Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
File: 3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft (raw, json)
Hash identifier: cBQgneLgXaJBfn3I8outbO844lN+HCZ7h7spKlVraDY=
Subject key identifier: F1:BA:6E:66:C4:0E:E5:B6:CD:60:E8:5E:45:ED:01:61:87:88:ED:C9
Authority key identifier: DD:6C:CD:C5:78:E5:B7:CC:97:5E:9F:53:8E:B9:41:F1:92:AD:42:8B
Certificate issuer: /CN=dd6ccdc578e5b7cc975e9f538eb941f192ad428b
Certificate serial: 019F92B6117B822CA7BCC462045BD14FA814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WzNxXjlt8yXXp9TjrlB8ZKtQos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
Manifest number: FB
Signing time: Fri 24 Jul 2026 06:00:33 +0000
Manifest this update: Fri 24 Jul 2026 06:00:33 +0000
Manifest next update: Sat 25 Jul 2026 06:00:33 +0000
Files and hashes: 1: 3WzNxXjlt8yXXp9TjrlB8ZKtQos.crl (hash: 2ShU1LZwDFQ58qhDgjKIcZ5T2Dg6XTfcQJ0cKOL4t+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WzNxXjlt8yXXp9TjrlB8ZKtQos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:11:7b:82:2c:a7:bc:c4:62:04:5b:d1:4f:a8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6ccdc578e5b7cc975e9f538eb941f192ad428b
Validity
Not Before: Jul 24 06:00:33 2026 GMT
Not After : Jul 25 06:00:33 2026 GMT
Subject: CN=f1ba6e66c40ee5b6cd60e85e45ed01618788edc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:80:88:76:2e:c0:39:01:f7:89:ac:bc:8a:
9b:62:5e:75:5c:83:d6:5f:87:f2:e7:a1:3f:09:c7:
43:3e:dd:6e:d5:12:fd:13:7d:5e:a0:a7:3f:97:88:
5c:c4:54:b8:46:e7:d0:9d:18:cc:f7:45:a7:35:0d:
41:4c:ff:3f:53:1a:d7:d1:0a:d0:76:6a:d4:0f:fd:
38:b2:20:9b:f8:7c:fc:f4:6d:37:6d:f0:30:fe:78:
50:45:a0:eb:38:80:5c:7b:5f:22:ce:56:ae:b5:d5:
12:99:db:fa:33:11:55:10:48:eb:45:97:59:72:57:
06:85:28:5f:83:ab:7a:99:41:97:43:90:bd:9a:e9:
74:ea:20:db:f2:eb:e5:f1:de:51:53:cb:53:64:06:
5d:ea:c6:9c:50:28:f0:c5:18:35:f9:54:b3:40:05:
a3:f4:88:c3:ed:b0:46:a6:38:20:13:af:41:50:0c:
22:1f:3e:40:42:31:fb:21:6a:53:ff:74:23:bc:31:
77:b4:13:dd:dd:39:b1:2a:f0:8a:11:70:13:af:16:
19:53:6c:8f:49:67:f8:40:fe:b7:7f:12:b8:8d:09:
3d:38:5e:23:dc:7e:58:a2:6b:a3:79:44:28:ec:5e:
10:25:5a:c1:67:4c:2a:31:de:b8:7c:6f:15:76:b0:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BA:6E:66:C4:0E:E5:B6:CD:60:E8:5E:45:ED:01:61:87:88:ED:C9
X509v3 Authority Key Identifier:
keyid:DD:6C:CD:C5:78:E5:B7:CC:97:5E:9F:53:8E:B9:41:F1:92:AD:42:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WzNxXjlt8yXXp9TjrlB8ZKtQos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cc:d2:25:d5:55:54:fa:c1:7f:5e:f1:bb:2d:6a:21:50:1f:
b3:b2:4e:f6:30:3d:3f:1e:ca:70:f8:71:30:4d:d4:26:4a:b5:
b4:9f:12:98:b8:27:2c:c5:0e:7e:84:16:4d:4d:b5:0c:15:3d:
cd:58:db:01:85:98:7f:bb:ea:11:77:94:4e:5b:cb:ad:9e:7a:
ea:40:66:2c:1c:0d:8c:2e:8a:91:d2:46:27:e2:28:4a:ed:58:
10:46:2d:e0:90:04:60:28:e3:0b:13:ff:bc:21:68:10:90:76:
af:b7:66:1a:e1:2d:e2:47:96:89:14:79:01:ae:97:80:50:ba:
42:aa:cd:13:da:58:2c:d0:c6:c1:87:e7:50:a3:fd:78:46:01:
7d:06:c2:66:69:37:4e:69:36:83:34:4f:a6:72:d5:70:5f:de:
41:55:b0:76:8f:59:a9:db:48:e4:ce:d5:01:1f:b8:9b:c1:fe:
ad:3c:aa:d9:35:c3:ab:5c:b0:87:15:a9:d8:b3:a2:48:d6:11:
db:80:66:07:d7:43:d8:55:b5:39:17:5a:71:db:83:b8:d2:be:
5e:02:7f:54:b9:e2:cf:bd:f3:71:0f:3f:ba:9c:63:10:de:1d:
58:58:b9:96:1f:31:01:e7:d6:6c:c7:27:91:9a:55:38:83:06:
5c:09:ca:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:29:52 2026 by rpki-client