Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
File: 3UbviV9ioiHeWcCl4MubNGn-UgE.mft (raw, json)
Hash identifier: s5hbz4meDp88jB7KukpDn9v5xllC3iuze5wutpwX08I=
Subject key identifier: 63:99:39:C1:14:CF:2C:B6:A5:0B:AD:28:EE:93:3B:02:4F:2C:20:FF
Authority key identifier: DD:46:EF:89:5F:62:A2:21:DE:59:C0:A5:E0:CB:9B:34:69:FE:52:01
Certificate issuer: /CN=dd46ef895f62a221de59c0a5e0cb9b3469fe5201
Certificate serial: 019FAC75FF9E037B5F2A0CF82FFEB697021F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:42 +0000
Manifest this update: Wed 29 Jul 2026 06:00:42 +0000
Manifest next update: Thu 30 Jul 2026 06:00:42 +0000
Files and hashes: 1: 3UbviV9ioiHeWcCl4MubNGn-UgE.crl (hash: LfXxKc84SAwHK/uQ5zSRserfvVKitkCbLOWHib7Nwt8=)
2: Sdcf2dHZqQivboyuko2C7HiYjjk.roa (hash: TB/q3GnkSetf9euk52uPTmgDhdeYTD4KIv37dJknSdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:ff:9e:03:7b:5f:2a:0c:f8:2f:fe:b6:97:02:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd46ef895f62a221de59c0a5e0cb9b3469fe5201
Validity
Not Before: Jul 29 06:00:42 2026 GMT
Not After : Jul 30 06:00:42 2026 GMT
Subject: CN=639939c114cf2cb6a50bad28ee933b024f2c20ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c9:65:c6:d6:15:2d:73:80:80:76:da:d3:8f:
3e:a0:cb:ab:ed:f8:f9:20:3a:a4:07:9e:29:73:39:
29:f9:8d:a8:5f:64:84:a3:ce:f2:27:cb:d3:3d:93:
7a:a9:70:6c:f0:b3:b0:15:12:8a:9e:a1:da:07:d3:
5a:ba:04:eb:b7:eb:bc:33:6e:e4:06:ea:32:c8:15:
5c:f1:3a:35:69:ec:ed:94:96:97:92:96:db:c0:f6:
8a:2f:83:83:67:d7:96:d0:28:a4:95:8d:29:c7:90:
9e:7e:21:6a:ca:86:67:f4:a7:e7:09:04:0d:ff:1c:
98:d7:28:2a:95:b2:3b:cf:d1:06:35:12:5b:e5:5a:
70:2d:29:40:c7:d9:47:55:ff:e8:0b:94:42:ad:79:
ef:3f:5e:e7:78:8a:c2:f6:48:ca:a3:60:f4:bb:02:
37:33:f7:67:88:6a:b6:c5:25:f1:6a:4a:56:21:5e:
1a:75:4f:7b:71:7b:78:a9:a9:4e:7c:7f:b6:a4:92:
7c:57:1d:61:76:2c:48:6a:b4:7a:ef:84:89:cb:fd:
17:bc:be:dc:de:5e:14:db:76:1a:c3:6f:8b:34:a7:
0d:0b:63:4c:59:bb:4a:16:f6:78:cc:42:08:16:c9:
7c:23:39:7f:4d:06:75:a0:8f:1f:71:7d:a0:65:b8:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:99:39:C1:14:CF:2C:B6:A5:0B:AD:28:EE:93:3B:02:4F:2C:20:FF
X509v3 Authority Key Identifier:
keyid:DD:46:EF:89:5F:62:A2:21:DE:59:C0:A5:E0:CB:9B:34:69:FE:52:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ee:57:cf:88:8d:ca:85:e2:ae:8e:a9:a1:89:5a:2f:84:65:
85:ee:df:2e:db:b6:46:22:33:a4:e8:8e:74:2a:92:00:04:32:
95:e6:4d:3b:f1:9b:1d:d5:5e:c4:a3:63:50:bf:98:29:b7:ed:
d7:5a:60:10:4b:92:58:44:a5:c8:76:9c:02:47:6a:fb:30:03:
76:2a:97:a2:34:f6:aa:9a:f9:9b:63:dd:f8:2f:a2:af:c6:2e:
fe:1e:02:d2:b1:af:9c:49:66:ee:b7:38:fb:a0:e0:fe:63:4b:
3f:8b:ac:5a:cd:dd:93:6a:36:61:45:1c:fb:fd:d5:38:14:76:
61:41:4e:d2:57:98:26:b6:5d:fd:24:32:a8:6a:bb:5d:b3:18:
10:e2:95:69:bc:db:be:c4:d3:27:71:ae:4f:96:3b:12:b3:f9:
d4:83:71:63:61:a7:b8:93:35:35:00:66:34:aa:3c:82:19:73:
b5:43:4c:3e:d2:3f:81:88:92:aa:a1:67:89:f1:55:7b:ef:1e:
14:0e:9e:e6:a6:fc:27:93:13:b6:e4:68:66:9c:da:60:44:54:
17:5d:be:bd:e6:42:3a:04:d8:e8:dd:b7:b8:d5:c4:5d:5f:3b:
31:13:d2:37:75:79:4a:95:80:e0:12:19:0f:ad:da:a6:9d:da:
cc:cd:e2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:06 2026 by rpki-client