Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: mFEWA92R4tsgx8Ux3mAWTveAVCLzeOn7tjybId5sG+g=
Subject key identifier: 83:96:39:6D:7C:13:8A:D6:5A:7A:5E:85:DF:48:48:90:CE:9D:7D:73
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 019FA974FCC3A317B0BB46E298A204CAF86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 11B4
Signing time: Tue 28 Jul 2026 16:00:44 +0000
Manifest this update: Tue 28 Jul 2026 16:00:44 +0000
Manifest next update: Wed 29 Jul 2026 16:00:44 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: n/dO6azrnXt2bwD9dK1rE3UF8tcwT8s80BCLlkG/1zc=)
2: ZupcI2nbSj0kv3bOiTJw_7ju_nM.roa (hash: 8lfURhp4+6wvfeyaLwrd59nHvD9zLaiHI+8CWa149w4=)
3: uRzlID_nfuupcIGUXbHpyyUrxts.roa (hash: 5LvqBXGtCHTt2jvIwKxCsctM10tlaiQJ5CWlpcE9cx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:fc:c3:a3:17:b0:bb:46:e2:98:a2:04:ca:f8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Jul 28 16:00:44 2026 GMT
Not After : Jul 29 16:00:44 2026 GMT
Subject: CN=8396396d7c138ad65a7a5e85df484890ce9d7d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f9:b1:90:25:41:8f:85:5b:85:05:19:46:b8:
af:23:5d:76:3f:58:d6:4f:0a:2c:19:58:6c:8c:54:
d7:1f:84:45:bd:55:03:5b:8e:06:28:02:cd:61:b0:
61:4e:50:64:a2:03:2f:55:bb:5a:0f:9e:a1:09:af:
fe:05:cc:0a:cb:14:53:4b:ed:be:7f:0a:c3:d3:bc:
10:16:41:7e:41:72:7b:3d:ca:7c:e2:11:fd:6e:ed:
81:e9:05:71:42:d4:84:91:a2:1c:7e:3d:07:76:0c:
e3:8b:e0:a3:62:36:a4:cb:dc:95:d5:27:f0:8d:46:
57:7e:db:20:c3:3c:8b:0b:c3:a2:19:98:20:c4:07:
c4:97:2e:ef:4c:c5:0e:c9:2f:a4:12:2f:15:21:71:
4e:dc:35:d4:2a:ad:8d:6c:a9:90:8a:8c:cc:87:73:
34:30:ea:9c:6b:53:4a:e4:ea:27:73:ba:4a:ca:60:
bc:79:7c:fe:b8:fd:1f:ee:ad:0e:f1:5f:7e:a8:5c:
ad:4a:75:3b:6d:06:bf:c4:ec:ac:21:a9:de:12:03:
f4:b5:26:93:47:50:ef:ee:10:28:48:b7:cb:0f:9d:
9c:15:bb:1b:3a:71:48:32:72:4f:44:53:5e:2c:f7:
f7:c5:d3:a5:06:61:0d:8f:27:a6:b8:94:02:ad:8c:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:96:39:6D:7C:13:8A:D6:5A:7A:5E:85:DF:48:48:90:CE:9D:7D:73
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:10:e7:c1:9b:6f:d2:1a:ff:02:5a:29:38:8e:9c:36:d8:dd:
b8:11:84:59:88:a7:41:7e:a3:8d:f8:fc:4b:73:33:99:0f:e7:
03:67:0c:96:e4:e3:86:c4:dc:42:4d:1c:74:59:22:6d:e4:4f:
55:03:33:dc:be:0c:e2:16:50:74:de:7c:30:dc:1e:31:76:a1:
51:d2:fa:68:fa:ef:54:be:f0:ac:1a:d1:dc:e6:dd:67:63:c3:
23:17:e8:49:0b:9d:e8:22:d4:25:7f:12:69:4c:7c:df:e6:c9:
4e:af:b1:ff:59:75:9b:c0:8b:38:9c:95:cc:4d:73:cc:8f:1a:
63:19:a0:43:dd:3c:93:d1:d6:d5:56:30:6f:36:34:16:42:b5:
7e:9d:4c:05:d9:4d:d9:b5:c9:ce:75:b0:c7:6c:00:48:b1:f6:
f8:e5:59:60:93:06:d3:cc:c1:8d:31:fb:6b:af:81:7a:42:b7:
8e:90:92:29:65:13:46:c0:32:c5:50:c6:4a:b6:2b:c7:cd:97:
f8:f9:1b:19:32:2b:e7:cf:7a:0a:bb:c7:82:7e:76:10:f2:0c:
14:a3:e5:1d:23:24:fd:cd:eb:75:94:2e:10:29:6c:08:16:3a:
52:ab:26:7e:f7:dd:66:a7:46:b0:be:b4:41:39:f0:98:37:05:
0d:5b:bf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:22 2026 by rpki-client