Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: B9r2BKbemWz+lAyISwSK5CrUXd6yjDWQiztQBbJAihs=
Subject key identifier: DE:AA:61:82:71:86:B1:01:A2:73:83:4E:D7:76:AB:B1:36:C8:2E:0D
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 019FA93E62B49B02483A17CA2FA86663FF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0FCF
Signing time: Tue 28 Jul 2026 15:01:05 +0000
Manifest this update: Tue 28 Jul 2026 15:01:05 +0000
Manifest next update: Wed 29 Jul 2026 15:01:05 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: 7UGr5wgGoR6C9VkNUVdZjZ3ACaHo9Z1ckdh9a9FvymY=)
2: wnLAy32iYG4i-ODs-rBRdtaa9Ss.roa (hash: zyR18oxh6Lhv0Acyg819Q0tTDooFJ+wpThACkE37g/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:62:b4:9b:02:48:3a:17:ca:2f:a8:66:63:ff:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Jul 28 15:01:05 2026 GMT
Not After : Jul 29 15:01:05 2026 GMT
Subject: CN=deaa61827186b101a273834ed776abb136c82e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4e:03:d2:bf:00:a7:47:40:8e:27:1d:f1:1a:
09:11:ba:57:72:c0:75:6f:b2:26:1e:1e:eb:5f:a9:
a9:5c:e5:a6:c3:53:46:e6:a4:f9:68:92:41:9e:ab:
eb:6f:2f:93:2c:d7:e6:ad:ff:a7:96:94:9f:73:ad:
f4:2a:c4:ab:62:23:d4:0f:0c:49:fb:91:12:bf:1e:
70:a6:34:d0:35:76:99:6b:c4:ff:d9:48:ec:b6:19:
6e:5a:b0:e5:7d:ce:d9:67:3b:e1:e6:8e:8e:88:ec:
bb:30:84:0e:00:53:c2:ab:94:0b:d7:4c:7b:d8:1c:
b6:01:a1:af:62:84:01:aa:70:04:83:bb:c2:06:c7:
12:00:21:00:0a:60:1a:2f:fc:21:5c:7f:b8:12:42:
93:c8:81:10:e6:85:89:0c:75:25:9e:ef:37:14:c8:
61:62:86:9e:1f:e2:4e:d9:0a:57:6d:89:5d:33:4c:
a4:13:92:29:62:d6:f1:c9:c7:c2:c0:23:50:59:f1:
5e:ac:09:39:2e:ba:2e:92:94:92:f2:71:0c:08:7c:
25:e2:44:db:ee:6f:18:a5:bf:09:f3:c7:90:e5:fa:
ce:38:36:fe:ae:7e:af:fb:9f:0c:76:99:37:76:a2:
41:71:47:68:99:73:c5:f8:59:29:91:61:3f:f9:ca:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AA:61:82:71:86:B1:01:A2:73:83:4E:D7:76:AB:B1:36:C8:2E:0D
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e9:3c:2c:b5:5e:39:d0:72:be:ea:a1:05:eb:db:bd:e3:e9:
ed:d7:2d:df:18:9a:e5:7e:3c:20:98:46:dd:41:8d:da:a2:f2:
d6:e8:0e:98:a6:95:de:5d:b7:8a:7e:6f:e6:24:16:11:0e:32:
62:8f:b7:90:9c:b9:32:fc:84:85:3c:79:28:40:84:96:8d:94:
b1:f5:a3:fa:2d:14:b2:eb:14:d6:b4:38:f0:8b:76:ab:95:e9:
df:0f:5a:87:c8:67:79:dc:02:9c:96:eb:4f:01:1e:30:da:36:
f3:9b:0d:70:cd:16:08:14:b6:48:93:75:e5:90:e6:9e:74:0b:
8c:b4:03:12:b7:ca:03:be:78:1f:4c:e0:e0:79:b7:b0:23:c1:
6f:73:99:8f:bd:3c:b0:01:76:d9:0c:5c:c9:b0:d2:62:86:24:
5c:ca:bb:e1:95:d9:35:0f:36:15:5b:5b:dc:cc:26:69:dd:61:
10:7b:6c:ed:28:fc:3d:fd:99:b1:b2:2a:68:be:a4:6f:fb:24:
3d:eb:cd:78:cf:12:6e:ee:35:be:35:8a:92:f4:9d:3e:ed:2a:
51:92:22:b3:6a:f5:2a:28:84:1c:09:43:a3:10:68:a2:61:3c:
f8:55:f7:b6:74:2e:ff:1e:dd:af:1e:d1:eb:fe:78:f1:40:ff:
0e:6a:e6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:47 2026 by rpki-client