Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: TV/8dGhjsKncu+z9TH2NyHIGIXRhQdnWeFTU5wUAUKs=
Subject key identifier: E0:E6:92:FD:8F:EB:5A:AB:E0:DE:9F:68:72:00:65:99:E9:5B:AD:3D
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 019FAA1A74D83AC2E0DE191B18A482FABC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 18B4
Signing time: Tue 28 Jul 2026 19:01:28 +0000
Manifest this update: Tue 28 Jul 2026 19:01:28 +0000
Manifest next update: Wed 29 Jul 2026 19:01:28 +0000
Files and hashes: 1: 2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa (hash: UnzgZZ3TVB6578Tog21CNFea50mTLp1x803U9EWHzmU=)
2: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: 4qWz5uRWKhhRcB9p+dezOj2ChkKUXmLX9VNsit5Bvhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:74:d8:3a:c2:e0:de:19:1b:18:a4:82:fa:bc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Jul 28 19:01:28 2026 GMT
Not After : Jul 29 19:01:28 2026 GMT
Subject: CN=e0e692fd8feb5aabe0de9f6872006599e95bad3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:05:db:d7:6f:2f:5f:95:25:2b:68:fb:20:
57:4e:3b:13:f7:e8:7f:0d:72:db:79:bf:b7:bc:a6:
33:aa:0d:39:bc:e1:6f:45:c3:6a:a1:ed:7e:36:fe:
20:b0:5b:60:06:3d:7b:bb:ab:e5:41:7e:91:4d:5d:
78:62:9e:6a:87:24:9f:75:fc:90:67:fa:b2:22:7d:
7d:01:ef:53:91:53:5d:f0:ec:96:58:49:9d:4e:51:
b9:80:81:f8:99:50:43:6d:8e:82:94:db:63:c2:62:
21:c4:89:8b:fa:1c:dd:5e:bb:36:a7:6b:39:f9:83:
dc:69:8a:ea:ae:a9:c2:7a:85:5a:ad:24:13:d5:df:
73:ec:62:c2:c5:24:73:98:19:d8:dd:fa:db:a5:d3:
44:12:9c:95:08:e7:8c:7f:2f:e5:c7:19:42:a7:67:
f2:9c:35:4d:88:f6:cd:fd:30:22:ad:43:71:43:6b:
e8:2a:c4:ee:dd:41:5a:c6:ad:4a:ef:5a:92:82:6a:
3c:34:b5:c4:cf:e1:c0:3d:97:ea:6a:02:5c:d4:b1:
a2:fd:02:f7:7f:4f:43:cf:d9:d6:4d:cf:2d:56:5f:
6e:f6:79:c6:b5:36:4f:1a:58:52:f2:89:44:84:0d:
a3:5f:8a:a3:86:dc:f1:76:bc:d7:f3:61:87:b0:39:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:92:FD:8F:EB:5A:AB:E0:DE:9F:68:72:00:65:99:E9:5B:AD:3D
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:60:6e:6e:fd:0b:b8:d3:00:7c:bd:d1:15:31:7b:e6:5d:06:
ce:af:5b:71:38:dc:73:6d:f6:5f:d0:d8:9d:90:2c:a4:75:97:
60:5b:e1:2b:1e:c2:57:d5:2b:a5:98:42:25:6f:0d:50:fe:41:
c5:45:ee:0d:a1:fb:43:dc:43:12:65:c4:69:f6:71:8e:25:93:
0b:d8:fa:5b:3f:5c:26:60:53:22:13:42:96:ee:eb:5e:b7:32:
52:26:0e:ff:b2:5c:50:67:c5:d4:44:30:d5:f8:6c:9e:2c:8f:
e0:65:45:ed:04:31:b9:c2:14:9a:62:6d:c3:44:d7:cb:2e:a9:
d1:3d:94:b6:e0:be:5c:fa:ae:ec:45:30:f8:af:87:39:75:86:
33:2b:f3:f3:5b:16:75:4a:68:6c:68:1a:ea:e8:f9:19:89:1a:
f5:bc:e0:51:ad:14:33:f0:7f:74:52:24:d7:91:90:44:15:b1:
b9:c5:11:dc:75:7a:bb:d5:5f:4a:54:6e:75:fd:b1:ad:ed:2c:
da:f7:d3:e0:46:87:7d:41:44:b4:1e:a9:11:6f:52:c8:0d:46:
a7:34:37:ff:83:a3:71:e3:9a:a5:dd:19:c8:b5:36:9f:f6:60:
53:58:c2:a5:c7:83:ff:c4:1c:6b:a2:64:c9:e3:96:b6:52:c0:
89:29:0d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:57:57 2026 by rpki-client