Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: thUudKg/POnz6O/8SdgWcFlRUWrKurSMq4cXv6sIT8s=
Subject key identifier: D2:19:C0:D7:AC:F2:C0:B9:A2:42:64:14:8B:EE:D2:4A:C5:1F:0A:FC
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 01A0C2FBC6951760C1919BCAE294B9AFDB26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 19F7
Signing time: Mon 21 Sep 2026 08:01:15 +0000
Manifest this update: Mon 21 Sep 2026 08:01:15 +0000
Manifest next update: Tue 22 Sep 2026 08:01:15 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: jpmEzzZOGsS3TSixhAZxbmT7Vc/PVi7PdPk+Rb3jvjQ=)
2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:c6:95:17:60:c1:91:9b:ca:e2:94:b9:af:db:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Sep 21 08:01:15 2026 GMT
Not After : Sep 22 08:01:15 2026 GMT
Subject: CN=d219c0d7acf2c0b9a24264148beed24ac51f0afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:8c:98:fe:fc:92:3d:b3:df:15:d4:0b:a8:
1d:fd:7b:f0:b3:ba:61:e7:de:d6:35:1f:32:82:15:
d5:a6:04:f6:f2:c5:0c:80:24:85:f8:06:34:ee:5a:
1f:ad:e4:05:ec:81:30:34:49:83:8f:95:be:85:24:
a0:4e:1e:cd:c3:b9:2b:b1:52:9d:b7:0e:c1:e9:c4:
3c:61:e2:fd:94:19:69:9f:8a:0f:26:03:b8:f8:c6:
d6:c5:2e:4d:72:bc:fa:c3:3c:b6:39:a4:8a:5c:89:
a2:7a:e6:c0:50:8e:92:9e:d9:b7:46:33:69:eb:a3:
99:76:1a:1f:9a:cd:6b:04:77:d3:61:d2:0c:12:56:
df:45:f7:f9:48:bd:10:fb:41:33:4d:fa:99:8e:7c:
c5:0c:18:42:3c:65:02:49:03:ea:b9:8c:f3:6c:fe:
b1:90:0d:3f:a5:0e:d2:4d:32:0a:67:bc:1c:d6:a9:
9b:31:e8:55:f2:45:08:ce:71:fb:5e:f0:3e:ec:be:
c5:52:ba:1d:33:21:e9:4a:a9:0d:41:6b:4a:3f:6d:
20:e0:b7:1f:f5:7f:94:2d:95:98:29:88:b3:e8:56:
e4:c4:9a:0f:1c:6e:2c:f1:12:de:fa:73:e7:d6:60:
b2:d2:86:e5:df:8c:db:24:c0:79:ff:04:93:05:ec:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:19:C0:D7:AC:F2:C0:B9:A2:42:64:14:8B:EE:D2:4A:C5:1F:0A:FC
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:39:69:70:45:ec:ec:66:1f:82:bf:a0:f9:77:24:c4:2f:f8:
67:ea:1b:97:c4:da:de:b4:c5:47:24:65:ea:e0:ee:3b:b0:52:
77:22:88:20:35:97:e5:92:10:ea:ae:7b:b3:08:8a:b0:71:f4:
c5:c5:db:77:72:7c:23:0d:e8:e5:c0:3a:0f:de:28:03:fa:66:
3a:db:f4:f3:a7:46:2e:47:83:db:d1:76:65:98:71:a5:b9:b9:
b7:bb:4a:da:22:ad:aa:1b:cc:be:04:dc:4e:85:3c:e0:16:91:
ea:05:4a:91:b0:73:d2:99:28:8a:d8:79:fb:13:81:e9:11:52:
c1:de:5e:4b:8c:e1:81:7e:ee:c9:19:69:55:43:90:74:b0:e2:
db:af:d8:71:88:60:07:ec:f1:1c:5f:51:fc:c7:d2:51:4f:76:
48:40:05:f5:a3:52:a9:c9:fa:23:46:2d:52:3f:cd:ae:ba:6f:
f9:34:8b:2a:2d:12:da:f8:32:aa:dd:e4:80:bb:e9:84:3d:84:
41:ca:e9:71:a7:a8:f3:7a:8a:71:18:9a:6f:60:59:da:1a:49:
5f:39:77:df:15:4f:32:86:86:5e:8b:23:7f:90:73:be:59:00:
d9:5f:51:a7:56:8a:6b:36:85:15:9b:09:56:aa:e2:7a:b0:17:
b7:3d:a9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:04:05 2026 by rpki-client