Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: 1vcVIrL3O3Hg+WW6JfGUAftRlOq2rWGdGGdx+YxmFDU=
Subject key identifier: 98:4D:AF:8F:4B:4D:E3:86:C4:CE:A9:46:6B:D0:62:8B:47:F4:EF:CD
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 019F93FF7BA038DBA5295D90C63C51BC0B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 03C1
Signing time: Fri 24 Jul 2026 12:00:21 +0000
Manifest this update: Fri 24 Jul 2026 12:00:21 +0000
Manifest next update: Sat 25 Jul 2026 12:00:21 +0000
Files and hashes: 1: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: Fq2B/Fz00fANv/9pgATMIgDyPXxUsr/Lo4Cet+1Y+0k=)
2: k9k26h_wk2KwXBbexASmBckIdio.roa (hash: IkgLudWAy48LS7n3a0wG6CHVGFDidThlfHrJKCCT1wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:7b:a0:38:db:a5:29:5d:90:c6:3c:51:bc:0b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Jul 24 12:00:21 2026 GMT
Not After : Jul 25 12:00:21 2026 GMT
Subject: CN=984daf8f4b4de386c4cea9466bd0628b47f4efcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:41:2e:c0:46:0a:f5:0c:95:8d:eb:54:2c:
58:13:57:59:4c:65:33:a6:eb:df:3d:18:8c:1d:b4:
5b:c6:df:bf:5b:3b:6f:90:2e:23:d2:6f:10:cb:b3:
e6:de:aa:97:96:2a:b9:3b:33:ba:7b:1e:65:ec:73:
f1:ec:ee:26:e6:ed:fe:e4:a9:12:77:8f:b9:9c:88:
74:c6:2a:da:e2:fa:de:af:53:75:9e:ef:52:d5:08:
0c:79:22:2c:34:34:e2:39:6d:14:0a:04:79:c2:b6:
2d:98:e4:3b:84:53:c4:63:4a:cd:f8:7b:c5:e3:bc:
94:e3:18:71:fc:b8:01:4f:ab:91:cb:b3:dc:fe:86:
6d:1c:30:7e:87:e1:2f:7e:4b:95:75:22:40:8c:b8:
49:b0:98:d9:ca:39:e0:55:94:2e:e4:90:63:44:31:
d4:42:92:bb:51:e9:4b:46:fb:54:b1:54:c9:4e:21:
97:04:b9:f0:53:3a:f7:83:ac:9a:05:88:dc:22:cc:
d5:1d:3b:48:ea:9f:04:44:21:51:fa:78:80:c6:0e:
d4:2f:51:bd:9e:c4:86:f8:79:7f:0b:87:52:b3:0c:
e0:cf:a2:28:77:df:13:9d:25:7f:e6:c2:25:08:3f:
2a:2e:0a:9f:6b:32:e2:bc:8b:9f:4e:92:14:99:d6:
ac:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4D:AF:8F:4B:4D:E3:86:C4:CE:A9:46:6B:D0:62:8B:47:F4:EF:CD
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a9:c0:1f:80:e3:74:10:e8:ea:76:ff:f8:c8:b5:fa:e1:0f:
08:2f:14:6c:29:56:4a:ab:83:48:4d:ba:cb:3b:7c:ae:1f:98:
5f:83:fa:2e:ef:02:63:aa:4c:0f:0f:1f:b3:0d:06:25:d3:6e:
0a:78:ea:44:7e:b4:ec:e8:7e:82:bf:37:3b:9d:dd:c1:31:b7:
ff:51:25:6c:c8:1b:0c:8b:c2:9d:a9:e4:bc:6f:31:31:e3:49:
fc:a3:d5:0c:66:7d:12:35:e7:6c:4a:5f:d1:e2:3d:a1:3b:eb:
d3:67:9f:46:f9:0f:29:3b:de:33:5d:04:b2:8a:38:69:61:c8:
2d:4b:2f:d6:cb:62:36:31:ee:06:45:d4:f3:ce:fe:64:35:5f:
54:87:26:b6:ba:94:83:f4:83:3a:0a:1c:fd:cd:16:93:41:b7:
1c:73:bb:bd:07:84:fe:bb:5d:2f:bf:e3:5b:bb:fc:af:79:95:
2d:b5:2d:5a:11:9e:4b:86:8d:eb:5e:94:ee:a8:72:b0:21:27:
ce:63:9e:4b:ed:39:a0:5f:c0:d4:a5:43:af:5a:60:f5:64:6f:
c4:dc:81:ab:54:72:94:5c:c8:f7:b1:95:2e:4e:22:b2:63:dd:
44:19:54:c2:6a:bf:11:34:d0:c0:ef:f1:9b:96:cc:1b:6a:c4:
32:ad:30:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:14 2026 by rpki-client