Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: FQxAP8jsLS3NAcalV/Qbp9Iw/BSHr6u5CR9J9aJFc2g=
Subject key identifier: 25:EC:D3:32:E1:81:82:C3:64:77:BD:A5:38:67:3D:D7:FB:EB:6F:A1
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 019FA97548E133A95802DCA333CD41C36035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0EE0
Signing time: Tue 28 Jul 2026 16:01:03 +0000
Manifest this update: Tue 28 Jul 2026 16:01:03 +0000
Manifest next update: Wed 29 Jul 2026 16:01:03 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: 2OvUcYivnXYUHnPvcEJZnV4QTuaDdQyHgzxudl8k5qY=)
2: 7oc8a8fS3DJKvtS40qTcpFXQvEM.roa (hash: 8aVVJ9t5PeC1jL7SS/bu2hleqTmY1JsdKhA8bRBNWso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:48:e1:33:a9:58:02:dc:a3:33:cd:41:c3:60:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Jul 28 16:01:03 2026 GMT
Not After : Jul 29 16:01:03 2026 GMT
Subject: CN=25ecd332e18182c36477bda538673dd7fbeb6fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8d:0a:2b:c8:00:38:87:6a:80:23:a6:d6:9b:
f5:d9:cb:39:62:0c:48:4e:32:8b:f8:ef:d7:fe:30:
e1:0d:12:b9:be:10:1a:30:68:fd:36:f3:6a:81:59:
6d:a5:6c:fd:23:60:00:99:d8:6b:f0:5b:3a:ef:70:
43:e2:32:05:f4:86:28:2e:18:f8:2f:0b:1a:d2:d6:
d7:3b:86:cf:ce:5d:55:87:97:e8:70:9d:76:27:d1:
29:53:21:05:62:95:58:27:4d:b9:74:3c:ba:29:03:
75:c1:91:d0:d3:e6:db:c0:d9:9f:2a:5c:f3:ab:b7:
f5:21:20:a8:8e:c6:2f:91:71:53:09:21:07:d5:1b:
f7:c3:f6:46:80:45:dd:7c:86:cb:cd:d5:a3:cd:79:
23:47:58:4d:9f:99:fc:1e:cb:ec:22:1b:ca:0e:88:
10:47:9f:07:b9:16:2d:e5:4c:ad:64:44:d1:0d:f8:
22:8a:96:a7:dc:38:bd:1b:29:4d:e5:fa:5a:35:7f:
ed:9a:19:e7:d7:c6:0d:84:aa:17:d1:08:25:98:7f:
a3:f5:25:b4:d9:2f:44:2e:2f:de:14:87:9f:5a:a9:
58:73:93:48:75:f2:c2:4e:20:8a:b4:dd:84:50:5d:
39:b3:39:ad:d3:ed:b0:02:d4:5e:1b:28:8d:1f:2c:
3e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EC:D3:32:E1:81:82:C3:64:77:BD:A5:38:67:3D:D7:FB:EB:6F:A1
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b0:03:a5:d7:88:a7:22:ee:b7:a2:5e:d4:bc:94:c3:2c:b4:
8e:22:83:3d:4b:df:31:10:85:72:8d:40:20:bb:ea:3e:d8:8a:
dc:d2:24:13:55:49:9b:b3:bc:f1:22:7c:be:32:07:1d:3a:b8:
c2:f2:7a:c6:42:70:bf:ef:45:79:84:33:ed:00:6e:17:67:d9:
d6:8d:8b:a2:ec:23:b8:ad:8d:c1:e7:5f:59:03:7c:2e:1d:6d:
3e:54:1f:35:67:bc:27:0f:fc:93:98:88:5b:93:ab:3e:29:97:
ef:2f:7b:2f:21:ba:77:1f:97:23:f8:13:07:21:bc:84:3c:83:
fe:56:2c:4e:54:7f:2c:c2:9d:9b:d0:69:f9:a4:a9:f4:84:bb:
c0:1e:5c:20:6b:58:5b:df:ae:74:99:19:ce:e1:1a:5b:a7:3c:
f7:8c:2d:7f:0c:3d:ad:72:d3:c1:e8:6e:fa:bc:1e:93:e6:36:
13:f3:e5:c4:e1:ae:ea:2f:8b:e1:84:cb:ed:a3:43:2e:12:7b:
53:0e:a6:d3:d4:9b:7a:b7:2c:71:13:80:00:4f:f2:01:e8:40:
64:ea:91:b8:43:43:67:1d:54:74:3d:7b:aa:f1:9f:56:21:8e:
14:b0:3b:fa:e9:68:d2:4e:57:c5:68:64:47:4a:9a:ed:c0:23:
d2:59:43:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:19 2026 by rpki-client