Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier: 7FSwvYXAl5jEDltnz/BiJIsv3oq2G4fq3UWXlxRNBqE=
Subject key identifier: E7:02:4E:5C:0A:46:AA:9E:3D:9C:46:40:FF:9B:48:1D:F9:E9:35:A0
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer: /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial: 019FAA50812A63DA5D3B8D7AEC180804DD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 20:00:30 +0000
Manifest this update: Tue 28 Jul 2026 20:00:30 +0000
Manifest next update: Wed 29 Jul 2026 20:00:30 +0000
Files and hashes: 1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: 0Bec2f3GEw1Ub45BnbL5UuMUTkI31/aU2as+UdArx1Y=)
2: mgzdOFd8B2ya1Xohy6YCT8xW7b0.roa (hash: /7uRJWT90D6J/lwYKLHfljOz+L9OgupUQYidcbYQ5rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:81:2a:63:da:5d:3b:8d:7a:ec:18:08:04:dd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Validity
Not Before: Jul 28 20:00:30 2026 GMT
Not After : Jul 29 20:00:30 2026 GMT
Subject: CN=e7024e5c0a46aa9e3d9c4640ff9b481df9e935a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:6a:a6:e3:f9:5d:19:2a:a4:ad:1e:4e:92:
93:97:f9:da:ea:f7:89:92:70:24:df:83:ca:06:0e:
b8:5e:ca:96:b2:f1:28:d3:5c:a5:cc:4e:c7:a9:10:
db:9e:e5:bc:de:ea:8a:b1:55:51:c5:14:51:49:90:
a0:c2:f9:3f:d5:22:32:c2:9e:03:f0:65:1d:dc:d5:
ce:19:4a:e5:e5:da:33:1c:97:06:78:cc:07:95:a2:
93:75:28:0b:14:e9:a1:9e:8e:28:97:f6:30:c7:7c:
6f:65:03:e6:83:73:eb:3e:79:93:34:d6:30:d0:ce:
7c:ed:98:28:4c:d7:52:f2:69:43:8c:fe:b4:0a:db:
e9:e0:36:74:11:6d:22:d3:cf:d7:10:a4:74:30:0f:
dc:3b:d8:c4:b2:8a:7e:32:2a:98:5c:37:62:55:60:
c9:d6:c8:b6:78:53:cc:09:fa:81:19:70:55:ec:f7:
88:77:dc:71:0a:de:62:f5:4f:71:85:20:71:a8:4b:
2a:39:92:26:58:97:98:3e:a2:42:06:57:61:a3:d4:
2c:c3:fb:00:ea:98:8f:1e:24:cf:8b:ae:c8:4d:e8:
a3:0c:18:b4:f5:2c:ba:95:15:94:fb:2f:b9:e5:66:
52:7f:9f:92:29:16:b9:3d:fa:d3:4a:91:4c:aa:3f:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:02:4E:5C:0A:46:AA:9E:3D:9C:46:40:FF:9B:48:1D:F9:E9:35:A0
X509v3 Authority Key Identifier:
keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:80:4d:e1:b0:b6:7d:35:1a:2c:a3:43:26:cf:5b:ce:26:3a:
f8:b5:9e:a0:37:24:66:4b:57:58:cb:55:d0:49:18:6b:01:d2:
c1:b5:20:79:9b:c7:77:07:fb:f4:ed:05:35:c7:4b:80:11:a5:
64:a7:21:f5:14:90:70:cf:1a:12:bd:c6:c5:a9:8b:ea:09:47:
4f:96:53:35:a6:06:1e:fd:98:3b:b4:d8:69:fe:71:cd:65:d1:
19:de:64:2c:1a:cc:c3:be:e2:4f:4e:1a:a1:5d:2f:90:8e:5e:
06:af:08:f9:59:c3:ea:47:6a:1b:d6:94:07:04:26:0f:23:fc:
31:5b:2b:31:d4:b9:aa:c7:b8:19:6a:61:6f:40:a7:2c:1a:1f:
c9:3b:04:9e:ca:12:21:46:2d:47:34:bb:c0:da:85:c9:f2:cb:
cd:41:69:c7:fe:34:fc:b6:03:75:cd:ca:f6:ca:61:87:db:0c:
62:bb:61:be:bf:c0:0f:93:e4:66:0c:0b:d8:3b:6b:05:ea:1a:
8d:ca:9b:b1:ac:ba:f6:be:04:91:69:b0:85:3b:f8:e9:12:41:
78:93:85:9c:65:0f:03:1f:97:44:23:a1:8a:2d:1e:b5:80:14:
d1:a7:16:ae:56:6f:3d:b6:ce:56:ee:ec:10:8e:2e:d0:79:62:
3c:44:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:32 2026 by rpki-client