Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
File: 3gKSn1rIw0n-qYVSnBcU58yVz80.mft (raw, json)
Hash identifier: LgeyW+Gr5gGNikmguVB5Axm3NELt1Ps1GSZGiVWMB4A=
Subject key identifier: 80:CB:36:76:41:C1:C2:F8:2F:88:B9:C8:F2:C9:7B:2D:44:AB:9A:7B
Authority key identifier: DE:02:92:9F:5A:C8:C3:49:FE:A9:85:52:9C:17:14:E7:CC:95:CF:CD
Certificate issuer: /CN=de02929f5ac8c349fea985529c1714e7cc95cfcd
Certificate serial: 019FA89935B4BA868DBCB3D2BD2623473E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:40 +0000
Manifest this update: Tue 28 Jul 2026 12:00:40 +0000
Manifest next update: Wed 29 Jul 2026 12:00:40 +0000
Files and hashes: 1: 3gKSn1rIw0n-qYVSnBcU58yVz80.crl (hash: 8CfAnShaqi4eML9nhyub58VA/MZ15SXyTWUdVUT0HxI=)
2: qt1X8cd4EEdSt0Ko4GKZetgm0U8.roa (hash: QOME3Vz+1BFTr6N1pPVdoLgRzF0h3H4cA0/YeWP3aH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:35:b4:ba:86:8d:bc:b3:d2:bd:26:23:47:3e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de02929f5ac8c349fea985529c1714e7cc95cfcd
Validity
Not Before: Jul 28 12:00:40 2026 GMT
Not After : Jul 29 12:00:40 2026 GMT
Subject: CN=80cb367641c1c2f82f88b9c8f2c97b2d44ab9a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:0b:4d:b0:37:a3:dd:e7:c6:94:c7:fe:e1:
3b:e2:33:07:f0:df:9b:ab:5c:60:3d:a8:a3:02:6e:
05:74:ae:7d:53:58:38:28:b6:d8:95:01:e1:17:c3:
38:94:e1:1a:1a:32:b7:80:61:06:af:ec:39:a9:15:
06:40:ef:08:4b:37:3e:18:4b:6d:b5:44:85:d9:0d:
7a:a9:24:ca:29:16:22:8f:28:0f:79:9a:26:12:84:
80:5f:be:9a:04:bc:b2:8a:29:b3:e9:36:d5:c4:28:
11:a1:43:47:af:89:85:07:b4:cf:ac:55:0f:42:62:
75:02:63:de:04:a8:4e:96:a4:c5:3e:d1:78:65:9c:
65:14:5a:15:6d:b6:94:b2:a7:0f:8e:5c:d2:d2:ec:
34:16:39:56:d8:ce:4f:58:b1:ab:ac:3f:6c:e1:c4:
5e:a8:a1:25:d9:6e:d7:da:3a:ed:63:cc:3d:ed:e9:
52:65:71:d2:7d:7c:13:d4:83:79:3b:f4:94:cb:6a:
fa:d3:31:b2:c6:2b:ba:ba:9d:11:a3:4f:0c:84:39:
c4:e7:e5:38:89:31:48:f6:f5:4b:18:5b:f8:e2:ba:
3c:1c:fd:bb:b4:9d:8f:5a:d4:3a:ad:26:29:99:54:
86:93:a2:49:e8:39:58:05:86:e9:e0:1b:3c:65:62:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CB:36:76:41:C1:C2:F8:2F:88:B9:C8:F2:C9:7B:2D:44:AB:9A:7B
X509v3 Authority Key Identifier:
keyid:DE:02:92:9F:5A:C8:C3:49:FE:A9:85:52:9C:17:14:E7:CC:95:CF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:85:e9:f9:b9:76:24:fa:8d:d3:e0:d3:28:09:e3:c6:be:0f:
dd:97:d1:ba:51:a1:6b:3e:ce:bd:5c:9d:86:8f:4e:e9:2e:3d:
9e:c4:39:8b:05:fa:2c:35:ce:d1:56:24:3b:f5:52:2b:0a:65:
89:14:f7:4e:6a:6b:23:26:03:e4:38:dc:5d:73:6c:26:e8:10:
fd:99:09:ee:8e:62:97:0e:13:03:03:0e:0c:d0:59:bd:f8:50:
bc:bf:c8:29:1c:fd:e9:36:44:21:02:06:82:71:bb:93:cb:90:
4b:52:19:61:73:59:55:ae:f7:01:8f:78:e6:4e:02:e1:c5:8e:
e2:1e:cb:6d:26:d1:e5:cd:54:c7:04:0a:30:07:8d:b4:41:f8:
a5:e3:56:d5:23:27:2e:03:4d:bb:9d:d6:67:c8:5c:5b:54:b6:
f7:94:98:31:73:a3:d5:b5:66:0c:59:fc:53:20:4c:57:18:84:
8a:0c:71:7d:09:b4:08:61:e4:24:78:a2:9d:45:5c:05:98:64:
55:70:0c:b5:9b:06:27:10:86:02:4e:e6:05:d9:4e:4d:76:8c:
d5:8b:f3:40:3e:62:d3:62:29:3d:37:64:63:a9:f9:d4:6d:7e:
c1:13:eb:24:86:3c:29:03:5d:ec:de:86:f5:c9:74:72:b2:ab:
80:d9:be:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:12 2026 by rpki-client