Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier: wXLPi29w2lH6HTywl4p8ddnK2A62GVe8gF4GhCtJajo=
Subject key identifier: 51:63:E2:B8:85:A6:00:0C:0A:58:37:82:6E:B1:56:30:3C:02:5D:4A
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial: 019FA9E2F53B6C8B3C87428EC56A0C6B239E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number: 1968
Signing time: Tue 28 Jul 2026 18:00:51 +0000
Manifest this update: Tue 28 Jul 2026 18:00:51 +0000
Manifest next update: Wed 29 Jul 2026 18:00:51 +0000
Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: 2YsqXcpgujhcT1QZIBS5zaWldrkIHoyV6rWKvQDgimA=)
2: Ul8b11My9gvvpOwu_4T6lfCZjCI.roa (hash: ihknx/rKkWDFephobjW9oz0pq89+mPfWzCnTBwHVamY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:f5:3b:6c:8b:3c:87:42:8e:c5:6a:0c:6b:23:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Validity
Not Before: Jul 28 18:00:51 2026 GMT
Not After : Jul 29 18:00:51 2026 GMT
Subject: CN=5163e2b885a6000c0a5837826eb156303c025d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:68:41:a9:01:c1:ff:d7:ee:bc:84:71:3f:
15:4d:4d:1b:2e:48:7f:04:57:16:b5:4d:58:ae:26:
8a:17:61:a2:bd:b9:b8:b0:8a:4f:75:66:9e:e5:20:
0b:ad:db:d4:4c:1b:5b:76:24:5a:91:32:dc:85:eb:
39:7f:99:72:bc:fb:58:ee:76:5c:af:35:5f:34:e5:
a2:24:54:ad:90:e7:a7:5a:68:ac:70:24:75:68:33:
09:b5:e5:14:5b:84:d1:e6:72:35:65:59:11:2d:79:
75:e5:c5:3e:72:43:27:c5:67:7e:d2:53:06:0f:40:
bf:67:ad:b3:24:9e:5f:c4:0e:66:72:fc:21:74:2a:
dd:e0:4a:e0:f7:83:e9:af:ac:03:72:47:2b:d1:5e:
b3:ac:67:98:ee:ba:26:10:a6:3b:02:41:10:47:fc:
3e:aa:88:8e:24:eb:00:ab:1c:0a:af:94:f3:13:5b:
97:22:98:cc:fd:b3:a2:88:cd:19:77:91:a4:1b:87:
d5:08:9f:78:98:78:d2:98:ea:58:45:e9:1e:41:3d:
7e:e6:5d:1d:6e:70:f4:a1:0d:cc:b3:8c:58:f5:e0:
66:64:af:da:11:fe:10:e4:06:56:39:92:c4:bf:b6:
40:0b:8b:18:b8:19:09:ef:03:b3:a4:9b:3c:ef:d7:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:63:E2:B8:85:A6:00:0C:0A:58:37:82:6E:B1:56:30:3C:02:5D:4A
X509v3 Authority Key Identifier:
keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:84:a3:fe:f0:18:1c:4a:0c:43:ac:4c:95:26:41:ac:8d:a3:
9a:e8:33:32:d6:b7:19:a0:3d:ba:9a:e0:9f:1a:4e:b9:d1:60:
67:6d:77:0f:0f:27:5d:15:86:69:8a:00:e5:44:16:59:6e:70:
44:3b:8e:3e:e2:c5:0c:ba:fc:ea:06:6d:dc:1d:36:36:25:88:
44:9b:9a:fe:55:24:c0:28:0a:4a:c9:21:0a:e4:a7:ed:63:11:
25:50:8e:5b:d4:1a:31:6c:34:93:bc:89:3c:ca:6f:34:42:5e:
ed:a7:17:27:8a:e0:be:4f:d1:2a:48:9d:2d:09:38:83:78:aa:
73:9d:be:73:3b:37:20:67:31:23:99:b7:82:60:e9:13:d9:b4:
4e:df:96:8a:2c:dc:ac:16:e1:a5:17:30:82:20:e1:e9:9c:2a:
2d:48:93:a9:a1:57:fe:95:48:b1:40:cf:cd:81:37:34:19:42:
b4:c4:a9:64:50:3b:cd:e9:2f:a2:2a:3e:92:12:53:cc:c7:d6:
89:ab:08:79:10:3d:6f:c9:62:c3:56:13:8d:3b:92:c3:ef:0a:
fd:fa:39:85:a5:14:ff:dd:96:2f:68:a0:96:7d:7a:1d:b3:e7:
16:6a:8e:1f:e7:8a:d6:36:93:a8:6f:9d:94:ac:8b:6a:55:f1:
5f:e4:4b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:31:48 2026 by rpki-client