:12:84:4d:09:e5:1d:
1b:ef:04:c6:f6:2a:ca:a1:a2:23:54:bc:2e:ba:b6:
2b:66:8f:9e:12:44:63:ec:eb:28:6e:56:cd:38:7e:
b1:03:5e:7c:df:06:3f:5b:7f:b9:d4:f7:7f:66:c4:
a1:44:5d:ec:9a:29:5e:0b:80:7c:13:a1:70:b9:ae:
75:3c:7b:8c:9f:2b:df:a8:ff:d3:53:d1:98:c3:ee:
93:79:49:7b:6f:d9:59:f8:90:30:af:20:13:de:47:
a4:9b:3b:a2:d1:f7:8d:d1:4a:14:46:98:19:07:a9:
ba:7e:19:2a:8a:51:c7:e2:f0:44:b7:98:1d:0e:83:
aa:95:5d:08:3e:f4:16:83:30:82:d1:b5:8c:60:da:
60:51:d1:e3:1f:82:dc:4b:a0:46:7b:06:bb:70:f4:
53:c0:36:f1:4e:b9:b1:f1:84:7d:cd:af:20:c3:c0:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:60:E6:38:13:5D:F6:62:C9:BA:47:8E:1F:A8:85:5C:B6:51:D0:F6
X509v3 Authority Key Identifier:
keyid:DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:67:a1:d1:cd:f3:e7:8c:a1:71:9e:52:22:ee:e1:a6:6c:1b:
c7:98:de:c3:30:98:03:2d:92:22:14:9d:89:c6:38:3f:59:e3:
d7:ce:42:59:08:c9:6b:26:ec:0c:a5:17:43:01:1f:27:a6:c6:
42:0f:65:c6:41:eb:7c:d5:0d:42:3f:c2:ae:7f:65:3e:4b:bd:
54:c6:b9:61:30:74:77:0d:85:46:5a:a3:52:d9:f1:1d:51:ed:
be:f7:05:0f:eb:01:6e:d3:f5:4c:10:3d:ae:95:a1:f8:eb:55:
b2:95:05:b8:bc:cb:5b:21:f6:1b:c8:cb:36:68:d8:e3:60:4c:
06:fa:13:6b:f3:5d:bb:a5:ee:b8:1d:e1:2c:60:24:64:2a:41:
77:e5:1a:e7:43:fa:08:bd:cd:69:ca:37:6f:d9:43:06:ee:20:
b1:d6:5f:f1:45:73:b9:66:0e:2b:ea:51:bf:2f:b4:fc:fe:1c:
00:29:cf:8e:2d:55:e5:9c:77:86:5f:c4:d1:6c:de:35:20:98:
20:64:ae:50:01:a7:65:2d:ff:39:6a:1a:69:df:60:33:80:14:
fc:ae:9f:d4:e4:b5:c7:b8:55:0e:42:1f:4c:00:c9:f7:c4:bf:
2d:fe:cc:7d:dc:bf:62:8d:91:59:24:ce:f6:4e:ce:bb:dd:9d:
f5:c4:b5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:45:54 2026 by rpki-client