Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
File: 3fwxxRjdlxX93slYJSfshEjXhA0.mft (raw, json)
Hash identifier: MfqOmudMlyW7Z+TvgJ6zPYndGya7iGxNj4gbYTBdTMA=
Subject key identifier: A3:7B:19:27:F6:26:BC:F0:D0:BB:E0:0B:13:05:6C:44:55:EB:EB:97
Authority key identifier: DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
Certificate issuer: /CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Certificate serial: 019FA899C383563D8BA2E554BEE62E1585BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:16 +0000
Manifest this update: Tue 28 Jul 2026 12:01:16 +0000
Manifest next update: Wed 29 Jul 2026 12:01:16 +0000
Files and hashes: 1: 2rI5z9MKWkWLbN4Ac0mrTh9wI0Q.asa (hash: gEb+fnmGtGeQVf4nv5uRoOoaQszHv4xPq/xVWvjZho4=)
2: 3fwxxRjdlxX93slYJSfshEjXhA0.crl (hash: f2x+rHsk7BSLz5Dn6fEE+CiQizow5Gl+KeOEWJ/K5/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:c3:83:56:3d:8b:a2:e5:54:be:e6:2e:15:85:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Validity
Not Before: Jul 28 12:01:16 2026 GMT
Not After : Jul 29 12:01:16 2026 GMT
Subject: CN=a37b1927f626bcf0d0bbe00b13056c4455ebeb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:8e:f7:78:89:ec:8a:ab:2d:92:c0:a3:f3:
32:67:97:a8:88:97:b0:17:93:43:bd:3d:51:ad:86:
22:bf:1c:a5:0f:00:9d:99:6c:dc:7c:38:23:ee:c8:
aa:f1:69:6a:9e:c6:b6:fa:6f:20:1c:54:a8:28:4c:
2d:16:84:67:3f:cd:11:a5:6b:26:11:4a:84:1f:7e:
2e:06:1f:66:f0:74:48:a0:0e:dd:9d:6d:47:0d:95:
e2:aa:e4:f2:68:11:bd:fb:98:77:1e:f9:d4:11:61:
c8:e2:37:2d:59:45:8a:88:19:de:00:74:ea:d5:a8:
46:dd:f7:f2:fd:d9:40:71:d0:6e:73:e1:79:7c:3e:
8f:0d:72:a6:64:0b:8b:dc:ab:0f:2a:de:18:2c:93:
83:2d:7a:1c:2d:9a:45:2b:1e:b3:f9:13:6f:e4:3c:
21:8c:af:c9:e0:59:d6:f6:5c:41:67:04:95:92:cd:
cd:8f:6e:5c:44:12:fb:4a:46:e2:71:ef:08:d6:24:
2f:ef:b0:c0:4c:d5:b5:6f:70:6d:1d:9b:49:df:d1:
70:f8:7c:8f:54:ef:cd:52:bc:16:bc:e7:60:29:c4:
7c:42:6b:c8:5a:7f:5c:8a:62:c8:e3:85:25:ab:2e:
2b:ff:07:e1:d3:f1:c9:35:d4:4d:4a:4d:e4:d1:38:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7B:19:27:F6:26:BC:F0:D0:BB:E0:0B:13:05:6C:44:55:EB:EB:97
X509v3 Authority Key Identifier:
keyid:DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:66:48:e0:67:f5:c1:43:4c:3d:0d:5b:bf:93:c5:b5:4d:40:
d2:50:38:66:d8:84:66:ad:86:8f:e5:7a:16:d1:72:48:6c:ce:
ba:31:4d:e0:29:59:28:3c:cc:5c:2c:1c:ba:1f:09:22:e6:f3:
52:3e:c9:28:ca:58:d9:b0:ae:0f:54:7a:1a:b9:5f:45:b9:02:
d4:37:a0:85:ce:97:74:3f:ec:4a:a6:f5:b4:af:c2:ee:b5:2a:
39:57:bc:0c:ad:b5:c6:cc:ad:0d:94:cf:2e:c7:16:62:b6:92:
e2:e7:87:8f:b5:eb:46:68:d8:42:d3:dd:08:d3:72:b6:aa:d9:
55:d9:7b:c4:7e:c0:e1:e3:8a:51:ff:5a:e4:6a:74:50:2b:ab:
98:e1:7b:92:45:3d:fc:0f:96:8d:ff:07:a2:02:43:93:86:21:
b1:c4:95:d8:e9:d5:fd:bb:60:90:f9:c3:1f:11:4f:a1:f3:90:
1e:a0:7f:08:e1:f5:71:fa:4a:12:3d:76:74:6a:86:3f:3a:27:
7a:ae:d8:44:f3:c2:87:3d:7a:be:1c:97:75:84:2e:5c:2d:60:
9b:40:b1:d5:49:e6:94:ce:a8:85:37:a3:f0:69:92:1c:45:87:
3f:9b:ec:29:84:6a:23:11:ec:0f:b5:2b:db:0a:81:37:ee:d2:
1a:6d:61:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:32:56 2026 by rpki-client