Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
File: 3YXca2FDoX_rSYIOpSAEiVj0itw.mft (raw, json)
Hash identifier: YvN++NDyQAFlhFT/0lIp0toA1n8RLFMtIMfgbUtYJQg=
Subject key identifier: C5:DF:28:A3:BE:AA:9B:2C:E9:17:5F:68:FF:83:22:12:C0:E2:E6:51
Authority key identifier: DD:85:DC:6B:61:43:A1:7F:EB:49:82:0E:A5:20:04:89:58:F4:8A:DC
Certificate issuer: /CN=dd85dc6b6143a17feb49820ea520048958f48adc
Certificate serial: 019FA9079123BCDED7A43DCFC8C8A6D518A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
Manifest number: 146D
Signing time: Tue 28 Jul 2026 14:01:13 +0000
Manifest this update: Tue 28 Jul 2026 14:01:13 +0000
Manifest next update: Wed 29 Jul 2026 14:01:13 +0000
Files and hashes: 1: 3YXca2FDoX_rSYIOpSAEiVj0itw.crl (hash: 4m1T2Cmz1tuNEN8WxbVLJWdHWPGEoDDa1kNpFDtqfpk=)
2: BsyNzVaxxAwnI04Dd9aOhMe6ucE.roa (hash: 0aNXoEKl0ws+Toia/ObhW+i07V56stDq9dLrY8oS6mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:91:23:bc:de:d7:a4:3d:cf:c8:c8:a6:d5:18:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd85dc6b6143a17feb49820ea520048958f48adc
Validity
Not Before: Jul 28 14:01:13 2026 GMT
Not After : Jul 29 14:01:13 2026 GMT
Subject: CN=c5df28a3beaa9b2ce9175f68ff832212c0e2e651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:ad:21:04:ef:27:d2:ba:ad:d1:45:26:f8:
5e:86:af:df:9e:92:5d:df:85:f2:e0:3f:36:e6:0c:
f2:57:aa:31:60:6f:00:75:95:89:04:82:54:52:53:
5e:22:ee:7c:3a:48:52:c1:00:ba:3e:4c:9e:d9:af:
85:bf:95:b7:d5:12:1b:2a:b7:60:38:43:2b:e9:c9:
9b:6b:d3:ca:be:72:9e:c5:33:25:78:32:15:a5:fe:
fa:3c:d0:c5:af:a1:66:ab:d2:57:1c:d2:0e:ed:84:
0d:1d:57:f4:70:b2:27:e4:e2:f6:6a:c2:ee:e3:46:
5a:6d:a9:a9:47:8a:c3:06:fe:81:9e:45:3a:f0:2d:
45:a3:3c:d2:14:1b:12:d2:c6:3e:d7:cc:ab:11:15:
35:f3:7e:1f:c0:1b:e5:19:e4:29:66:cf:f6:e2:8f:
65:1e:62:89:a3:ff:44:d4:c2:c1:27:b6:8f:6c:a5:
5d:2a:0e:d7:10:30:24:2f:0e:fe:14:ae:25:3e:12:
78:4b:db:ad:ee:8e:4b:e1:f1:32:85:fe:99:9f:e2:
23:cc:3d:08:b5:6a:0b:e6:c8:13:b6:50:ba:f2:70:
0f:56:66:92:b9:a8:64:16:d9:a3:b1:ce:22:90:8b:
3f:2b:fa:b2:55:1e:bb:99:5a:be:62:89:48:eb:82:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DF:28:A3:BE:AA:9B:2C:E9:17:5F:68:FF:83:22:12:C0:E2:E6:51
X509v3 Authority Key Identifier:
keyid:DD:85:DC:6B:61:43:A1:7F:EB:49:82:0E:A5:20:04:89:58:F4:8A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c8:99:8a:38:cc:b8:b0:42:2a:dc:ba:48:ca:71:1b:13:ca:
e1:1d:19:62:b1:aa:37:f5:62:dc:d4:a3:bd:71:be:22:83:ed:
c4:24:3e:61:51:49:bd:49:94:45:2b:1e:89:ec:0b:82:25:a8:
21:e3:e9:6d:2c:cd:eb:12:c6:21:ae:84:17:4c:c9:a1:ca:3d:
25:40:af:4a:5f:f0:b5:51:ae:e0:49:78:7c:77:cf:bf:6c:4d:
35:e9:37:53:91:a7:e6:c1:6f:ef:b9:79:1b:bb:12:06:f4:1c:
14:0b:09:da:17:8a:09:bb:03:08:57:4d:bf:1e:b4:50:aa:78:
6c:f4:6e:ca:4b:77:9d:4c:ff:07:f5:85:f9:e8:5e:28:bc:52:
6d:d2:89:9a:b1:9c:eb:1d:14:7c:b2:44:bc:d5:fb:5e:c8:e2:
31:cb:db:42:4c:37:b1:be:41:4a:55:63:45:0b:65:61:b4:28:
ea:05:97:cc:49:a6:25:be:32:fd:79:9e:1f:ec:2e:ec:fe:eb:
07:f0:8a:29:96:b8:96:47:b5:47:a2:03:a8:78:f5:0b:84:eb:
72:c1:cb:a7:45:e9:2e:17:a0:b4:1f:f0:4f:29:34:fb:a6:0c:
f3:f2:a2:46:82:a1:b5:24:eb:eb:5e:9a:b7:5e:10:4f:e7:d8:
c8:18:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:44:16 2026 by rpki-client