Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
File: 3-ytVuquEjX6eI5OrTkiwpbig6U.mft (raw, json)
Hash identifier: XspKMDMSoo4d/89XE2jKFS1xNhp2b48h+UHIkQk4upU=
Subject key identifier: 5C:9D:77:B3:6B:E0:9C:47:9C:A6:59:D2:0C:EE:F7:04:3F:0A:A2:15
Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Certificate serial: 019F91DA7C791724288CD857EB434A6B5C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
Manifest number: 0503
Signing time: Fri 24 Jul 2026 02:00:42 +0000
Manifest this update: Fri 24 Jul 2026 02:00:42 +0000
Manifest next update: Sat 25 Jul 2026 02:00:42 +0000
Files and hashes: 1: 3-ytVuquEjX6eI5OrTkiwpbig6U.crl (hash: 7u8XgBVNQvBXmCSAGg2tJnWRJ/8ahRaO1LPZWpZlGJY=)
2: THfbU74ywtQ8sKspPoGoe7QN1LQ.roa (hash: cZXszgxvNHrOfZXBgPIvxUmNlIbSPNniYOHYtr5et54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:7c:79:17:24:28:8c:d8:57:eb:43:4a:6b:5c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Validity
Not Before: Jul 24 02:00:42 2026 GMT
Not After : Jul 25 02:00:42 2026 GMT
Subject: CN=5c9d77b36be09c479ca659d20ceef7043f0aa215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:03:5e:e3:fc:b7:72:4b:7e:6d:1b:ae:26:
b1:82:ae:b4:a3:61:89:8b:2e:1b:9b:12:a2:4a:8f:
0a:da:11:f2:4e:3f:62:6a:df:cc:1e:f2:c2:0a:88:
a4:b8:67:81:d0:e4:78:85:5d:c2:d1:d5:59:fc:95:
2b:d4:79:b7:9d:1d:93:e9:55:f8:80:13:46:41:c7:
3f:44:64:66:8e:68:2b:bc:89:d2:48:46:21:aa:4d:
f7:28:a2:80:7f:2f:cd:3e:ad:06:9b:df:ee:1b:74:
0c:f1:36:e8:93:5e:ea:d3:fc:49:87:0f:f7:9b:cd:
0c:ea:e0:bf:b9:d8:40:03:d2:a8:83:27:99:d5:c2:
09:d8:2c:dc:06:54:a9:eb:e4:e5:78:d2:b8:98:d2:
32:19:af:16:32:56:52:18:7e:83:f1:62:5c:75:33:
ba:72:a0:b9:3e:8a:fb:28:37:71:91:ff:7f:70:42:
20:5a:f5:bd:e4:2b:d6:fe:9e:8b:4c:7d:7d:47:30:
3f:6a:5e:18:e5:3a:a6:bb:0c:4d:73:74:1b:f0:dd:
2a:d6:96:93:23:2a:2a:81:2c:de:04:26:65:f1:82:
6b:06:7e:f5:2d:b7:bb:a9:8f:4b:41:54:6b:96:fd:
16:77:8d:e5:63:81:ee:fa:76:be:ea:e2:50:1e:02:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9D:77:B3:6B:E0:9C:47:9C:A6:59:D2:0C:EE:F7:04:3F:0A:A2:15
X509v3 Authority Key Identifier:
keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:95:a2:ff:26:a9:d7:dd:42:9f:ce:7f:5e:65:48:39:99:ce:
fd:96:fe:7b:cd:96:4e:ae:81:73:0f:4b:0a:3c:d0:47:f4:5a:
8d:0f:f7:6b:42:b1:55:f0:04:0e:71:6f:e1:58:78:24:c4:32:
c8:39:1d:97:01:8c:33:6e:84:1b:4c:bb:a4:28:19:8a:65:7e:
07:18:9c:95:ec:e6:38:62:20:7c:ca:f6:d9:a5:18:01:93:1e:
17:45:4a:4a:af:02:73:f8:4d:c8:c1:41:7b:cc:32:aa:90:39:
c0:fa:86:98:6a:9c:3c:5c:9a:9a:48:74:6e:40:c3:10:1e:fc:
1b:75:b9:93:fc:9d:33:7b:cd:7b:c9:a0:3c:68:44:e3:cb:7e:
46:55:c9:e6:b6:84:b7:42:7b:0d:aa:32:bf:6f:64:03:2c:b6:
1e:36:39:ec:f1:45:4e:17:3b:87:99:8e:c1:ce:7e:23:37:d6:
78:d5:92:41:60:79:bb:0b:81:82:8c:6a:8a:9d:44:2c:31:99:
14:15:02:3a:c1:2a:a3:07:55:34:c5:d4:00:e2:87:a1:42:9a:
6f:08:f3:34:fe:01:cd:f5:56:22:63:ca:f5:10:6d:8e:d4:41:
96:79:67:cf:fc:a3:99:1a:11:d2:d3:16:ea:99:2b:21:32:4b:
7c:24:eb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:40:49 2026 by rpki-client