Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: 2z1eY/Eb0mng+J83TjUZZutGcvZRu2Fk1iGHb+ST3Ec=
Subject key identifier: 0A:CE:21:75:F2:F1:F0:D8:BF:C4:36:9F:08:E8:BA:D2:62:B0:B9:DA
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 019F905A22E07FE68B9A40BC4A0A824174FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 12DC
Signing time: Thu 23 Jul 2026 19:00:53 +0000
Manifest this update: Thu 23 Jul 2026 19:00:53 +0000
Manifest next update: Fri 24 Jul 2026 19:00:53 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: AND/dL2vvuJ68XavUS36JE6PeYuiDUMxq+6jE46K8D4=)
2: f8-DGeBP35-N3w51zaELLHTWQhA.roa (hash: p45bmNjagtDF3HgTTRtJcWFVXkd0k7P3PfW1B+YfWgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:22:e0:7f:e6:8b:9a:40:bc:4a:0a:82:41:74:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Jul 23 19:00:53 2026 GMT
Not After : Jul 24 19:00:53 2026 GMT
Subject: CN=0ace2175f2f1f0d8bfc4369f08e8bad262b0b9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:ef:90:9c:c1:84:76:1c:0a:76:14:03:48:
68:86:5d:a1:1c:19:7a:df:39:eb:69:27:d6:4b:d5:
3b:a6:10:c9:59:ad:3e:43:c8:af:e7:3a:1a:64:35:
d0:c3:0a:02:17:29:af:6a:26:b5:10:cc:64:3b:e9:
5b:a9:43:1b:27:07:fe:a9:0c:7c:c2:b4:82:1a:d8:
f2:a0:de:33:30:aa:3b:10:f8:60:50:5a:7c:d5:5e:
b7:49:82:42:0a:c5:ae:3c:5a:b6:df:15:08:88:59:
8a:07:d0:88:0b:47:67:7b:73:1b:e8:92:2e:c8:27:
fc:85:29:8c:e8:e8:31:7a:33:12:14:35:67:7f:e9:
cd:50:27:9b:87:17:a1:86:1a:0f:52:03:04:cc:f7:
81:b0:7a:20:bc:8e:ce:63:78:57:18:6f:84:de:a0:
7e:07:21:3b:2d:c0:bc:44:83:a8:e9:88:af:b4:3c:
77:33:c6:5c:35:6f:5b:d9:e9:2b:30:a7:85:3c:9a:
d6:7d:b5:00:dc:c7:d2:49:ab:7d:6c:98:74:2e:e9:
7a:29:37:f8:93:2c:00:16:37:02:11:f0:d2:be:21:
9f:9b:cf:4a:19:b5:64:ae:04:14:e4:57:ba:61:22:
68:d4:a5:43:30:b7:c5:10:36:b2:ab:40:aa:22:9d:
9b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CE:21:75:F2:F1:F0:D8:BF:C4:36:9F:08:E8:BA:D2:62:B0:B9:DA
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0b:d2:e1:d1:d6:f7:ca:f6:cc:75:bf:20:c3:50:3a:3b:ea:
66:15:f3:d7:3b:f7:ed:21:66:74:27:ed:2e:48:c8:55:7e:2f:
31:af:90:c1:4c:ce:c3:d7:77:b6:3a:ba:c7:71:ab:27:c3:f2:
0e:3b:96:0c:83:b0:e0:f1:e7:d4:7f:dd:4d:cd:3f:3c:f6:22:
1b:38:92:76:83:94:7b:44:e0:72:e9:78:e8:aa:67:d5:0d:b3:
53:e6:c0:f6:5f:94:e2:6d:00:99:50:1e:17:f1:c8:d4:fe:6b:
17:cf:95:4a:d6:a9:8e:68:ba:a5:e1:03:c7:e4:9a:60:e6:17:
bb:db:47:28:99:ae:a2:70:ed:3d:70:84:b5:cc:87:b7:24:c3:
40:88:73:00:c1:3b:a8:d7:7f:3c:2a:63:3c:d8:24:26:7c:ae:
64:82:87:9a:ff:c4:dc:72:3a:c2:79:c2:d8:55:46:42:a3:3e:
ef:16:11:2d:f6:0e:b9:3c:f6:44:3c:5a:9c:f5:ad:a6:38:bf:
6d:42:46:a4:db:40:56:a0:8a:0e:d9:13:44:0f:82:7e:7a:9f:
bd:4e:6c:db:a8:60:40:ff:cb:65:7b:5f:ee:5f:be:f0:e6:e2:
99:6c:6f:26:f7:c8:28:9b:81:4b:50:ae:4f:6d:b2:b8:5d:7a:
ed:be:04:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:21 2026 by rpki-client