Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: M7SQjqT+BQE8cE6D/AXXznLPilt3P+stMGNxr5CZnBw=
Subject key identifier: 2F:9F:06:A0:4A:B6:B3:92:93:84:81:54:52:13:ED:46:4C:D9:C1:67
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 019F905A3C72FAFDDAEBDDDC6B5ABD36BF6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 17D3
Signing time: Thu 23 Jul 2026 19:01:00 +0000
Manifest this update: Thu 23 Jul 2026 19:01:00 +0000
Manifest next update: Fri 24 Jul 2026 19:01:00 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: VsGMRiEctzLIDTcBKmrcTltfm3P2uGjDaEwyOxS8+2E=)
2: itoTic7G_-G7jco2XW4Z1NEcbCw.roa (hash: +uznw2maAhBkp9yoIBUiVjV+pSA2CpeiVnSVCi83O3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:3c:72:fa:fd:da:eb:dd:dc:6b:5a:bd:36:bf:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Jul 23 19:01:00 2026 GMT
Not After : Jul 24 19:01:00 2026 GMT
Subject: CN=2f9f06a04ab6b392938481545213ed464cd9c167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:af:a6:cb:7f:a3:82:ab:6a:b0:2c:56:8b:30:
ce:92:fa:6b:6f:ff:e9:06:e1:d9:23:c0:a3:5f:38:
0e:c1:49:09:1d:f2:57:52:bf:05:b9:c3:b8:4a:ee:
29:17:0a:37:d1:74:7c:19:49:34:ca:0b:67:2d:34:
28:06:1d:ff:78:e8:af:2b:a6:5e:fd:23:56:35:cc:
25:20:f5:8c:80:58:f9:6e:29:c2:9e:45:b4:54:a6:
41:ab:72:ba:d7:df:cc:3e:c5:77:2f:68:30:f1:49:
cc:db:bc:f4:fe:98:26:00:41:9e:ce:68:5b:61:c4:
fb:ed:64:5b:5c:e5:16:12:e9:b6:8f:74:47:d9:0d:
32:4a:ff:34:35:37:8b:07:f0:8b:5b:51:55:eb:41:
89:27:d3:4b:73:da:89:e6:ff:6f:c2:7d:02:61:e0:
e6:4e:c6:4b:a4:04:42:d3:7e:f9:ef:8b:b7:12:34:
e5:d4:48:7e:9e:2c:2e:bc:e6:ef:0f:35:d0:6f:ff:
bb:c9:60:32:94:25:98:2f:87:b5:0e:8f:0f:29:de:
20:4a:0e:86:d4:78:1b:e8:38:b9:fa:1b:f0:4a:3c:
6d:3b:3e:5d:84:3d:c8:44:8f:43:39:e5:ae:1e:b9:
6d:89:8b:ef:d2:3a:da:8a:bc:25:2d:49:ac:ed:09:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9F:06:A0:4A:B6:B3:92:93:84:81:54:52:13:ED:46:4C:D9:C1:67
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ef:e4:32:9e:ca:ab:08:16:5c:47:80:ae:38:43:1e:1f:cc:
62:43:23:39:28:86:88:80:de:ab:61:e8:37:c4:cb:5b:44:f1:
ba:88:b3:57:2a:6d:1d:97:7e:10:cf:f3:34:c0:4e:ee:47:ac:
b5:cb:c6:d4:09:c3:b2:95:de:c8:fa:01:5c:55:7d:06:61:de:
06:b9:ea:2a:07:58:82:a6:1d:d4:42:81:34:17:08:58:9f:26:
7d:aa:c1:92:4c:a6:f1:66:42:1c:4c:86:bb:30:7e:b7:18:f9:
21:d5:89:ac:bb:97:06:63:be:84:02:e5:29:b0:46:7c:20:a6:
bb:7d:53:77:1d:6c:a3:e2:45:37:39:d0:75:dd:f0:78:bc:d2:
71:5f:63:9f:14:c7:ea:cc:3a:f8:57:cb:c5:99:52:c0:f7:a2:
f9:ed:b1:b3:de:ed:7f:af:f3:1f:56:d6:bb:82:57:b7:59:48:
5c:ef:21:07:03:7e:2f:64:9b:e0:d8:2a:26:c6:59:05:92:42:
d7:eb:80:9f:2c:82:76:e9:69:b5:15:59:ca:df:3a:00:d8:60:
bf:ec:63:da:82:26:8b:6f:12:39:5d:8c:63:8a:59:71:00:91:
55:bd:61:0d:f1:bd:0e:ca:7a:5a:bd:cf:c3:e9:bb:4c:66:a8:
48:99:0c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:10 2026 by rpki-client