Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
File: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft (raw, json)
Hash identifier: m34NjUWyabacoipLv2bIW2MfNgwEV1gAhdMopasLfmU=
Subject key identifier: 80:80:62:EA:67:2B:A1:F9:68:51:14:84:0C:CC:24:FE:00:47:22:B1
Authority key identifier: DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
Certificate issuer: /CN=ddb182a5dbd1bee871de519002d6018fee213670
Certificate serial: 019FAA885809D57F0E97530B5F3A35BD3572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:29 +0000
Manifest this update: Tue 28 Jul 2026 21:01:29 +0000
Manifest next update: Wed 29 Jul 2026 21:01:29 +0000
Files and hashes: 1: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl (hash: lMnZujhoxy5/hdFw0tjU6Qxgl6FMDvqH5b45iTAda4Y=)
2: 63JgYqrtG6KoZuuOrK4W3du1Duo.roa (hash: bCSh6KZ5NQdZdMyFJ085Wh626DTWHoPFQnxoetlXdVU=)
3: tmXRQcCYhINr2gZL0cRubH_ch2k.roa (hash: j7OzX8w8hg3VPQ17U1GWH4ZU5mHgI9S7cGktHlSkmlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:58:09:d5:7f:0e:97:53:0b:5f:3a:35:bd:35:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb182a5dbd1bee871de519002d6018fee213670
Validity
Not Before: Jul 28 21:01:29 2026 GMT
Not After : Jul 29 21:01:29 2026 GMT
Subject: CN=808062ea672ba1f9685114840ccc24fe004722b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0e:e5:b3:54:b3:5a:f2:33:9c:bc:cd:b0:b6:
d0:1e:f3:1f:a5:ae:51:09:31:92:4f:47:ff:6c:ba:
14:a5:91:f0:45:d8:36:a1:56:ab:c7:f2:69:7d:0a:
ae:b7:ec:ef:ae:c4:4b:d1:dd:02:5b:5f:63:cf:7a:
4b:32:62:95:94:0d:50:16:3f:66:3c:d7:64:ab:04:
ec:ae:5e:a3:f1:0f:bb:1a:4e:5a:b3:39:91:31:a3:
4e:bd:df:26:24:5a:0c:8c:af:3e:8b:7a:e7:98:66:
31:6c:72:fc:47:35:3e:cd:86:9a:e2:7f:02:52:18:
be:3e:a4:0e:ef:b7:ff:4d:6e:a9:e4:03:4e:b0:45:
5e:4b:71:b7:6f:18:3a:23:ac:5e:fd:7f:eb:ff:2f:
00:24:3d:1c:d2:bf:df:6c:29:b2:51:ea:c8:59:44:
e2:98:93:02:92:16:09:91:47:e3:cf:d4:c3:88:52:
09:83:4c:be:99:ab:95:2e:f7:39:15:77:b0:3d:e6:
2d:90:1e:bd:48:03:a6:b3:ab:68:c8:17:a5:46:8b:
a5:43:b8:70:0a:db:28:eb:9a:7e:bb:1a:99:46:dc:
42:cc:76:61:82:ee:66:9c:95:bb:47:e5:1d:d1:b9:
56:3f:12:78:79:d6:d6:f5:b2:d4:f7:01:ab:7e:e8:
a9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:80:62:EA:67:2B:A1:F9:68:51:14:84:0C:CC:24:FE:00:47:22:B1
X509v3 Authority Key Identifier:
keyid:DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5f:e3:28:de:51:eb:ac:de:af:e2:26:0c:17:b0:78:00:fd:
94:c5:9f:46:bf:04:df:1b:d5:70:e2:17:7a:d9:a0:e0:82:e4:
9d:06:80:1d:fe:fd:80:94:fe:d4:7b:90:e2:ba:bb:08:00:92:
5a:76:11:1b:dd:92:0a:bf:de:2f:f7:06:7f:24:57:83:f5:71:
ba:a9:ef:b1:83:4c:bd:a9:3f:da:7a:86:61:2b:9d:a9:9d:0d:
c8:c4:af:ce:24:59:db:a2:9d:52:d6:34:a6:8b:9a:60:e8:f7:
a1:ce:a0:68:7f:db:cf:83:ca:09:81:88:c0:a7:7c:82:47:4f:
ba:ad:d3:db:b9:e4:03:50:ab:53:26:12:0a:8c:26:cb:d8:94:
0c:db:05:63:6c:47:c1:45:c0:0b:ba:d3:df:10:84:b0:f4:d7:
ef:19:d6:a6:ed:27:bb:79:fc:22:1a:e4:46:28:4e:c6:1e:77:
d0:93:81:94:ed:31:e3:fc:ee:87:12:25:a3:2d:4c:4f:4b:58:
22:44:e2:49:a8:cc:8f:ba:fa:c8:3e:65:1f:51:a4:58:19:c3:
2f:cd:1b:9d:b3:76:d0:4e:33:69:af:c9:bc:bf:e3:63:66:b8:
15:56:bf:76:f9:ee:3e:cd:d0:ed:11:72:b7:c5:a5:8f:19:ac:
6d:8f:f1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:19 2026 by rpki-client