Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: 6y75VcXERjLuUjdQ5suMu0xHon7TaTruEkzj8uto5DU=
Subject key identifier: 72:BC:70:8E:41:93:E8:91:DF:7C:00:7E:F2:66:85:89:12:7C:C9:DA
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 019FA97597E53255AAEB9D1D1F20767583BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 12E9
Signing time: Tue 28 Jul 2026 16:01:23 +0000
Manifest this update: Tue 28 Jul 2026 16:01:23 +0000
Manifest next update: Wed 29 Jul 2026 16:01:23 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: Zl7ETh3lf5oafrBQAizM9VnMGqno2VVvbnaNBp16FAc=)
2: f8-DGeBP35-N3w51zaELLHTWQhA.roa (hash: p45bmNjagtDF3HgTTRtJcWFVXkd0k7P3PfW1B+YfWgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:97:e5:32:55:aa:eb:9d:1d:1f:20:76:75:83:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Jul 28 16:01:23 2026 GMT
Not After : Jul 29 16:01:23 2026 GMT
Subject: CN=72bc708e4193e891df7c007ef2668589127cc9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:4b:41:8b:3d:2a:e7:70:b1:57:b4:45:f8:
88:a1:c1:8e:d4:c8:bc:fa:36:a3:26:3a:ad:92:18:
23:cf:3c:35:1a:32:a4:1f:bc:4b:6c:8c:65:88:20:
63:22:a8:c8:a0:55:45:02:55:4f:cf:9a:7f:d6:86:
bc:db:43:01:91:fd:aa:05:39:0f:fe:41:47:fd:fe:
47:a7:49:e4:4e:17:cb:50:f5:8a:d5:5a:86:de:a5:
2e:53:bd:40:c3:0c:03:93:f1:b5:a5:fa:c6:a9:6c:
c5:1d:3c:2b:66:a7:66:b8:06:93:c6:d7:84:7e:e6:
e5:f1:48:2e:c4:78:ab:25:40:fb:93:41:76:cb:4b:
dc:4e:6b:7b:6a:40:32:b3:6b:bd:e1:77:74:ea:62:
d3:08:cb:9e:f8:57:b5:62:34:04:64:b4:e9:92:d9:
f7:79:fe:81:9c:03:c7:b9:c1:23:68:fc:17:90:f5:
22:95:d0:d0:13:e0:3b:a2:36:d1:1d:a0:61:cb:38:
e8:df:50:8f:92:8d:61:15:81:c5:d5:1a:ba:e3:74:
70:9d:d2:80:91:a4:ed:00:bb:be:49:fd:f9:74:da:
a3:a4:4e:2e:7e:71:28:6d:2f:9e:84:22:37:ad:06:
ad:07:37:b8:b8:58:87:c2:85:30:34:ed:f0:30:d6:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BC:70:8E:41:93:E8:91:DF:7C:00:7E:F2:66:85:89:12:7C:C9:DA
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8a:62:56:a4:18:c4:dc:d7:af:01:be:c8:77:97:46:36:55:
82:e2:8a:ff:5f:a8:1c:a4:7b:bc:11:1b:e3:9e:7f:a4:cb:63:
ba:f0:91:46:75:0c:68:74:dc:52:12:38:b0:4f:ce:8d:41:aa:
8c:47:5e:59:40:83:d3:ac:a6:cc:47:7a:05:e7:63:d8:8d:fb:
ef:1f:f1:77:f4:e1:5a:f4:55:c7:e8:b6:7f:a4:68:25:8d:ad:
57:53:07:71:5b:a8:07:b4:ab:3a:b1:67:da:b3:91:69:93:df:
6f:73:5c:4b:20:4d:9f:e7:24:7e:f2:f6:63:94:93:7b:d5:75:
35:72:37:4f:da:54:ca:43:50:63:65:d0:9f:d7:7f:7a:57:f7:
62:95:25:bf:36:e1:36:95:c2:f9:35:85:4a:5b:b2:87:c5:88:
2a:74:9f:8c:35:51:82:2f:92:fd:ea:fc:50:49:f8:20:64:9a:
ad:da:2a:73:c2:3e:06:cb:8f:37:98:ac:63:43:9e:59:e0:80:
df:0c:67:d8:98:7c:cf:b6:6e:95:01:8e:65:55:34:6e:05:17:
cb:9b:d5:4c:41:42:ea:d1:74:03:40:71:ff:db:65:00:60:cd:
07:0f:c5:85:8f:a3:55:57:c4:c7:ce:3c:06:af:ea:b0:4a:f8:
e1:40:73:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:24 2026 by rpki-client