Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: 2ep0NlTRIl79Lo5a2PQWJRcfWCNlyrD9ImUSTheMijw=
Subject key identifier: 09:2C:3A:5A:3B:9B:0D:46:19:AD:6D:67:AC:F4:3D:FE:84:C9:34:18
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 019FAA1A5D914C7B952864F497FF3348B3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 1967
Signing time: Tue 28 Jul 2026 19:01:22 +0000
Manifest this update: Tue 28 Jul 2026 19:01:22 +0000
Manifest next update: Wed 29 Jul 2026 19:01:22 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: 2MVHfwDREYFYVf15rmRoyN7V3cTeauQ+7yVnpjU/5Kw=)
2: gmn2k3f32tfDXu2zwYzVyGe8JSs.roa (hash: W9sjDbpYZWeZAU/ChNMb2ZUNyZYk9yxty8Xm+AfcIh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:5d:91:4c:7b:95:28:64:f4:97:ff:33:48:b3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Jul 28 19:01:22 2026 GMT
Not After : Jul 29 19:01:22 2026 GMT
Subject: CN=092c3a5a3b9b0d4619ad6d67acf43dfe84c93418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:af:2a:05:b2:49:14:63:dc:77:45:b2:69:
a9:9c:32:ce:f2:73:63:4a:e1:35:24:65:fe:fe:1d:
cf:dd:08:27:b2:d4:3d:a2:80:63:1d:c4:ae:28:d6:
e4:b9:6e:32:44:d8:cd:53:06:32:2f:8b:2f:10:8b:
99:ff:de:aa:f0:6e:6b:3a:2c:dd:ce:27:c6:69:15:
1c:2c:20:e6:56:0c:6c:0f:04:84:58:2c:41:46:ec:
52:9c:1f:0d:6c:97:8a:25:ae:04:34:dd:c7:9c:2d:
57:e4:87:14:6b:ac:26:ee:ad:a7:ba:b2:6f:78:03:
4d:3d:57:96:68:60:28:8f:9d:30:d9:28:19:6f:a9:
78:8e:91:56:17:c6:4c:d8:b0:06:72:f3:01:13:34:
0e:e4:8f:52:dc:21:6a:75:7e:8f:3a:d0:6e:c5:2d:
b4:d6:ed:52:61:19:41:bc:47:14:73:c9:02:58:9c:
00:d9:9f:20:39:69:8d:a3:81:d7:d3:d3:d4:61:62:
26:3b:1a:82:00:3d:30:97:ee:74:f3:df:6a:df:3b:
e5:06:9f:6d:f7:5e:15:e9:d0:33:10:1e:81:74:fd:
23:e9:c8:8c:1a:8b:b9:c5:99:4a:d9:97:9a:2c:35:
de:3c:f1:c0:55:80:fb:e5:25:eb:8c:f9:eb:94:ae:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2C:3A:5A:3B:9B:0D:46:19:AD:6D:67:AC:F4:3D:FE:84:C9:34:18
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:28:12:5b:2b:8d:92:b2:59:35:89:70:d9:8b:ad:49:df:b2:
33:5f:c1:c4:50:31:22:c9:fa:0c:b9:dc:e3:8b:1d:22:00:df:
eb:0c:87:55:e1:82:0d:1c:46:0f:50:2c:8f:68:33:42:60:95:
45:73:bf:20:6c:6e:be:95:f9:a6:9e:d5:79:64:c0:20:c5:28:
33:f1:ca:6a:82:1f:1e:c9:63:c7:a9:78:e0:f8:54:9f:1e:f7:
15:2c:71:46:fa:23:86:41:be:3a:bb:4c:35:1c:6d:a8:f9:f6:
1a:2a:15:5b:16:07:72:27:50:2a:d1:b7:e0:5b:48:cc:71:9b:
77:03:0d:ba:2e:62:b3:62:39:be:cb:01:9d:74:92:70:a5:40:
f3:f0:6f:52:a1:1e:37:01:93:0d:fa:a1:15:46:30:25:c9:2f:
26:01:df:b7:65:ef:79:c6:02:38:06:80:ea:d9:8b:26:9e:d6:
eb:92:24:5a:2d:39:a2:8a:c6:bb:0c:6c:8f:fe:fd:06:0d:49:
92:82:4c:ca:52:05:44:a0:ab:94:95:be:ac:da:a9:59:18:b9:
15:35:58:17:45:3b:c9:02:2c:54:88:70:0a:7d:c7:c7:40:ae:
5d:60:a2:63:ef:df:82:ae:ef:20:56:47:13:c8:e4:9c:3d:17:
ee:e9:d0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:28:53 2026 by rpki-client