Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
File: 3YXca2FDoX_rSYIOpSAEiVj0itw.mft (raw, json)
Hash identifier: 8Ml1yEt/7X/uxi+wyMd/4qBFezw4CQU+aLyAZKk4ruw=
Subject key identifier: 3C:30:40:F1:AC:55:FE:EB:94:D2:D5:CA:72:84:47:0D:78:40:5C:5B
Authority key identifier: DD:85:DC:6B:61:43:A1:7F:EB:49:82:0E:A5:20:04:89:58:F4:8A:DC
Certificate issuer: /CN=dd85dc6b6143a17feb49820ea520048958f48adc
Certificate serial: 019F91DA4F7F0259707B15CD84CE405A6110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
Manifest number: 1461
Signing time: Fri 24 Jul 2026 02:00:31 +0000
Manifest this update: Fri 24 Jul 2026 02:00:31 +0000
Manifest next update: Sat 25 Jul 2026 02:00:31 +0000
Files and hashes: 1: 3YXca2FDoX_rSYIOpSAEiVj0itw.crl (hash: 0F1HKvOzuzJFUZIKoEkUJuJg/ZEuJ5jyedeae8D0wRY=)
2: BsyNzVaxxAwnI04Dd9aOhMe6ucE.roa (hash: 0aNXoEKl0ws+Toia/ObhW+i07V56stDq9dLrY8oS6mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:4f:7f:02:59:70:7b:15:cd:84:ce:40:5a:61:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd85dc6b6143a17feb49820ea520048958f48adc
Validity
Not Before: Jul 24 02:00:31 2026 GMT
Not After : Jul 25 02:00:31 2026 GMT
Subject: CN=3c3040f1ac55feeb94d2d5ca7284470d78405c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:4c:a0:b0:1f:8d:d6:04:da:7b:50:d6:67:
9e:d7:83:b3:ed:36:75:e8:a9:d4:9a:b6:ec:c0:4b:
15:70:45:95:ff:43:cf:e7:6c:83:64:ba:4d:67:3e:
d1:98:f7:c9:2f:74:0d:c6:d1:08:23:35:db:07:f7:
8e:07:cb:43:1b:70:9f:bb:0e:bc:37:a5:52:ad:a4:
ff:ca:1a:5e:0e:8d:25:96:f9:6d:d8:bc:c8:a8:3c:
33:92:2b:94:4e:82:af:78:ff:82:8b:ee:7b:a7:81:
95:96:1a:47:ef:56:8d:dc:40:5e:6f:6f:05:79:5c:
96:f7:ec:7c:6a:2d:a9:f2:65:3f:34:4c:08:b8:dc:
95:4c:40:fe:23:ee:cb:c3:fd:29:20:2a:e6:22:6a:
e1:55:2b:15:af:f2:bb:36:11:ac:23:85:18:89:af:
e6:03:82:41:50:5b:67:21:22:b5:2e:3e:f6:c2:06:
59:6b:e6:59:97:66:d5:8b:84:fb:9b:4e:29:be:2b:
e5:dd:1b:38:f8:77:ea:c8:1e:40:2e:8a:df:a3:fa:
f1:49:c9:04:58:8e:37:a4:29:36:12:06:3e:93:5f:
49:08:a1:9c:8e:af:59:c0:50:95:ed:aa:f5:97:6d:
51:79:aa:07:bd:c9:6b:5f:d6:ea:55:b8:d8:9e:d8:
18:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:30:40:F1:AC:55:FE:EB:94:D2:D5:CA:72:84:47:0D:78:40:5C:5B
X509v3 Authority Key Identifier:
keyid:DD:85:DC:6B:61:43:A1:7F:EB:49:82:0E:A5:20:04:89:58:F4:8A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:92:b6:63:a2:72:0c:1b:10:7a:65:cc:13:18:3f:d6:f7:56:
95:fd:16:a8:7e:0d:b0:dd:0d:81:a0:bb:f0:d0:5f:76:5a:27:
7d:22:66:43:97:93:92:0a:37:8c:bd:93:6e:60:27:37:e7:4d:
d9:e7:98:c7:29:d3:10:d6:da:c2:dc:96:47:5b:41:41:91:c4:
ac:f6:a3:f1:e9:24:9f:52:53:52:b8:77:d7:76:88:69:0e:7b:
7e:41:ec:39:2b:8a:55:bb:6a:a3:9f:9f:35:7f:0c:32:1f:4e:
ae:ab:e6:68:60:c7:3a:04:b4:0a:db:37:80:40:4b:ec:e7:87:
c3:05:e5:1c:ea:7d:54:8f:49:d3:6a:ca:8f:e1:44:cf:21:24:
23:69:3f:8e:8a:c8:01:a6:c3:d3:c8:02:e8:5d:c4:3f:1b:65:
57:b1:bf:0e:8c:65:b8:ea:08:b3:c2:00:69:04:fd:c6:3b:4c:
bc:7a:fb:63:0e:aa:0f:75:6f:f2:94:b5:ea:e8:85:55:16:75:
f8:dd:51:26:d2:26:36:43:cc:0a:6d:d1:3b:27:d8:35:c5:4f:
5c:aa:88:13:aa:68:5f:89:e3:71:10:3f:11:54:be:a5:ab:ef:
ca:1c:bc:74:86:14:07:48:57:1a:c1:88:f3:09:81:e4:00:bb:
4b:8f:6f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:36 2026 by rpki-client