Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: QGzcUVdVVoUYJLIWM4p3agaPPY4x8NI5qi/yY5ZBQZg=
Subject key identifier: 8B:96:A3:88:DB:0A:86:B2:F8:F6:C2:E6:55:06:36:57:9B:D8:2E:7C
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 019FA9752BBBDD41FB8CF5A325FFF24454F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 17E0
Signing time: Tue 28 Jul 2026 16:00:55 +0000
Manifest this update: Tue 28 Jul 2026 16:00:55 +0000
Manifest next update: Wed 29 Jul 2026 16:00:55 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: va5v98V9+kL4oEywNBgy120fMsjFeD9Nh81eLbAzuOc=)
2: itoTic7G_-G7jco2XW4Z1NEcbCw.roa (hash: +uznw2maAhBkp9yoIBUiVjV+pSA2CpeiVnSVCi83O3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:2b:bb:dd:41:fb:8c:f5:a3:25:ff:f2:44:54:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Jul 28 16:00:55 2026 GMT
Not After : Jul 29 16:00:55 2026 GMT
Subject: CN=8b96a388db0a86b2f8f6c2e6550636579bd82e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:25:30:85:02:cd:fd:f3:26:31:ae:ff:50:
c1:b4:ef:ec:2a:e0:75:ef:6a:75:fd:1b:a2:67:32:
55:1d:10:2b:86:79:78:cb:a1:ba:de:a2:1b:31:6b:
5a:37:a4:e9:fd:6c:83:15:0c:22:af:ba:18:e4:fb:
6c:1d:56:8c:79:00:07:3b:3f:86:87:7f:6e:4f:99:
a9:82:20:a6:91:0f:6c:b1:28:cf:e1:cf:60:44:cb:
d0:39:31:2a:40:ff:df:9c:fc:b4:be:8d:9c:86:bb:
86:4c:df:9d:03:77:72:5a:19:ea:78:71:b6:c9:18:
dd:3e:e8:e8:fe:00:0b:55:07:58:db:f8:39:1d:1e:
b2:bb:84:e7:b7:68:1b:e2:0f:a7:d6:17:02:c7:bd:
d1:e8:88:d7:e4:90:63:f9:15:26:19:a1:3f:17:36:
fa:a7:69:ba:3d:2d:78:53:24:05:45:ce:d0:31:91:
9a:0f:e0:7e:96:50:be:a5:8f:94:2a:d2:09:04:d4:
2e:77:07:5d:94:cb:a4:d2:b4:b7:7e:cb:20:89:7d:
a7:e3:cb:43:5f:c6:1d:5e:23:48:98:0b:8c:10:d5:
b0:75:bf:9a:dc:a9:dc:83:da:c8:5a:98:16:9e:ee:
0f:b4:9c:0e:80:9e:5f:d9:d9:3c:b3:21:eb:e7:97:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:96:A3:88:DB:0A:86:B2:F8:F6:C2:E6:55:06:36:57:9B:D8:2E:7C
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:dd:9e:2b:d0:ae:29:5a:17:1d:4e:89:9a:94:d0:70:37:f7:
c3:00:59:50:15:ac:96:40:f8:a1:14:a1:bf:82:bf:b3:a9:88:
fa:d4:df:d4:98:8f:82:e2:ca:7b:7a:b3:c9:28:63:ea:45:40:
c7:e7:a9:b1:e8:e1:37:ba:2c:c0:23:e1:84:ec:8f:57:d7:f3:
d9:dc:41:2d:aa:b3:c7:1f:f8:24:bb:a7:49:54:30:58:d9:ff:
f1:6a:ac:fa:25:07:54:d3:be:cf:36:17:18:8c:a7:2c:ef:ac:
20:79:99:39:cd:a1:4e:9b:cc:23:33:de:fe:9b:34:67:82:52:
ed:87:a5:68:1c:6f:e4:c7:77:50:42:aa:f5:04:f5:4a:54:1d:
d3:4a:d2:ad:ad:b6:1b:15:87:47:f1:a0:9f:c1:50:b9:9c:1c:
e7:15:a9:54:57:c7:07:4e:8b:6b:a3:48:1d:3f:bd:6b:3a:88:
67:1d:cf:76:e6:cb:31:7f:c5:2f:2b:87:51:54:19:22:a2:43:
72:56:5a:63:00:ac:e9:3c:29:b6:76:12:99:8f:65:d6:03:4c:
42:4e:d1:5e:b2:ff:f3:10:d4:a6:38:4b:e9:03:ee:d0:3d:5d:
59:e3:a0:71:74:c0:60:7d:29:b1:78:e0:14:45:f5:63:f3:83:
7d:dd:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:06 2026 by rpki-client