Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: kKUm+OmeLRrBDSxdDsCY2ru/rul3mEsb9c8dq6x9XKE=
Subject key identifier: 43:C7:E1:DA:4F:F3:D4:5F:FB:76:75:95:52:EE:A6:3A:0F:6E:FF:3A
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 019F9135F25F925F106216523FAFFE755C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0D44
Signing time: Thu 23 Jul 2026 23:00:59 +0000
Manifest this update: Thu 23 Jul 2026 23:00:59 +0000
Manifest next update: Fri 24 Jul 2026 23:00:59 +0000
Files and hashes: 1: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: U3MTI+Y2aOqYf56AFRZMX58Qn5IuY3FdlVPehCSi0Dc=)
2: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (hash: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:f2:5f:92:5f:10:62:16:52:3f:af:fe:75:5c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Jul 23 23:00:59 2026 GMT
Not After : Jul 24 23:00:59 2026 GMT
Subject: CN=43c7e1da4ff3d45ffb76759552eea63a0f6eff3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:41:34:a6:cf:84:45:d5:7e:ce:44:68:36:
02:a6:b8:62:f5:b7:a4:ed:62:a9:30:bd:da:60:d8:
98:93:29:68:c2:aa:5b:e1:b4:db:aa:71:0b:89:8c:
c5:76:27:94:95:16:94:02:d7:77:19:45:55:a2:fd:
a8:2c:31:53:e6:0e:0b:a0:8f:f3:30:39:d4:f9:6c:
ff:8e:cb:b3:7e:b7:eb:ec:29:35:67:6a:bd:97:99:
71:15:bf:df:a8:47:53:68:e7:f9:cb:20:eb:fe:f7:
5c:94:75:e4:a5:aa:c9:0a:f4:dc:59:be:84:4d:69:
4b:52:e3:75:cf:7c:58:cb:e4:2c:ad:76:66:3e:cd:
09:82:da:3a:d8:ef:40:a1:c2:b1:12:81:42:29:36:
5a:80:6a:ff:a0:1e:2e:28:89:3b:6e:74:c5:f4:91:
e0:a9:70:97:8e:70:b1:7c:55:c0:92:03:84:ad:81:
34:b4:9b:75:a1:5b:e2:c6:18:15:52:ca:a1:2d:c6:
fb:74:8d:ec:f7:84:ec:4f:fc:c0:09:7f:1e:f2:8d:
fb:fe:53:19:f7:64:c8:48:98:46:aa:9b:72:b8:d6:
fd:8f:72:0e:98:31:cd:b0:da:b7:8e:3e:55:78:13:
63:d1:b0:95:61:9e:a9:92:28:2e:dc:2b:85:d9:16:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C7:E1:DA:4F:F3:D4:5F:FB:76:75:95:52:EE:A6:3A:0F:6E:FF:3A
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2e:2d:f6:5c:3d:4b:d1:cb:04:cd:e8:4d:4c:06:00:28:de:
21:14:59:42:64:b6:14:5c:9e:77:00:07:a8:c0:fb:ae:3c:c0:
22:a8:18:ae:f7:ec:e2:d6:1c:ad:18:a1:42:f5:ab:78:03:df:
08:56:d2:40:8c:4b:29:47:c3:32:2c:21:36:f9:87:f2:83:11:
65:17:39:37:f1:d2:79:40:95:2a:5a:17:62:fa:97:b7:5d:21:
ff:81:c8:c0:18:a1:45:65:4d:b1:02:74:c7:5b:56:85:33:a3:
7a:8c:fb:ce:c2:de:7e:86:c2:3a:c1:c3:ca:ef:30:93:a4:2f:
88:7a:b5:5f:82:28:11:dc:e0:7f:67:49:a0:14:30:f0:67:db:
58:e4:3e:f3:62:0f:da:de:b0:aa:04:07:51:af:71:f2:67:49:
85:69:f4:82:12:21:e2:94:aa:75:ac:c3:44:e3:b6:b5:57:e5:
88:90:10:2f:84:d7:26:71:5c:9f:58:15:f7:e6:0a:4d:cd:e3:
8a:44:e2:87:f3:d2:21:91:09:1c:06:92:a0:b8:99:8a:9f:1d:
a5:5d:8c:e5:79:b3:6f:8f:b1:8c:37:55:5c:27:37:7c:43:ce:
c4:63:99:80:7a:6c:8c:7b:32:d6:3f:6b:96:a0:58:b9:0c:34:
c5:e2:cb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:40 2026 by rpki-client