Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: Y08CkkeKYu+SiXCPPCZhViuy4TRKOIWBwVuN/xc5JOM=
Subject key identifier: CB:FC:14:6C:4C:76:8C:F0:55:7B:14:A1:D6:4D:A3:61:E7:9F:97:BA
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 019FA93E775B2C0BD5C9D2F5CD5AB5446DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 07AC
Signing time: Tue 28 Jul 2026 15:01:11 +0000
Manifest this update: Tue 28 Jul 2026 15:01:11 +0000
Manifest next update: Wed 29 Jul 2026 15:01:11 +0000
Files and hashes: 1: 2JL6QkmCoFqlhxQJNmWn1mF_TU4.roa (hash: QqXkH/YgS0MOCatOfHharCIV2omJWZGXYUHGmZTmvS0=)
2: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: XjVdBc6B+I9cY65m9htICc8Nfp/j9wUJBy/1DY4aQfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:77:5b:2c:0b:d5:c9:d2:f5:cd:5a:b5:44:6d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Jul 28 15:01:11 2026 GMT
Not After : Jul 29 15:01:11 2026 GMT
Subject: CN=cbfc146c4c768cf0557b14a1d64da361e79f97ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:8d:48:be:99:7b:01:8b:95:1e:25:c4:ae:
2b:d1:2b:8f:0a:29:f2:ab:81:db:d6:f0:74:45:e0:
2f:6e:0c:4b:f3:e6:aa:db:23:ab:2b:67:74:51:12:
62:6b:cd:1a:40:16:08:e1:1f:0f:d3:64:42:6e:c7:
d0:47:e5:79:72:16:b1:85:5c:4a:37:b8:0e:f4:c0:
53:9a:34:30:49:34:15:8b:f7:c8:14:a1:5d:ed:f3:
60:23:ab:01:75:82:9d:be:36:f2:d0:d7:fd:fc:fd:
47:6c:82:72:c4:11:27:59:d8:4f:e1:ef:36:81:c4:
3e:c3:ac:30:ff:9c:3b:33:75:55:a9:7e:a5:e7:f7:
ff:eb:3b:df:fa:7b:d7:29:1a:91:e8:3c:64:03:38:
93:39:06:ec:00:75:76:46:05:c0:22:24:f1:00:d2:
1d:69:90:e1:64:15:30:ff:8c:a9:28:ce:78:79:09:
5d:56:f4:b5:24:81:f6:0e:8f:c6:f5:1b:ff:7b:d6:
36:f0:e7:71:06:d1:38:be:f1:1b:44:ec:50:dc:0b:
02:bd:01:61:a8:93:63:83:10:fc:41:e5:2e:45:51:
ce:ff:2b:4a:e6:80:6f:54:a2:83:ad:4e:7d:1e:86:
5d:7d:83:e8:70:46:fe:de:24:31:42:9d:f2:91:74:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FC:14:6C:4C:76:8C:F0:55:7B:14:A1:D6:4D:A3:61:E7:9F:97:BA
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:aa:78:94:46:42:6d:76:bf:ec:09:b5:70:22:b5:e0:d9:e5:
57:3d:c7:6d:e1:86:24:c1:19:53:87:19:eb:25:ed:b3:c9:99:
11:93:b9:0f:02:3c:b5:41:94:e7:83:89:a7:a8:5a:a1:03:3c:
23:02:e5:a4:69:f8:04:a1:1e:9d:dc:c8:28:df:50:a9:0b:42:
f9:02:f3:e1:22:4d:d9:54:d1:f8:95:3d:fe:93:66:0e:bc:b8:
30:e1:52:da:d8:dd:18:9e:ac:ba:6b:6e:df:6c:0e:bb:8e:0f:
48:45:ec:58:cd:41:ea:d9:a6:80:4d:69:bb:7d:5e:b0:82:79:
6d:e6:4f:f9:e3:fa:5d:39:d2:30:67:5b:24:11:2c:84:a4:72:
81:37:26:d7:9d:df:43:37:5d:63:92:0a:4e:e6:f3:7a:a1:1d:
c7:0f:35:28:5b:82:4e:f0:11:79:aa:ca:f1:d4:62:3f:10:93:
fd:0a:fe:25:7d:52:11:19:40:52:df:e5:e6:9f:9d:72:a9:d2:
81:b9:b2:da:83:b6:24:10:88:b9:9a:72:8a:87:a5:dd:cb:91:
e3:c0:a1:a1:d5:e5:fd:69:c5:c6:f2:59:e0:db:23:b3:83:c6:
df:9e:d8:38:49:79:d5:41:7d:ac:49:9d:0d:a4:93:b7:eb:9b:
3e:6f:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:18 2026 by rpki-client