
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier: CJI9gq8GNUt06IOdX2ve1TBfkD75eofbPtydhlQuNeY=
Subject key identifier: 54:C8:D3:80:24:D0:3C:C8:C2:E7:BA:70:BE:90:2D:61:31:72:C8:14
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 019FA7F4BD07BC852DF3302A168E18E59A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number: 0C44
Signing time: Tue 28 Jul 2026 09:01:01 +0000
Manifest this update: Tue 28 Jul 2026 09:01:01 +0000
Manifest next update: Wed 29 Jul 2026 09:01:01 +0000
Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: PJK4kWck8+lG26tFRnmju1703PycbF5fNk7YKjU1kgg=)
2: OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa (hash: WPn0W+4jICl9OeInrEgUZWegwTFzjRsf+1TWPog3Wy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:bd:07:bc:85:2d:f3:30:2a:16:8e:18:e5:9a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: Jul 28 09:01:01 2026 GMT
Not After : Jul 29 09:01:01 2026 GMT
Subject: CN=54c8d38024d03cc8c2e7ba70be902d613172c814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:6c:d3:60:b5:75:e2:c3:7e:70:e6:e3:27:
31:fe:08:96:9a:85:34:dc:94:e4:3e:8f:99:2e:25:
cf:cf:1b:ba:c1:a1:71:8c:81:6d:84:a1:cb:b9:34:
e8:01:9d:d8:6b:7a:1d:a7:3a:d3:96:39:1e:34:87:
fe:bd:ff:a2:77:2f:f8:f8:f6:17:a8:98:df:66:70:
5a:20:74:e9:00:8c:5c:3a:fb:fd:97:83:2a:76:06:
7f:fa:77:3d:7d:7e:8f:63:8b:82:17:41:af:41:e0:
46:2f:a7:ca:7c:b5:8c:b7:8a:cb:24:1d:4d:bc:27:
dc:14:b5:dd:f8:43:d2:4a:90:06:49:64:02:73:17:
43:af:29:1b:dc:98:59:22:20:4b:02:d3:2f:41:0f:
bb:7c:be:8d:f7:b9:f7:d9:88:be:3d:3f:78:93:05:
de:2d:e2:09:dd:9c:ad:09:0a:29:df:7f:e4:8c:b3:
5d:22:b9:94:47:94:ed:50:82:14:56:4b:23:f6:6e:
de:29:9b:62:33:c0:55:d4:98:12:8b:c7:fc:99:35:
08:70:e5:e4:5e:cf:20:4d:a8:ba:4c:b3:fd:ba:55:
41:73:7c:6e:f7:71:5f:84:1b:65:26:66:87:e8:71:
02:17:35:f8:93:9c:ab:c4:1c:78:5e:c5:bd:6f:61:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C8:D3:80:24:D0:3C:C8:C2:E7:BA:70:BE:90:2D:61:31:72:C8:14
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e9:06:e6:68:e5:e0:6c:16:09:09:c5:15:ee:36:37:38:44:
2a:05:0d:8d:86:31:12:40:74:6f:31:68:0f:90:f8:38:19:40:
d4:14:2b:a0:41:4a:ee:aa:d7:d2:36:80:1b:17:84:17:03:f8:
b4:10:05:5d:c3:bb:63:6e:59:16:9d:54:aa:5c:15:00:26:02:
4c:46:0d:a6:ee:e5:80:80:79:01:5c:c1:63:bd:60:4e:d9:bd:
92:8d:cc:ca:f2:89:83:da:7b:d6:79:ec:e7:0a:92:af:97:8f:
8f:53:f7:b8:df:df:ed:25:f1:89:30:d1:66:8a:be:7c:33:7c:
c7:e9:26:3c:80:b2:cd:f8:c2:d9:d4:ab:43:e6:d4:11:82:26:
f2:80:77:f0:8f:e8:b3:a1:90:a3:be:24:bd:b6:21:87:de:bc:
b1:cd:ed:7f:e3:cc:0f:c0:56:a8:46:95:e6:b4:5d:fa:9e:76:
2b:90:b2:77:22:ab:66:ee:ee:0e:03:dd:fe:02:09:49:13:29:
58:70:ce:51:88:21:02:c7:bc:ff:5a:5a:f1:63:b6:a7:ca:39:
50:68:ed:49:0b:b9:be:e7:51:ac:f7:52:b1:de:b3:f6:70:34:
d8:c7:58:eb:21:78:25:83:73:9e:bc:31:1c:40:58:bf:b9:15:
c3:87:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:36 2026 by rpki-client