Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier: c0vsat1ba4vF2gYoWHGc0PSeDCGKD1voGgmPG/Ma5dk=
Subject key identifier: B1:FF:CC:C4:E2:91:C5:BB:1D:8B:C1:C1:1F:19:61:A0:4E:1E:EA:E9
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 019FA9071B1438205E35DABE212F729DC8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number: 102E
Signing time: Tue 28 Jul 2026 14:00:42 +0000
Manifest this update: Tue 28 Jul 2026 14:00:42 +0000
Manifest next update: Wed 29 Jul 2026 14:00:42 +0000
Files and hashes: 1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: kenodA4JUWJyl4jYCgPumdbpLwHuENKLetqb1wvixrU=)
2: v4jlzQPH9B19BgnawF1RP-229sY.roa (hash: b4H5XHOj6d5z6OnvgwQoCpKZ6CNBYc2Lt4zW82aMu4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:1b:14:38:20:5e:35:da:be:21:2f:72:9d:c8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Jul 28 14:00:42 2026 GMT
Not After : Jul 29 14:00:42 2026 GMT
Subject: CN=b1ffccc4e291c5bb1d8bc1c11f1961a04e1eeae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:57:cd:b0:cc:d5:ab:66:a4:de:f3:e7:fe:2a:
c7:15:a5:66:c2:a8:87:a4:1d:6f:00:8a:a2:b7:88:
ee:11:a6:ab:ab:81:ee:21:cb:68:1a:34:a7:6b:a3:
f5:72:c1:13:e7:d1:b5:69:aa:3f:25:44:db:85:f8:
c5:a3:7f:de:1d:b2:fa:1c:11:28:aa:64:8d:56:0c:
a4:7a:0e:f1:06:f8:5b:0d:f3:e9:ce:30:cc:54:6e:
76:b0:8b:bf:0d:5d:69:c2:36:81:9f:d2:39:f5:c8:
e4:5d:1e:04:48:e9:0a:c1:b6:7a:3c:70:69:ce:4d:
e4:88:a3:93:6a:dc:fc:36:cd:6e:e4:ab:76:ee:d7:
4a:02:e2:66:6c:50:2c:8f:de:09:08:02:08:a4:84:
8b:90:1f:f6:49:11:48:4c:94:fd:0e:7e:b2:df:e1:
ca:7f:da:3b:60:9e:02:30:f3:87:bd:8c:56:b5:94:
13:f1:e2:9c:3b:c8:4c:25:99:9c:d7:7c:68:e6:82:
50:b9:df:41:26:a4:eb:a6:f6:31:3f:fb:fb:4b:16:
c9:5d:1e:14:58:9f:01:dd:95:a6:c5:7b:95:57:b6:
7c:5a:41:36:65:de:b0:be:e7:66:15:b9:f0:a2:3d:
32:11:58:2a:f1:d3:a2:bb:02:44:b3:29:15:6d:f3:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FF:CC:C4:E2:91:C5:BB:1D:8B:C1:C1:1F:19:61:A0:4E:1E:EA:E9
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:dc:c8:74:3a:2c:82:c6:34:e6:43:e9:7d:f1:8c:e7:b9:1d:
77:ea:d7:ba:22:50:cf:03:d7:de:ec:77:7f:7a:52:5d:84:f4:
d2:fa:3c:3c:23:8c:1b:96:5a:73:52:11:2e:61:32:a4:15:20:
eb:02:63:e1:56:40:d5:18:94:b5:3e:75:e0:c6:78:5e:15:86:
a0:4d:93:2e:1b:44:bc:69:77:34:f1:13:20:70:5b:93:1d:e4:
83:c7:9d:cd:05:f5:9d:72:67:70:cb:d1:d1:08:24:ce:4f:b9:
0e:ac:51:58:e2:5b:a4:97:5f:06:4f:78:91:7f:88:54:64:34:
c5:05:e2:a6:a2:c5:52:7a:b6:10:f0:91:53:8f:4a:ed:fd:2e:
c5:98:b3:be:d9:59:39:3e:e0:05:38:a5:de:a9:71:60:af:52:
62:11:d7:7e:60:03:5b:62:da:26:6d:87:38:6a:9f:b7:4c:b4:
33:f2:18:88:4b:12:de:7e:11:db:9d:a7:7a:12:c8:c2:74:36:
96:72:4d:9a:76:a0:7b:2c:38:a6:d8:24:fa:a6:91:79:3e:74:
02:ee:fb:de:ca:ff:26:4d:3c:81:c7:d9:f4:45:2b:f1:8f:e3:
73:07:0b:95:3c:90:ba:02:fc:52:d7:19:d0:71:0e:6f:b3:bc:
4f:d3:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:52 2026 by rpki-client