Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: hPylfj6a3N7PNtULpLzJTsANxED1BOi2mVGDxgQ3tpg=
Subject key identifier: 40:3B:03:3E:8C:6C:DE:B6:1B:B3:85:FB:B1:1D:2C:C4:DB:6E:FA:9A
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 019FAAF58BA4C8B23D387C10442F5CDB5842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 1966
Signing time: Tue 28 Jul 2026 23:00:46 +0000
Manifest this update: Tue 28 Jul 2026 23:00:46 +0000
Manifest next update: Wed 29 Jul 2026 23:00:46 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: SPP4IMStKugr1gsNBhpmt4VwA8yexyhDhHElR0+BzqI=)
2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:8b:a4:c8:b2:3d:38:7c:10:44:2f:5c:db:58:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Jul 28 23:00:46 2026 GMT
Not After : Jul 29 23:00:46 2026 GMT
Subject: CN=403b033e8c6cdeb61bb385fbb11d2cc4db6efa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:ac:ec:6f:54:28:51:9c:d4:77:fa:8b:e0:
10:3f:be:19:6a:72:ff:f3:39:99:3a:8b:3d:70:89:
e3:0c:d3:1f:bf:ef:c6:72:b6:ef:45:2e:0f:2f:e7:
32:1a:42:68:43:db:53:e1:d5:19:8d:df:96:92:80:
d9:df:33:25:3c:9d:c1:a0:ea:ca:1d:5e:49:28:b2:
8f:ae:d0:79:a9:33:c0:79:81:f2:de:70:6c:c5:0b:
e6:4a:ca:20:2a:13:bf:23:c6:70:35:68:ae:d3:6e:
5c:62:50:4b:cb:82:11:16:ad:79:71:11:4e:7e:c2:
bf:f9:ce:f8:a7:d2:02:e8:9b:e7:81:70:4b:f9:fb:
22:ea:79:3e:83:3b:86:e1:47:98:75:2b:ea:10:92:
db:11:6c:07:cb:e1:d7:b1:bb:0c:cb:4b:ca:5c:d5:
ba:bc:00:09:f6:2c:23:1f:b1:8f:b6:87:a6:93:21:
ed:43:b9:90:23:e6:fe:c4:0d:0d:16:54:f9:63:65:
7a:f3:1a:d5:56:13:0d:c1:91:17:36:0b:61:9e:70:
5d:0e:29:a1:e2:7d:9b:f5:25:45:a9:5d:f3:98:bd:
38:d7:de:f4:57:0f:9a:e2:08:68:af:fc:f3:07:18:
5f:5f:47:76:72:e4:84:23:a9:c4:22:d8:dd:7c:e0:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3B:03:3E:8C:6C:DE:B6:1B:B3:85:FB:B1:1D:2C:C4:DB:6E:FA:9A
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c0:e3:ea:72:b7:b9:6c:1d:d3:7d:78:18:5b:d9:8b:0b:d2:
1d:20:6a:f7:49:c2:73:4b:6f:bf:3b:43:af:86:c7:c7:ae:73:
d0:d0:c8:21:7e:64:b6:be:87:aa:5e:a6:51:6e:cc:aa:53:06:
f2:4f:f7:27:f6:5c:f2:40:98:90:2e:8d:6e:42:48:6b:86:e8:
54:d0:96:23:60:17:3a:2b:eb:4b:40:24:f3:62:1b:a8:17:dd:
02:41:73:d9:74:33:9a:ac:dc:9d:b6:f4:13:7c:0c:9c:f8:2d:
b7:1f:c2:eb:62:ad:9e:68:73:09:a9:3c:85:70:a5:a3:bc:86:
fb:40:f5:2c:e2:45:fe:b3:3d:32:87:09:62:58:48:75:92:4f:
55:b0:d2:f0:19:de:48:76:f3:56:f3:3c:32:8b:ce:ad:e2:14:
97:7b:04:a8:5d:c4:a0:fc:91:09:fc:a3:c3:70:d5:3d:6c:e6:
51:44:88:d0:42:8c:df:a5:27:04:31:31:24:51:22:38:4a:42:
0e:08:ff:e9:f9:da:9b:77:c8:05:c7:76:54:94:97:72:9c:1b:
9f:17:06:6f:61:ec:05:e3:21:39:17:a4:e2:fe:db:bc:93:08:
39:7b:7b:d7:0b:4e:39:50:ee:91:3a:4f:d3:2b:98:9e:cb:db:
d4:e1:ee:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:00 2026 by rpki-client