Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
File: 3-KkwH5N3j8ePKw5ujshNTGsy7k.mft (raw, json)
Hash identifier: FLbFFQpY02BQnvdCY3seXOxcbXL8fgwDPUarhvnv2QM=
Subject key identifier: D1:84:12:83:5F:77:6C:D7:48:BA:B7:6A:EE:BF:90:7D:58:86:F8:EA
Authority key identifier: DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
Certificate issuer: /CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Certificate serial: 019FAB64149FC2C91084627D9D8386C8A67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
Manifest number: 0183
Signing time: Wed 29 Jul 2026 01:01:30 +0000
Manifest this update: Wed 29 Jul 2026 01:01:30 +0000
Manifest next update: Thu 30 Jul 2026 01:01:30 +0000
Files and hashes: 1: 3-KkwH5N3j8ePKw5ujshNTGsy7k.crl (hash: b2kyYyV9hOzTu55wOGpLUtLqsNDwlXNJb7KHFGgpPSA=)
2: Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa (hash: FRvotk1GU1c0bgTGRLjQpv9XYU8csQF9vIzVahVu7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:64:14:9f:c2:c9:10:84:62:7d:9d:83:86:c8:a6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Validity
Not Before: Jul 29 01:01:30 2026 GMT
Not After : Jul 30 01:01:30 2026 GMT
Subject: CN=d18412835f776cd748bab76aeebf907d5886f8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:eb:5c:f3:88:88:b2:8c:89:43:2c:ea:7e:4c:
cd:c0:85:83:4f:43:fd:00:4a:e6:41:35:e4:ee:be:
77:09:fd:7e:f1:c5:d6:fb:a8:b3:de:f4:6a:b1:02:
d6:a1:7c:08:7c:64:da:b3:a6:a0:eb:41:75:af:e0:
be:ec:f7:02:40:8d:88:84:c1:7e:f3:57:9b:e8:78:
e5:6c:dd:5d:99:a1:ab:49:17:80:fe:fb:ef:47:55:
65:37:60:24:9c:e6:ca:20:56:79:eb:cd:ca:f0:2b:
1d:fb:9b:8c:3b:3e:88:83:ca:22:a7:f9:ec:72:1c:
e8:47:34:c3:38:57:fa:4d:4c:89:51:48:b8:4f:c4:
8e:a0:92:ab:f0:a6:0a:98:e4:af:9e:d4:d8:94:89:
71:5f:70:96:8f:ad:ec:d0:f0:36:5a:e5:04:1d:a8:
02:9e:70:f8:01:1e:7b:e0:c2:7e:ef:81:54:aa:7b:
4b:c9:bf:65:f6:36:3b:35:50:b7:d7:bc:88:39:33:
75:4e:f5:1b:cd:31:c4:33:f1:b8:98:ca:61:c0:f2:
dc:e6:cf:27:a3:66:f0:a0:49:70:52:3e:ed:b1:9e:
1d:98:83:cc:17:4b:a1:3d:fc:32:07:17:ac:9a:06:
ff:a3:96:fc:eb:e2:43:f0:b8:d3:33:cc:60:22:64:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:84:12:83:5F:77:6C:D7:48:BA:B7:6A:EE:BF:90:7D:58:86:F8:EA
X509v3 Authority Key Identifier:
keyid:DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:aa:7d:b5:bd:e4:fc:49:e9:96:11:bb:69:91:84:70:7d:d5:
b8:f1:be:61:d5:73:c3:67:44:40:ed:80:fc:00:4f:f0:c2:a0:
0c:c6:1d:c1:89:c9:83:87:dd:b7:2f:3a:05:2a:0c:34:1d:7d:
a3:43:ea:1f:5c:73:84:d2:e3:b6:ab:28:03:2f:63:89:23:a8:
b6:36:44:60:a1:8b:06:8f:de:13:07:f3:e1:40:16:f5:bd:11:
ff:13:0c:8c:c8:99:aa:bd:e5:e1:06:d7:8a:7b:2b:fe:a0:b9:
ea:69:05:db:73:a4:ca:eb:10:4f:68:45:cc:c6:97:2f:e1:af:
e3:e1:8d:0e:84:71:23:8d:85:ac:04:e2:78:e6:2a:3a:62:41:
6d:d6:e0:9d:c9:19:74:1a:72:ed:cf:ee:77:dd:e6:8c:a1:79:
84:72:6f:51:33:d1:a3:a7:9f:6d:e9:9b:b6:1b:cd:8e:d9:15:
db:67:62:d6:c1:54:77:53:5f:01:fe:c7:b9:ad:70:ea:5e:62:
0c:ea:f5:74:82:eb:40:ae:7c:b8:fa:58:09:c3:de:5d:fa:ce:
46:2b:c0:cb:05:9d:2b:fc:a3:8c:4a:9a:59:7e:fb:09:18:3e:
6f:4d:03:ff:0e:5d:72:ec:81:69:ee:ae:d8:35:79:c7:25:a3:
38:86:5e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:10 2026 by rpki-client