Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: GHdPbWEXZaBzoCrz+OFm71diDJe0xU09Mabjq46vEbE=
Subject key identifier: F6:5A:5B:44:34:65:1D:44:3E:7F:33:3F:CD:EF:91:BE:7F:59:5E:74
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 019FA906DD8C99427E8CAF39A00630FDF5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 14:00:26 +0000
Manifest this update: Tue 28 Jul 2026 14:00:26 +0000
Manifest next update: Wed 29 Jul 2026 14:00:26 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: eAA5gwqs4xjt/RsYf0H4NyzaVI6IOF3LnN5V49wEaaI=)
2: 6K26AJnKFSRQ6qeqQiaBSR5tmsk.roa (hash: Uasee9UdIsrJgyTXIlKOU2BJMKL73nIUt5Ls4sJkN9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:dd:8c:99:42:7e:8c:af:39:a0:06:30:fd:f5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Jul 28 14:00:26 2026 GMT
Not After : Jul 29 14:00:26 2026 GMT
Subject: CN=f65a5b4434651d443e7f333fcdef91be7f595e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:ed:1f:62:a2:7d:5d:cf:98:64:82:34:e6:
eb:56:cf:49:c1:d7:23:39:53:2b:9e:b0:13:70:8d:
dc:7c:be:d4:f7:40:99:28:c1:5b:50:99:ca:50:2b:
af:4d:31:94:a6:91:64:96:2d:3f:ec:7b:d9:46:b8:
99:9e:7c:66:de:98:df:b8:9c:b5:30:ca:73:db:cd:
2a:26:eb:e6:9d:1a:f8:54:95:ec:9e:23:0b:48:d4:
60:df:86:30:32:6f:d5:29:ba:a3:fd:8d:25:d9:fe:
16:57:68:ea:f8:fd:d1:28:e0:aa:66:88:19:6b:65:
ce:42:96:20:09:a2:8f:cf:b9:a0:03:0d:f0:83:de:
07:a2:69:05:25:ba:6c:64:3e:41:78:c6:91:77:e4:
10:04:ec:4c:38:35:f2:f1:c5:84:61:ad:8b:ad:bc:
31:70:2c:48:1b:a4:11:2d:fa:8b:07:44:1b:a1:d9:
dd:26:2d:b1:5c:53:ae:da:52:7d:1b:16:26:9b:cb:
89:cc:8a:e7:9e:20:90:d0:de:42:53:1d:db:49:bc:
eb:6c:7d:10:0c:c5:b3:1e:d5:2c:6b:14:4b:64:00:
c8:33:1a:8d:f2:95:88:c7:5f:d9:17:46:6e:e6:52:
88:00:31:29:0f:60:53:89:45:04:82:12:bd:40:2d:
9c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5A:5B:44:34:65:1D:44:3E:7F:33:3F:CD:EF:91:BE:7F:59:5E:74
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b2:78:36:a1:71:13:0c:4e:3d:c3:55:0f:58:95:b2:10:dd:
e9:a5:c8:e2:7e:b1:f4:90:a0:b7:9a:08:45:f2:b2:71:0a:95:
4c:26:42:79:de:cd:7c:1f:a4:88:b6:19:62:bf:1e:c2:3b:4b:
29:fa:60:04:d2:85:34:8a:1f:4f:f3:b2:54:e3:24:0c:a0:b4:
32:fe:09:17:ca:62:f6:97:29:43:cb:67:76:d0:be:50:4d:59:
92:1d:51:a6:87:a8:41:54:c4:d0:6c:77:6b:ae:70:5d:d6:2e:
f7:e3:c5:5f:62:67:1f:97:1c:47:8b:7f:f7:4a:78:ec:ad:a6:
03:85:d7:0f:03:32:ab:5f:8e:51:cb:b0:24:81:58:34:bf:27:
ec:3c:05:98:87:cf:59:29:66:e4:e6:a9:49:0b:2b:46:58:c9:
1c:64:9f:e5:98:c9:b0:3e:a2:4f:2d:c6:7d:53:de:f0:8b:ec:
23:55:00:c4:bf:89:4d:c8:51:68:2d:7e:10:52:13:92:40:06:
f7:0b:07:f9:4c:ef:ed:67:ac:4a:6c:e6:fa:90:f5:99:b0:e4:
f2:c4:a2:ec:47:20:81:d4:76:24:20:0e:b5:1c:31:43:c7:12:
73:05:8c:40:5a:ed:09:41:50:c6:ae:77:a3:72:72:1a:9e:1b:
3e:ac:62:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:16 2026 by rpki-client