Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File: 3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier: jypWccXpeTV1cFeXPats02bAWMV6B3fj7s9F8/pqa6Y=
Subject key identifier: BC:A9:E2:42:5F:8F:DD:39:77:08:98:EE:97:1C:10:82:F8:B9:EC:32
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial: 019FA9752371860A48F0B5F9B8321FDBBBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number: 17AC
Signing time: Tue 28 Jul 2026 16:00:53 +0000
Manifest this update: Tue 28 Jul 2026 16:00:53 +0000
Manifest next update: Wed 29 Jul 2026 16:00:53 +0000
Files and hashes: 1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: +l2aPUGLy/PcL9rcyk8bpI+sQWlH4nyaqYG4pj2M4o8=)
2: W_PAmrwUdBQv2HWxrdSy6SHG4Mk.roa (hash: U5b72Zmh/JVyUJzYUod1+mwOGitj2M1nMBA9xsjmnOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:23:71:86:0a:48:f0:b5:f9:b8:32:1f:db:bb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
Validity
Not Before: Jul 28 16:00:53 2026 GMT
Not After : Jul 29 16:00:53 2026 GMT
Subject: CN=bca9e2425f8fdd39770898ee971c1082f8b9ec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:0c:65:50:fe:da:53:16:2c:f1:4a:80:96:
d8:1e:6e:ae:3e:24:3b:a5:f7:1c:42:3b:f1:fa:68:
7d:88:27:c0:8b:ff:75:39:22:73:b1:f1:9c:07:fe:
da:cb:94:57:b4:c4:a5:2f:76:17:b6:1e:2c:62:40:
94:d8:e6:55:bc:69:87:ec:25:b9:55:4c:a3:6b:a4:
65:3a:8a:b8:ab:3f:c8:d8:f8:43:0e:60:1b:45:64:
32:49:ae:99:37:4a:07:9f:a8:0e:7a:fb:f4:d7:31:
5e:fa:35:2d:fe:65:03:23:ed:77:64:c8:9b:46:e2:
9b:96:5f:1e:8a:b0:b2:f0:c1:df:10:a1:63:32:5b:
6b:6d:ba:ad:bb:fd:df:a6:9b:ab:71:6a:f2:79:38:
27:77:0e:51:64:9b:a2:66:41:e4:f0:33:93:a1:fe:
d2:09:a7:ac:9f:87:13:b1:16:2f:c1:8e:8e:00:0d:
2c:f7:06:d4:4d:68:bc:64:6f:f2:ed:e1:7e:4f:31:
d2:ff:50:a7:ea:06:77:b3:dc:2b:3b:af:fe:a5:be:
43:5a:19:65:0b:82:77:d8:6d:ec:b2:a4:f1:ec:a7:
1b:04:e3:11:ae:96:98:75:a7:03:a5:74:07:29:7d:
52:ad:c3:cd:61:7c:01:84:be:46:b7:6f:cb:79:42:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A9:E2:42:5F:8F:DD:39:77:08:98:EE:97:1C:10:82:F8:B9:EC:32
X509v3 Authority Key Identifier:
keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:30:09:48:2a:43:b7:90:b5:89:56:f3:2d:e8:d6:f0:f8:0d:
f8:9e:b7:19:34:b6:b9:99:4d:83:ee:b1:e7:b7:c3:ad:65:56:
fb:87:31:64:b2:77:c7:82:56:69:b8:71:24:f5:84:7e:b8:60:
c3:80:2a:59:64:8f:74:60:34:a8:0e:96:a6:94:b1:21:3c:f7:
6e:fd:a7:3a:81:9d:f6:d7:e2:28:06:00:88:b6:ec:77:70:93:
85:7b:7c:c0:33:02:d4:20:cb:84:b0:95:b4:0e:74:be:3b:59:
1f:02:54:0c:3b:e1:92:ea:ae:cd:c4:46:da:63:19:72:eb:16:
f7:5d:30:d9:69:ca:40:79:02:55:6f:83:92:33:cd:17:16:33:
55:95:27:64:17:f7:3a:aa:79:a6:7d:ff:1e:11:c6:86:7c:9f:
11:d7:85:c2:6c:f2:05:1d:5d:58:a8:ab:14:f5:23:ca:4f:42:
4d:52:62:cf:81:1c:24:e3:01:52:5e:ca:5c:5d:ab:50:85:7e:
49:67:91:ea:96:c7:70:cf:ef:76:8c:f2:2e:2b:15:f0:39:eb:
00:66:ac:5b:50:5c:44:33:c3:ac:4a:d6:8e:c7:5f:85:75:a8:
f9:06:5a:b5:5a:76:9e:6c:6b:c2:cf:ef:2d:f4:65:ec:10:0a:
d5:b6:ec:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:17:14 2026 by rpki-client