Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: yZRNvHwLJtzsiiB4OtMNDm4/uhg8fdGvWElB8ldncTk=
Subject key identifier: 13:07:A4:05:61:49:63:9E:6B:69:31:70:BA:65:40:52:83:50:65:F2
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 019FA899711E5B615165176D8EE1A7AD251D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0EF9
Signing time: Tue 28 Jul 2026 12:00:56 +0000
Manifest this update: Tue 28 Jul 2026 12:00:56 +0000
Manifest next update: Wed 29 Jul 2026 12:00:56 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: aBeUjOGn4aIvK4X5MZIaIYLhRDkeValUdtG6tuGqf10=)
2: KUy8l_kE9Ez8yOXsZsPg_xu8U88.roa (hash: Q8NXv7/aGohuJqdBeBqSqaYcBq21Vr5wijgoX0wzMFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:71:1e:5b:61:51:65:17:6d:8e:e1:a7:ad:25:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Jul 28 12:00:56 2026 GMT
Not After : Jul 29 12:00:56 2026 GMT
Subject: CN=1307a4056149639e6b693170ba654052835065f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:3e:66:de:92:a8:30:75:d8:e5:09:2c:dc:
45:c9:b5:37:86:6b:7f:78:6f:18:2b:b5:a9:d0:c3:
f4:03:64:64:b2:d7:f9:98:f3:09:92:51:77:f8:9c:
56:a9:cc:34:7d:02:07:4c:2f:56:2d:ac:10:4b:3c:
13:c1:8f:2b:35:2f:f2:0a:54:e5:25:f1:91:54:3c:
92:7f:52:37:5f:30:96:16:54:f5:c5:75:69:50:81:
46:41:a6:b4:1e:5d:80:6b:ee:3d:b2:78:5b:e2:b0:
0a:f1:60:8f:18:02:3f:05:3a:39:67:84:47:e4:0b:
6a:f5:59:dc:df:b6:38:da:92:ee:11:89:ad:36:45:
56:01:70:d6:24:39:44:2a:07:ba:93:34:16:fe:43:
68:55:ab:08:fc:b9:ff:47:6f:41:c4:77:5b:64:1d:
ae:14:9a:3b:1f:d9:ca:c1:50:dd:6e:39:43:1c:47:
32:ee:47:5b:22:0c:29:6d:3d:b9:4c:47:7e:ad:e4:
00:81:7b:21:5a:6c:0f:91:99:66:b1:8c:1b:12:a3:
2c:8d:aa:4e:b3:16:9d:c5:4c:2e:8b:40:0f:b8:69:
ae:f1:9a:d5:c6:39:de:5d:a7:39:18:74:10:12:51:
0e:1d:c1:50:1a:21:29:f5:13:40:b7:4b:af:81:a3:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:07:A4:05:61:49:63:9E:6B:69:31:70:BA:65:40:52:83:50:65:F2
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2a:a3:ff:07:95:86:26:47:69:72:36:94:79:c1:41:0b:ca:
9f:84:ab:d3:dc:a6:84:6a:a2:22:12:b9:cb:29:05:a3:56:3d:
4e:06:76:25:9d:b0:36:04:77:87:c4:25:0f:53:e9:36:7b:d2:
d1:61:bd:40:ad:20:26:d5:6d:de:2d:72:9f:d1:1c:e9:e4:7b:
f0:fe:d1:6b:c8:da:79:41:e8:f4:56:aa:ac:49:da:f4:37:ac:
89:14:b4:6f:9f:96:71:98:73:12:2b:7b:7b:0e:8d:05:40:07:
18:03:39:5e:1f:c2:64:2b:9f:1e:9e:60:b0:0e:78:1a:96:3f:
46:56:63:97:05:01:d3:33:a1:44:5e:c6:2f:84:5c:ee:1b:b7:
7c:cb:7e:11:d8:c7:52:5c:e1:e7:22:d7:d8:7a:a5:48:aa:24:
1d:5b:83:8a:6c:3f:80:00:c6:29:3e:f5:ae:aa:f8:5a:63:b4:
f9:6c:3e:df:25:43:aa:a6:82:87:82:02:35:59:27:30:12:8b:
a6:c3:a6:53:bf:e3:14:0f:1b:1e:fa:7d:3d:fb:4c:d9:e2:72:
38:95:ce:7d:6b:f5:59:7f:03:4f:e0:58:88:32:d7:7a:13:04:
3a:b2:16:e0:c4:de:e6:e5:1a:bc:59:db:80:b3:d2:e2:30:bf:
52:ec:17:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:59 2026 by rpki-client