Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: i9zNdPhY9sny6czwqKD7bz/imfL+K0xhg2ruQExw+Cg=
Subject key identifier: 53:89:13:CD:E7:08:5D:C8:A1:F7:38:1B:58:FE:F7:29:09:64:C4:EC
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 019FAC772BF4434578A625D875511CEAF7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 1488
Signing time: Wed 29 Jul 2026 06:01:58 +0000
Manifest this update: Wed 29 Jul 2026 06:01:58 +0000
Manifest next update: Thu 30 Jul 2026 06:01:58 +0000
Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: woy8dZ1XHe++PmT05/lEAqoRjeabio8pr0fpLkqmJq0=)
2: SO6QjR1hksAlM1LEwjsSfqyQA6I.roa (hash: ywShTaMxtKmWmIhHqGYn82a6dMwPRqUZ2JHI/iurJ+w=)
3: Y89C32NzpkA3PQGSAOSpiB1CVZA.roa (hash: A3b0H1rBdmLPnm3DdKs/p6L4k7I984tyefEWdXhVLr0=)
4: csf31rqb-Vtp8DxAcvND5Xzia2g.roa (hash: tIcC2hzx8VFbqFhPv8CNA+NzwFonxl1ILY4nFDsUkqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:2b:f4:43:45:78:a6:25:d8:75:51:1c:ea:f7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Jul 29 06:01:58 2026 GMT
Not After : Jul 30 06:01:58 2026 GMT
Subject: CN=538913cde7085dc8a1f7381b58fef7290964c4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:e6:a2:d3:f5:01:ee:e0:ec:b1:d8:b4:70:
73:86:0c:33:b1:6a:22:53:87:28:73:83:f3:34:07:
04:ee:a6:31:5e:c2:1a:8d:9c:47:f1:75:58:4f:db:
9f:bb:95:b6:80:7e:4b:6c:da:1b:1e:8f:e2:60:59:
c9:c8:89:33:ff:a8:49:88:74:7f:ed:7b:5c:a7:7d:
e6:a7:bf:c4:3c:18:71:f2:a6:0d:69:27:17:04:f5:
59:25:a3:a4:8d:5a:0c:73:6f:ae:61:e6:1f:90:b8:
e0:cb:0f:fa:1c:a4:9d:4d:e1:ac:59:10:f6:44:47:
70:be:49:92:b4:30:eb:64:bc:8b:21:d5:30:19:5c:
df:d4:18:fb:70:be:d7:1b:01:83:28:d9:f8:5a:e5:
7d:78:a2:a2:1b:e5:44:6e:de:a1:17:d8:7a:21:64:
63:03:5f:aa:b8:d6:7b:93:b6:af:2a:87:d7:5a:40:
dc:5c:b0:3c:9b:1c:11:af:52:29:a3:e4:56:a8:91:
0d:fd:cc:d3:0e:0c:88:bc:0d:09:1e:20:57:8e:12:
cf:eb:9c:f1:8f:d3:30:b2:7a:7a:96:c6:6d:9f:16:
ea:eb:d4:cf:4b:bc:aa:c0:21:65:cb:8b:51:a4:09:
5c:d5:23:28:be:38:ab:29:a2:be:02:06:06:96:d1:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:13:CD:E7:08:5D:C8:A1:F7:38:1B:58:FE:F7:29:09:64:C4:EC
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4e:b7:b9:0a:70:49:c1:9d:f4:f0:03:46:f0:c6:96:c9:f2:
12:51:35:ab:10:f0:8d:f0:a0:39:6f:a3:68:e8:d1:42:61:8b:
7b:3f:af:15:f7:88:a6:ed:b1:fa:b9:e9:b3:9d:33:9d:66:32:
55:53:f0:f6:f9:52:42:30:ff:08:50:a5:f8:53:19:5e:80:1d:
33:4e:75:9c:5c:bf:0a:39:ec:7f:78:04:c9:9e:e3:60:30:08:
36:83:94:01:53:64:90:a9:cf:c1:bb:2b:b4:8f:4e:e6:4c:64:
25:19:c3:7b:56:cb:dd:b2:85:d2:b3:b3:4f:55:12:25:77:32:
d6:76:9e:a6:bb:28:01:cd:11:6a:a1:a8:90:fa:1b:84:09:c8:
de:db:71:61:8c:b6:d4:37:75:04:63:f8:6d:1b:48:b1:fe:12:
c3:4b:4f:a4:9c:59:31:13:08:8b:db:f8:46:fa:6f:e2:26:7f:
61:e6:92:57:b3:c0:61:18:5d:3b:f5:58:53:d0:09:dc:65:68:
f9:3c:cf:0b:44:2a:35:ef:d9:21:6c:10:09:20:38:a7:16:bd:
82:7b:5e:71:24:b5:16:ad:59:af:87:64:59:e9:28:94:32:9a:
48:5f:bf:bd:f0:83:4c:85:5b:41:b8:89:10:5a:fe:28:23:e6:
ba:07:ac:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:10:53 2026 by rpki-client