Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: l0z6dUbAqdTWd/R8H3IXwfumT34GbxU/tP2BWqFiRtE=
Subject key identifier: 49:EE:1B:B4:20:79:82:F0:28:BB:63:9F:F0:DF:94:C5:C6:9C:E6:AB
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 019FAA1A81F154AF2295FA6E8F2C0321379F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 10B8
Signing time: Tue 28 Jul 2026 19:01:31 +0000
Manifest this update: Tue 28 Jul 2026 19:01:31 +0000
Manifest next update: Wed 29 Jul 2026 19:01:31 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: zQRXFmXeKx9IiAOrKq9lWETfspSZyNYu6/IZ3pCQUsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:81:f1:54:af:22:95:fa:6e:8f:2c:03:21:37:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Jul 28 19:01:31 2026 GMT
Not After : Jul 29 19:01:31 2026 GMT
Subject: CN=49ee1bb4207982f028bb639ff0df94c5c69ce6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e7:34:66:42:99:32:b0:8c:36:01:30:40:27:
32:ea:80:d0:9f:92:8e:cc:fb:1c:86:a6:2f:1e:70:
d2:87:63:62:f4:cf:07:30:50:87:b6:f4:69:f7:aa:
33:4e:7e:e0:c8:e5:76:14:2e:c5:10:cc:e7:51:50:
7f:8d:51:cf:3b:ca:ed:26:1e:ba:2c:7c:30:8e:fa:
cc:f7:94:8e:3d:ef:d3:9f:60:d7:4d:92:ea:b2:47:
a8:90:ff:13:81:31:27:9e:0e:6e:88:49:e5:70:9a:
5b:c2:0f:9c:ba:a4:25:96:1b:79:a7:b0:21:28:4b:
6a:a6:ef:7a:77:23:b3:8f:47:cb:1d:14:16:c8:a1:
9c:61:c1:98:62:74:97:d3:94:f8:9b:20:b9:86:b9:
eb:90:c8:af:05:2c:92:9e:fe:e0:af:0f:2f:f0:c3:
38:79:78:cc:d7:59:7b:e0:2a:70:a7:e8:1b:98:58:
70:3a:62:7e:87:00:b6:2c:7f:5c:04:75:9d:7c:2a:
92:e3:2f:61:4a:a5:64:c5:62:af:ff:4d:98:99:fc:
e2:92:02:4f:fd:44:92:e5:58:bd:22:90:11:3f:2e:
a1:36:66:8b:46:8e:9d:21:4d:a2:bc:25:74:60:bc:
a8:b1:1f:72:5b:1c:db:12:c8:70:e2:c8:b7:17:9e:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EE:1B:B4:20:79:82:F0:28:BB:63:9F:F0:DF:94:C5:C6:9C:E6:AB
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cf:7e:3f:ad:a0:b9:69:fe:b6:cd:f9:63:f9:54:3d:e3:f8:
ab:06:7d:55:b6:65:e9:97:2d:79:1c:2d:0e:a4:ba:d2:16:3c:
45:5c:d9:c2:38:ee:ea:9d:a7:bb:ed:70:6b:9b:6b:b2:99:3e:
76:dc:99:09:59:64:34:fd:c1:68:0b:19:0f:c2:9a:1e:3c:d7:
c3:b0:26:1c:32:60:c3:e8:d2:6c:fb:62:6c:18:69:4c:b1:65:
dd:8c:47:0a:7a:e3:1d:e7:26:e7:43:e7:83:86:3d:54:d7:80:
a4:87:6b:4d:92:ea:1a:2d:1e:99:f1:2a:fd:f0:7f:0c:6e:b9:
cb:15:57:c7:6b:6b:81:fe:90:ed:c1:b4:8c:c3:5b:45:bb:dc:
41:d0:44:4e:96:67:bf:f0:d5:9b:2e:e5:0b:a2:07:4b:4d:2f:
c1:0a:00:72:c7:e4:5f:e1:c8:79:cd:da:b5:32:80:4d:71:4b:
70:f0:46:24:e3:ab:67:67:c6:2b:bd:7e:3e:74:63:db:a0:72:
1a:d4:24:58:ef:a7:ad:0a:90:47:33:86:9f:9b:7e:99:44:60:
44:93:1a:d2:cf:a5:ae:ed:df:31:31:16:71:00:e0:60:df:52:
c9:d3:78:0e:5a:75:98:ad:0b:92:7e:72:8f:e4:b9:c5:7f:24:
4d:d6:5c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:09 2026 by rpki-client