Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: hAnE4saUL6A91taLfb2PXgsiuEA7usFEi3FNhf0piJ0=
Subject key identifier: E0:F5:E7:3D:0F:DC:6E:2B:03:4F:09:72:39:3B:C3:AE:67:5D:5E:36
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 019FA9754883787A096B6B7F6CBA6A5C10EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 1518
Signing time: Tue 28 Jul 2026 16:01:03 +0000
Manifest this update: Tue 28 Jul 2026 16:01:03 +0000
Manifest next update: Wed 29 Jul 2026 16:01:03 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: 6PFoN7HaZt/Bwz62EyMM38DkxUfaFAn7Jpx4eFXHJ40=)
2: 6LpMhHmk89Py7vWuBJ8eEXpWnn4.asa (hash: eq0WQCdDBBCmtQF0jQMbbLOLGcIojkIy5NWC9heTYts=)
3: vlBe3oYmjLCyAb6mMX2mR3pkXOU.roa (hash: zOmjl7/VF1REeDK9Kz85f9AKUhU+m9qTE9b+EWBSHrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:48:83:78:7a:09:6b:6b:7f:6c:ba:6a:5c:10:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Jul 28 16:01:03 2026 GMT
Not After : Jul 29 16:01:03 2026 GMT
Subject: CN=e0f5e73d0fdc6e2b034f0972393bc3ae675d5e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:9b:04:67:6e:c0:d8:e2:c3:da:e4:b9:7f:
c7:4d:e5:a9:3b:f1:c4:2f:ed:af:98:40:85:e1:f5:
c0:b5:b7:07:56:93:0f:b4:c6:e6:4c:06:8c:f9:b6:
7b:82:46:81:fe:33:48:7b:0b:2f:74:3d:2e:cf:18:
2d:ab:24:d5:d6:a6:ab:70:b7:a9:e4:d9:89:89:89:
b5:04:da:fa:56:d4:8d:2e:09:26:74:56:5c:34:c6:
07:7a:ed:70:86:83:0f:3f:f5:67:a4:ce:5a:91:e3:
f5:26:ea:6e:f4:45:0e:6c:28:f0:91:c8:73:3c:3c:
f9:69:42:56:f2:09:4a:18:e5:00:59:59:a6:15:02:
7c:9b:df:61:90:64:92:a5:4e:00:64:a9:b5:bb:f6:
79:ca:f9:35:63:b7:5d:56:92:10:9b:c0:bf:c0:e1:
20:03:d1:4f:11:b5:26:6d:cd:6d:5b:3f:3e:81:72:
ec:76:a1:65:0e:dc:6f:b3:6e:54:fb:e2:38:88:e1:
da:2a:7e:14:cc:04:51:5e:fa:c2:c9:96:52:a2:b9:
5d:40:17:c6:e4:54:e6:f1:e2:cb:48:dc:e6:db:73:
67:0d:97:5e:b2:1f:c1:96:32:1c:9f:62:92:eb:57:
62:aa:04:e9:ba:b1:4d:75:b8:3f:60:80:b2:61:70:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F5:E7:3D:0F:DC:6E:2B:03:4F:09:72:39:3B:C3:AE:67:5D:5E:36
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:41:01:25:81:d4:3d:98:2a:43:b2:cb:f5:41:46:94:9c:80:
d7:1c:21:c0:77:d4:4a:42:20:ec:80:d6:de:b8:38:61:70:06:
02:cf:d1:62:7e:c3:1f:26:da:ec:30:f4:47:ca:5c:07:77:68:
9c:84:c2:42:06:e6:ea:31:be:2f:1d:a9:53:91:46:32:bd:c6:
41:ad:49:83:d4:7c:0a:fa:16:b7:8a:98:99:a3:17:84:68:cd:
45:2f:a8:0d:57:c0:59:a0:e1:13:a9:61:2a:6c:07:4a:b2:44:
3f:3e:dd:88:35:33:62:cd:bf:58:6e:b1:6d:e2:5e:cd:ed:3d:
87:fe:6b:0f:da:97:ed:7d:9c:eb:58:53:d4:3d:b2:6b:0f:e5:
53:e9:12:53:c6:97:ca:0e:d6:85:8c:ec:76:3a:e4:02:73:ca:
f9:98:3c:a9:09:9a:2a:bf:fa:22:55:e3:5a:9f:fb:97:c2:4c:
01:ed:42:2b:4f:9b:19:a0:50:ca:29:18:be:cf:e3:80:d6:6a:
7e:0c:c8:4a:33:9a:44:95:4f:a2:28:74:87:7b:24:cd:1e:ce:
84:d0:b5:55:3f:68:8f:f6:3b:0a:fe:89:18:50:41:3b:91:45:
b1:ce:0d:44:36:82:02:39:02:a0:40:ab:b4:60:90:a7:74:2e:
42:d1:f4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:18:16 2026 by rpki-client