Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier: VvedUDpY3ZF58CSbpZ5XvUpAPrcjVw41l3JgQ0Xu7cg=
Subject key identifier: 00:82:F5:25:5C:6B:CD:07:5E:AC:D2:9B:28:39:33:D9:C4:70:A7:16
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 019F8FEC0E140CB21A2B0C72F243C17F2235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number: 1021
Signing time: Thu 23 Jul 2026 17:00:39 +0000
Manifest this update: Thu 23 Jul 2026 17:00:39 +0000
Manifest next update: Fri 24 Jul 2026 17:00:39 +0000
Files and hashes: 1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: JCz8TlHmmB+tgFvDrOqaXDgTGZedsChCZgMLpArGfgU=)
2: v4jlzQPH9B19BgnawF1RP-229sY.roa (hash: b4H5XHOj6d5z6OnvgwQoCpKZ6CNBYc2Lt4zW82aMu4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:0e:14:0c:b2:1a:2b:0c:72:f2:43:c1:7f:22:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Jul 23 17:00:39 2026 GMT
Not After : Jul 24 17:00:39 2026 GMT
Subject: CN=0082f5255c6bcd075eacd29b283933d9c470a716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:6c:0e:f9:15:e0:a9:88:73:51:94:fa:72:
af:c1:11:01:a6:78:f3:19:20:84:e7:a6:93:04:85:
a7:54:6a:2e:e0:f0:1e:af:d8:4e:8c:51:fe:70:89:
7d:04:07:b6:ea:db:dd:4a:09:43:b6:7b:a7:09:5a:
7e:e0:ef:b4:ae:b2:28:b6:1b:78:6c:af:20:ed:86:
41:bd:81:a5:cd:00:aa:6b:8d:56:86:c7:c5:69:70:
13:2e:c3:7e:06:f7:dc:11:3d:c2:fa:dd:6a:bc:6a:
08:58:3f:a2:ac:29:32:d4:03:d9:a5:d7:2f:22:1c:
2c:26:a0:8f:ba:8b:25:5d:a1:91:57:d4:3e:3a:7d:
ce:5f:f3:73:8f:b8:c3:c1:d9:f1:cf:d6:84:6d:09:
82:5d:55:69:32:ea:a0:a4:3c:1b:31:ef:96:02:a4:
e4:85:26:d1:5c:29:77:af:b0:e3:f1:8b:3e:4c:a1:
90:75:0b:6d:4f:c8:2e:ca:9b:67:8d:58:95:6e:73:
0d:01:0b:a4:79:d5:0d:e6:66:21:14:74:ee:1a:33:
b3:44:71:bf:b5:c4:f6:66:ac:ed:f2:96:5d:b6:fd:
3d:6a:07:7d:1c:30:0c:e9:ef:13:50:ea:5b:c8:57:
b1:03:a1:c7:bc:4c:bb:38:d3:2c:34:40:db:04:80:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:82:F5:25:5C:6B:CD:07:5E:AC:D2:9B:28:39:33:D9:C4:70:A7:16
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:51:09:09:e4:c6:0f:ad:16:8a:2e:d5:4a:31:cd:45:5a:b6:
6f:35:e1:80:e9:56:0b:d2:0d:20:1a:81:6c:0a:45:f7:46:9c:
7b:28:03:95:9e:a9:ea:00:74:96:cf:d2:90:de:5b:2c:49:cd:
6d:25:a9:b6:2c:06:d1:05:42:bf:0b:e2:1d:5e:da:a8:10:54:
be:d1:24:0d:79:68:85:e7:b6:9d:d4:ba:88:e9:61:cc:f1:fd:
ea:e4:97:ca:c7:c8:ed:b9:48:0a:4f:6e:c4:e8:ee:c5:b0:40:
f6:8c:b9:87:07:39:a0:75:ef:5a:64:1f:76:fb:c1:5d:eb:eb:
19:c1:b3:0a:b6:53:1d:2a:00:28:48:0d:d3:71:12:ee:3b:76:
ab:71:4f:d7:40:7f:63:e1:d8:40:53:ad:37:b1:2f:d4:30:2a:
87:2a:82:dc:44:35:08:fa:dc:25:f1:a6:f2:0f:6f:3b:56:28:
b0:5f:a7:a7:4a:82:42:03:ea:7c:49:df:cb:02:ba:5c:bd:6f:
b3:2d:c2:2b:b0:ef:2a:db:ad:3c:c8:57:9e:29:1d:a1:6d:6d:
5c:47:9e:aa:c3:52:05:4d:d1:7c:50:27:ef:52:dd:9a:91:7b:
ee:a8:7f:c4:9e:fd:72:87:fe:a5:7b:cf:19:98:9c:0a:b1:c2:
bc:c2:4c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:14 2026 by rpki-client