Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: 0w2e68DywWhKsa85N5ukH1ISxFn4mAb6BteXby8P+kw=
Subject key identifier: 6E:CC:1E:5F:63:19:05:F7:1E:20:7B:84:A8:1D:4F:67:46:0F:F8:B4
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 019F916DA1D8B73A4F9FD5EB6A14520669DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 10F7
Signing time: Fri 24 Jul 2026 00:01:48 +0000
Manifest this update: Fri 24 Jul 2026 00:01:48 +0000
Manifest next update: Sat 25 Jul 2026 00:01:48 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: ablXbOZwf6dAcGHtD0eTf+6XzsrqtI0t7ZstomR2300=)
2: TmN-dr45oTfR8pksVoCNgmVOGLU.roa (hash: vnALMBgUiF5Ge/N8pDhGThN8hB7OAP8KLzkie3WI7N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:a1:d8:b7:3a:4f:9f:d5:eb:6a:14:52:06:69:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Jul 24 00:01:48 2026 GMT
Not After : Jul 25 00:01:48 2026 GMT
Subject: CN=6ecc1e5f631905f71e207b84a81d4f67460ff8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:5a:19:1f:86:dd:c6:7e:85:c0:2e:2d:78:
6c:c1:b3:fe:51:bc:97:6f:cb:3f:f8:fb:3e:37:ab:
5e:b0:f7:38:c2:35:45:f2:d2:73:90:ca:47:6b:82:
48:4f:e5:2e:5e:90:11:e9:f4:67:bf:fc:5a:87:29:
81:ba:e4:7e:53:93:67:67:0c:2e:77:69:6d:1b:62:
2d:6b:7c:fc:37:ee:d9:5f:e7:4d:51:d4:21:f7:3f:
58:95:f2:01:7d:3f:02:c1:da:e5:5d:a8:50:9b:18:
1a:f1:4f:6a:ba:7b:c2:51:b0:6b:73:f7:f7:c8:12:
ae:1d:e5:41:41:4a:56:55:53:72:35:ca:cd:bd:67:
8f:de:6f:e0:0e:dd:17:7c:04:95:28:be:d3:5a:b8:
16:f7:34:a0:94:2a:9a:ee:a3:24:26:1f:fe:ae:62:
4c:d1:d0:72:8a:c6:91:e5:29:d4:39:2c:c0:d9:b8:
fd:fb:44:27:3a:14:bf:f1:94:e5:c1:27:72:be:30:
17:2c:2f:e8:64:1f:34:22:14:79:80:8e:26:0b:47:
a6:7d:9e:27:96:0a:28:41:0c:a5:17:51:4a:94:03:
7e:4d:75:5d:50:a4:3f:e4:78:b0:f7:0a:52:ca:da:
57:53:6e:76:ae:7d:0e:e4:02:6b:a3:77:43:2d:ae:
52:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CC:1E:5F:63:19:05:F7:1E:20:7B:84:A8:1D:4F:67:46:0F:F8:B4
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:94:66:98:e1:15:63:de:3f:20:99:a3:e2:c2:c2:ce:57:68:
4e:e1:51:a9:76:fa:da:ae:6a:4f:1f:8c:f8:01:da:1b:54:64:
db:5e:87:12:d0:01:98:5e:fc:6d:74:da:82:ed:c8:87:c9:82:
7b:76:13:5f:96:a0:1c:6b:e2:b9:36:fd:a2:19:a5:65:67:63:
5a:d4:e9:10:69:f9:79:1e:59:ff:fe:44:d3:5a:0f:91:81:0c:
4b:e6:2c:8d:71:2e:47:6c:eb:8f:78:c5:09:22:db:6e:c0:0f:
5c:f0:7b:c1:9d:97:66:a4:48:36:4c:dc:c3:8c:2c:33:76:70:
55:4d:de:3a:d7:7d:f5:fa:65:86:dd:5b:31:2f:95:db:4f:85:
19:33:0c:b8:c9:7b:71:2b:58:4f:6b:62:69:ed:ee:c1:9a:1f:
dc:56:1d:41:2d:0b:5c:30:73:61:ea:65:e0:db:00:b7:af:81:
c1:c3:b6:15:26:55:3a:93:2f:f1:7a:d7:48:19:6e:38:d7:45:
07:dd:ff:4e:7d:3a:e6:fe:50:47:f8:6b:93:b5:45:61:06:01:
e1:59:13:74:c4:bf:21:85:91:1e:66:ba:28:94:4a:90:51:7e:
e5:ea:5f:6c:96:0f:11:36:1f:42:fc:11:bb:91:51:c4:a8:2b:
41:8a:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:42 2026 by rpki-client