Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier: TOFBEs+qz/UE/UCXj2/pZhZrBY+EDqLLIEyWXcZXQ/Y=
Subject key identifier: B8:EA:A4:BB:84:E3:7F:A3:2D:91:D7:9D:53:EE:F1:E0:0D:B9:8A:4E
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial: 019FAABE56F8AEDA9D0A94C7EB3B9F70FC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number: 0CF2
Signing time: Tue 28 Jul 2026 22:00:28 +0000
Manifest this update: Tue 28 Jul 2026 22:00:28 +0000
Manifest next update: Wed 29 Jul 2026 22:00:28 +0000
Files and hashes: 1: 3eK1ZL7O23CEW3-d4NQhqQce6UE.roa (hash: MyvSzm1E1BuNXsJH9y2br5JSC+bFdaTi0xbtRaMTOVk=)
2: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: NUPwRn6djhTeqGqZCAW0naoImGV3XNzyZX+/5fNNGRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:56:f8:ae:da:9d:0a:94:c7:eb:3b:9f:70:fc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Validity
Not Before: Jul 28 22:00:28 2026 GMT
Not After : Jul 29 22:00:28 2026 GMT
Subject: CN=b8eaa4bb84e37fa32d91d79d53eef1e00db98a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:1f:ef:20:58:99:e2:d9:72:be:62:a3:18:
ee:38:7c:7d:ca:2f:08:7a:2c:5e:5e:77:1b:ab:6f:
7e:45:a9:7e:99:67:39:f6:bf:b6:43:67:ee:d4:09:
3f:34:cf:ec:28:86:a6:45:f6:86:02:b3:77:15:3f:
77:e5:54:53:4e:77:fd:8e:43:c7:a7:c1:e9:96:1a:
03:b8:d0:bf:2d:ff:36:4d:60:58:44:15:9e:f5:cd:
dc:df:66:4a:e2:3b:21:3e:af:e7:87:f8:64:05:c9:
a7:56:47:5a:05:26:e7:6d:00:73:32:83:74:f8:95:
6e:9d:27:b6:d0:bc:71:a7:a0:71:e7:35:75:11:55:
99:e3:30:b9:42:a4:af:5a:5e:05:54:a8:f6:49:58:
86:91:70:ab:6a:3e:42:af:ab:01:f1:3c:b0:18:a5:
25:a9:c9:b0:0d:96:2b:d8:78:27:4f:a3:4f:9b:5f:
2d:c2:31:83:4c:a4:01:8d:2e:d0:ea:7d:36:f1:97:
a4:d7:17:39:db:af:b1:c6:19:06:f9:f6:ac:3f:a7:
8c:06:4f:f5:69:d4:62:48:75:6f:13:b4:1d:42:2e:
9e:7e:83:07:fc:d4:53:f7:b2:2e:91:7b:1a:d2:09:
8b:2f:33:c6:72:ce:0c:b1:39:cd:64:65:9b:da:24:
34:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EA:A4:BB:84:E3:7F:A3:2D:91:D7:9D:53:EE:F1:E0:0D:B9:8A:4E
X509v3 Authority Key Identifier:
keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:90:28:46:6a:e3:25:2f:c7:5c:e4:0f:77:c5:00:72:90:3b:
2e:e2:97:8e:1e:e9:32:92:ff:68:fa:1f:8c:f3:8b:6b:d8:30:
d6:f6:dd:fd:64:cd:17:be:49:00:15:0e:56:da:f3:e0:dc:a4:
10:ed:d1:67:a3:bd:3d:29:4e:a1:c7:3f:de:eb:74:f7:21:c6:
e3:13:ac:c1:f4:11:d4:45:59:30:f0:5d:05:6b:45:90:10:41:
9a:6d:46:a0:0a:dc:e2:4c:88:ca:56:8f:ef:df:12:0b:fc:c5:
07:8c:8b:8d:52:33:9c:c2:9b:5a:54:54:d7:b7:18:2c:2a:05:
b4:9d:e2:ff:30:46:0c:4a:dc:04:8a:8a:5b:f8:cd:36:e2:8b:
0f:a8:05:cb:0d:93:12:e0:48:05:e5:b2:92:0b:ab:06:07:56:
d8:1f:c7:4b:c0:61:24:74:7c:41:2b:f6:e5:76:7e:ae:10:69:
22:e9:51:fd:fd:9e:ed:7b:6e:f3:ab:91:e9:47:32:c5:c0:b2:
a6:45:80:e2:6b:90:8f:44:cf:2d:aa:c1:45:0e:a3:09:14:78:
6a:ef:49:93:05:0c:8c:25:66:a5:91:b3:72:45:af:7f:0a:7c:
0a:be:c5:b3:c8:e2:9b:cf:d7:1d:bf:b8:38:e7:33:df:98:fb:
85:ae:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:13 2026 by rpki-client