
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
File: 3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft (raw, json)
Hash identifier: PvDeLbyTuSq1+vrylMLWT+TBuJQEX5Hxime4cSXEsg8=
Subject key identifier: 14:12:C0:DB:14:D3:F1:58:55:14:25:8E:4E:A9:83:74:9D:FE:42:CD
Authority key identifier: DD:64:C9:C6:CE:8A:7B:7E:95:50:84:75:5E:85:3D:4D:6A:A1:80:C4
Certificate issuer: /CN=dd64c9c6ce8a7b7e955084755e853d4d6aa180c4
Certificate serial: 019F8E6B750E358707A6263C13009221DE89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
Manifest number: BF
Signing time: Thu 23 Jul 2026 10:00:34 +0000
Manifest this update: Thu 23 Jul 2026 10:00:34 +0000
Manifest next update: Fri 24 Jul 2026 10:00:34 +0000
Files and hashes: 1: 3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl (hash: yXiqT0WhuS/EYeYyNVNvsuKrxgZyx9XEsPAFfZ4gsp8=)
2: uVFPp5kgmxZiZ6LoftbDP414XHc.asa (hash: LB9vzgvEJxcEb1WaanSRFRa5GPgjhrGmFrkvoXrEy9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:75:0e:35:87:07:a6:26:3c:13:00:92:21:de:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64c9c6ce8a7b7e955084755e853d4d6aa180c4
Validity
Not Before: Jul 23 10:00:34 2026 GMT
Not After : Jul 24 10:00:34 2026 GMT
Subject: CN=1412c0db14d3f1585514258e4ea983749dfe42cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:3c:b5:e0:53:a4:2b:39:04:37:5f:c2:44:
a6:de:be:65:2c:32:6b:b7:ba:60:8e:df:ed:cb:3b:
85:15:96:80:f4:e7:a5:f5:6f:1c:15:62:68:e3:01:
29:d1:75:ce:22:fd:98:fe:2a:80:b7:de:82:b7:18:
bb:36:c7:e2:23:98:76:fb:bb:b5:82:82:8e:82:23:
a2:f5:9b:17:84:f0:e4:68:84:28:1d:36:f0:d6:9a:
88:ee:9e:49:d7:55:43:16:45:da:8b:0c:f6:75:ba:
d2:83:9d:7d:1f:92:16:ea:e4:55:d7:10:97:53:ea:
07:50:c0:56:96:78:bf:5c:06:83:87:d8:16:9d:c2:
38:2a:49:eb:68:a1:a7:0a:36:17:25:c7:8d:33:0d:
57:66:a9:93:64:00:8a:82:e3:7e:93:00:af:d9:2e:
53:cc:da:15:95:ca:e4:e6:cc:e5:36:e0:91:fb:1c:
1b:d1:a9:eb:21:9b:db:f6:44:a5:9d:b4:8a:bc:78:
f9:38:df:25:98:84:29:bd:5f:de:87:1c:57:0b:af:
00:7b:d2:7c:54:ed:26:0b:8b:0b:7c:d2:4b:1d:df:
5a:84:85:dd:98:cf:26:e4:78:7b:7f:8f:45:af:5e:
f1:0b:40:3f:d4:3b:87:22:f6:4b:42:6d:40:7c:2d:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:12:C0:DB:14:D3:F1:58:55:14:25:8E:4E:A9:83:74:9D:FE:42:CD
X509v3 Authority Key Identifier:
keyid:DD:64:C9:C6:CE:8A:7B:7E:95:50:84:75:5E:85:3D:4D:6A:A1:80:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:20:14:4c:43:22:45:e9:9c:aa:72:f1:4a:f2:44:a8:dd:e9:
71:4b:6a:b5:00:ff:94:92:1e:4b:78:72:4b:fa:92:6d:99:40:
7f:cf:c8:ec:ac:38:74:75:31:b2:f7:c2:d0:25:3c:b6:71:01:
2e:fa:43:3a:8c:f6:ba:71:31:9d:28:55:f4:f0:18:9c:bd:65:
59:8b:de:5d:e6:3a:6d:69:71:df:03:b4:0e:07:21:73:05:83:
87:49:ac:79:09:86:e2:f7:b4:95:1e:30:43:87:06:dd:32:50:
52:d3:c0:e4:ac:fe:10:6d:a8:c7:fa:6f:68:01:29:51:ea:e7:
a1:12:0a:68:5b:da:57:4e:3f:63:2d:7b:1f:90:54:a4:75:a2:
a9:37:26:d5:af:64:80:20:08:71:fc:f4:1b:3a:b6:7a:2b:a0:
06:ae:a2:c6:aa:d5:52:9d:e2:8f:c6:f8:c1:06:1d:64:d0:08:
9d:84:22:56:3c:69:ec:bd:b3:16:83:ba:3c:b8:54:9e:14:a6:
c7:63:d8:af:15:a9:bb:7a:ea:de:4c:26:8e:d5:fb:66:c8:fb:
30:ad:ac:f1:64:a6:7a:66:6e:8f:88:0d:57:1e:27:a5:c4:71:
7b:c1:bf:c6:8b:ab:1f:24:3d:07:92:23:0c:a3:d0:8a:cf:ef:
34:77:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:59:26 2026 by rpki-client