Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier: VqiE2kPgYe/gZSpi5ObFc9D6gfSrmJ+KxIj2NoCM5fY=
Subject key identifier: BB:CD:6F:BF:CC:9C:39:9B:68:D5:29:D6:07:28:74:D1:F7:ED:68:EA
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 019F91DAFF3DD93CA1EF25CB7452612E1CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number: 17A7
Signing time: Fri 24 Jul 2026 02:01:16 +0000
Manifest this update: Fri 24 Jul 2026 02:01:16 +0000
Manifest next update: Sat 25 Jul 2026 02:01:16 +0000
Files and hashes: 1: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: cof0TW8V6q4RQzMRgyxT2CPrefEKpHkSxWwdmYbu6bs=)
2: Rbo6oxAqDb8H6ee1Bcd6zmIvanM.roa (hash: hbS17xb15eoENiFqWkrh4Rg5HMl3hCu9i3t7Tn7RjEU=)
3: WaYI_MWy3hRJbRYG3PdN8Y_RMYA.roa (hash: THX2fKKKnX9yBs9zY/imZHrBKciUjAfyILqIM2Dr8Yo=)
4: WwkncKL5VRC13xPV2ZE_H9se7W8.roa (hash: BknD8zU7XCC2nFHasTpI89u/51fYeUQLrTGPpyLxToE=)
5: ci1GvowS4KwUM3G8aFjlO2irLAA.roa (hash: m7TYB3sPDSUmcqNDhcvm3uaAFsWsaBEs5gP6w8LP+l0=)
6: z1mVxakT6RmXHyYd9lxAJiYvjwY.roa (hash: 45rutSVaZllg9+fPFLxe5PXqfATwp8srKfDgKgeoioY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:ff:3d:d9:3c:a1:ef:25:cb:74:52:61:2e:1c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Jul 24 02:01:16 2026 GMT
Not After : Jul 25 02:01:16 2026 GMT
Subject: CN=bbcd6fbfcc9c399b68d529d6072874d1f7ed68ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:43:1f:30:0d:2b:c3:6e:e1:a5:28:5c:f9:
f8:25:2f:42:e9:41:ed:92:7e:2e:d2:ed:eb:e3:7c:
5e:65:3d:c9:56:2d:de:38:b9:25:76:d8:97:5a:ca:
ba:04:ee:1c:cc:0d:30:50:c2:c7:68:5a:d6:91:06:
4f:58:97:4e:cd:cb:13:fa:1c:3d:a5:25:71:0e:ca:
19:88:70:b3:57:fd:ab:3f:91:e1:30:66:62:f3:01:
b0:70:01:07:a7:88:1d:91:5f:09:6e:bf:c0:1e:2d:
6a:d2:5b:e3:a4:7e:2e:d4:2d:24:d9:50:b9:ed:77:
3b:65:90:b0:18:28:16:e6:b8:5a:7b:45:b5:ad:b8:
5a:24:1f:b6:f7:88:61:e3:4e:17:4c:ec:9d:71:92:
ed:68:6f:78:a9:14:e5:99:21:ea:ed:31:ab:65:f9:
80:45:c2:32:0d:c7:3f:68:ec:0d:70:16:07:4c:58:
54:53:87:71:db:bc:c8:9b:80:68:71:74:ce:98:e8:
16:6a:6a:df:40:08:33:d4:5d:c6:63:a4:a8:d5:48:
2b:f5:a8:13:49:e7:11:53:24:6f:09:c9:c9:fb:9e:
62:91:7b:3d:91:44:a9:8b:3b:d1:d8:52:a2:03:66:
f6:d7:e7:e5:c0:e5:20:55:17:d1:2c:4c:62:bb:45:
35:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CD:6F:BF:CC:9C:39:9B:68:D5:29:D6:07:28:74:D1:F7:ED:68:EA
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:41:28:e1:2d:0d:34:7a:32:72:1a:1d:32:1e:cc:4d:20:d9:
4d:d1:3f:58:c1:fe:37:66:c5:fe:0d:fa:e0:92:af:98:f1:e0:
d3:36:10:2a:f4:67:04:68:5c:b3:5a:bb:63:aa:06:74:06:38:
7d:2e:e9:5b:86:bb:d5:9c:32:32:d4:63:ca:08:4e:0d:66:71:
0a:51:74:79:6f:8f:f7:29:1b:76:6d:a2:10:7a:8f:79:49:7b:
6d:c0:7b:f2:35:b0:46:5a:5e:4d:28:11:72:27:4d:50:7f:d5:
c5:3e:f2:65:e4:62:c2:2b:38:9b:e3:cd:69:e1:4e:f1:88:c1:
3a:7f:9d:48:b6:dd:7c:19:bf:cf:6d:1d:54:bc:89:90:06:8b:
d2:ab:55:53:d8:19:bd:b6:c2:da:f3:44:ff:2e:4e:ad:1e:7f:
84:96:0a:ce:e7:e7:96:bc:18:f1:fa:88:f8:6e:9b:68:d2:ae:
90:33:42:0f:64:60:d3:6f:e9:82:38:bc:d4:50:3e:46:84:da:
5a:1e:b1:56:37:8b:f2:e8:f7:86:89:37:58:4f:b0:2f:8c:f5:
91:15:4f:e3:09:02:36:e5:71:5a:f3:62:1d:18:ed:1a:31:69:
f9:34:89:24:bd:30:6e:9c:66:0c:c7:88:68:a4:0d:06:8f:db:
04:e1:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:28 2026 by rpki-client