Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: u4Bp6HbWy2jVns3p0PK21eLvw59PiM35Gv5JlxeYSms=
Subject key identifier: 7E:48:10:36:86:CF:3B:95:63:14:DF:00:F4:F5:C5:35:30:B6:5E:4C
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 019FAA50DD2ED015381D337D46F8383F7B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 0F7F
Signing time: Tue 28 Jul 2026 20:00:53 +0000
Manifest this update: Tue 28 Jul 2026 20:00:53 +0000
Manifest next update: Wed 29 Jul 2026 20:00:53 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: 5FeSYKb2w4M2J8v6N7Mca6fIYnLglEVxKofpV9Pb0DA=)
2: 7TZLT2P2zuuPjzUmClw3kX64yXM.roa (hash: fnAcb1tn2nnIoVX24Iibq3Ab9gwSJ7WX+AekjhFSNg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:dd:2e:d0:15:38:1d:33:7d:46:f8:38:3f:7b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Jul 28 20:00:53 2026 GMT
Not After : Jul 29 20:00:53 2026 GMT
Subject: CN=7e48103686cf3b956314df00f4f5c53530b65e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ee:de:e3:cd:d0:8c:80:65:00:8a:0d:4d:fb:
73:68:30:f4:67:ea:22:07:65:0e:70:4b:9b:1f:a4:
68:ef:f4:c0:90:91:b4:57:f7:f3:0c:05:8b:8a:26:
7c:47:28:7f:41:5c:f7:90:6d:66:2d:1a:87:50:62:
8a:87:6e:22:00:a5:7f:4a:9d:72:91:60:44:cc:9a:
ec:fe:2d:7a:c7:63:4a:a6:31:f5:81:f7:19:2e:3b:
b3:5d:1c:04:6a:e7:ce:79:d4:db:21:c5:15:26:40:
39:23:7e:9b:4b:71:30:0f:84:88:4c:2d:05:d7:f1:
e3:e0:7c:0f:bb:ed:1d:79:e8:8c:e8:eb:ea:09:24:
9d:29:55:54:50:59:db:76:8c:c5:01:30:2d:3e:3f:
d9:7d:8b:fe:1b:14:6c:a8:66:51:35:80:f3:7f:99:
08:3c:04:ff:49:16:e2:47:aa:d3:9a:13:7c:b1:da:
d9:58:67:36:1e:63:c1:d9:ec:6a:74:c6:3a:71:4d:
95:69:06:aa:23:c2:47:19:6f:69:d2:e4:f6:42:a2:
b3:d2:8c:5a:34:76:13:ce:4c:6e:68:a8:b1:64:b0:
a7:d2:c5:6a:ff:ad:0b:14:93:e7:03:b9:86:b1:0e:
ae:cc:af:c2:6e:00:32:54:d4:ff:67:75:c1:21:a5:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:48:10:36:86:CF:3B:95:63:14:DF:00:F4:F5:C5:35:30:B6:5E:4C
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:95:1e:90:f2:c8:93:73:b5:a5:8f:3a:b1:ab:5a:2c:1a:e6:
77:34:c5:00:8b:7c:d7:22:a3:7f:27:b7:ae:4c:3d:8f:3b:7e:
d5:6f:a0:53:a4:66:c0:fe:7f:24:da:ae:14:48:9b:d3:4a:5c:
92:b5:9b:b6:eb:fa:e0:cc:90:44:c9:ad:38:c6:a9:01:3d:c7:
51:17:20:ed:2b:99:29:ac:79:dc:5a:33:a5:4f:25:98:a2:2d:
49:40:02:fc:c6:72:f6:2f:2b:49:12:93:52:13:a0:76:b0:3c:
81:3f:ef:68:7c:98:8d:e0:73:5b:87:f3:d9:e9:f8:f2:6a:fc:
d5:8e:27:11:fd:8e:d5:97:39:69:72:8c:e3:9a:11:a6:3c:25:
9d:f5:2f:9f:aa:3c:e6:b5:0f:a4:93:72:ee:d1:ef:89:42:ca:
af:ed:58:a4:75:e0:89:ef:f9:a5:68:6f:2e:05:7c:63:e7:ef:
1d:3d:88:9a:03:4b:35:5f:15:e9:66:4c:93:ae:51:eb:6c:94:
74:2b:23:e9:74:a1:cb:04:b1:4c:67:16:de:de:88:54:c3:65:
84:6f:09:ca:00:5d:7a:3a:80:e2:a8:b0:b4:e6:bb:20:df:ad:
60:70:50:74:94:86:cd:3d:47:f8:ee:5d:64:c9:ec:34:a8:69:
98:09:b6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:06 2026 by rpki-client