Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: YAgpwgqvllulQa+/IIJz4DDCxOUO+KR09fdX0EU9CtM=
Subject key identifier: 6A:E0:44:7D:2E:F6:46:50:66:DA:BF:E0:3E:9E:AB:6C:39:57:C4:12
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 019FAA882A5E737B4E3B2CCFED6D98854EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 1104
Signing time: Tue 28 Jul 2026 21:01:18 +0000
Manifest this update: Tue 28 Jul 2026 21:01:18 +0000
Manifest next update: Wed 29 Jul 2026 21:01:18 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: UbNEFHfvv+SUkmNQzMH0uoMVIA+Vw1GsBiPN/uU9efM=)
2: TmN-dr45oTfR8pksVoCNgmVOGLU.roa (hash: vnALMBgUiF5Ge/N8pDhGThN8hB7OAP8KLzkie3WI7N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:2a:5e:73:7b:4e:3b:2c:cf:ed:6d:98:85:4e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Jul 28 21:01:18 2026 GMT
Not After : Jul 29 21:01:18 2026 GMT
Subject: CN=6ae0447d2ef6465066dabfe03e9eab6c3957c412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:e6:c4:20:25:83:cb:59:67:6b:2c:fe:4e:
fe:61:d9:8f:91:f0:e5:f8:af:b4:42:33:bc:07:74:
43:5c:69:3d:d8:3c:83:a7:fa:26:03:7a:67:d7:7c:
33:47:7b:8b:7a:6b:fc:52:8e:3c:44:54:e3:47:49:
0c:1a:7d:e3:25:6b:60:4c:b3:45:d2:b5:cb:4c:c0:
23:c8:84:15:7a:1c:c1:11:89:76:36:73:1f:3a:6a:
37:80:d5:f4:fa:66:ca:6e:43:d9:ac:75:d1:8d:7a:
0f:14:c2:04:b3:a3:9c:aa:3f:76:82:6d:87:24:f2:
31:da:d4:8b:7d:4d:c2:13:92:50:ca:3d:d5:1d:98:
4d:2e:b1:71:45:91:d9:e7:41:96:b8:2c:a7:a0:aa:
16:64:db:e0:04:89:d9:41:66:d8:9a:5b:e3:1b:ce:
a8:b3:82:9a:78:a7:5d:71:e0:cd:14:a6:d7:84:6c:
2f:d9:d1:52:21:2b:24:d9:c8:c2:b5:ad:a2:40:41:
26:be:cd:1e:c8:fe:51:79:bc:c3:d1:ab:60:25:3c:
d5:e5:cd:15:61:e3:b7:35:9d:e5:fe:63:f3:d6:c1:
48:96:ae:c9:12:cc:0c:c0:00:c6:50:91:b7:0e:c4:
4d:27:d6:bc:da:81:4f:b7:3f:f2:74:2b:66:de:d3:
13:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E0:44:7D:2E:F6:46:50:66:DA:BF:E0:3E:9E:AB:6C:39:57:C4:12
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c8:c8:9f:8e:75:9e:8a:b4:2f:b4:b5:eb:d0:7e:f2:51:e3:
79:08:d0:88:60:5a:cc:6c:a1:a2:c9:c6:ce:d2:85:d3:0a:ab:
d1:7f:55:b0:43:a1:68:21:06:54:7a:fb:e1:8d:43:3c:29:1a:
f5:ee:cd:41:b5:23:d2:50:04:06:5b:b0:04:96:3c:47:06:87:
12:f1:e3:7f:f7:30:fd:aa:bf:6c:3b:a1:66:58:9f:34:de:4c:
dd:56:a7:03:d7:40:c6:a3:89:e5:87:cc:a9:2b:fc:21:13:c4:
70:79:10:79:ba:b0:04:ad:3b:12:c2:58:78:1e:12:1a:46:da:
06:3c:7b:1d:ac:d0:7a:b5:1d:90:97:f3:48:4e:fe:50:7b:33:
07:00:36:36:43:0f:da:95:7d:29:83:f4:71:1a:6c:9c:34:c7:
23:54:e7:23:d3:91:61:e2:a5:9a:7c:0b:c3:40:a5:6b:f0:cb:
16:05:a1:52:74:c4:10:91:d4:b6:74:36:72:02:dc:c0:6f:d2:
e1:0f:9c:1f:46:a4:4e:74:d1:2c:ab:32:74:d5:15:2b:66:e2:
8a:44:ae:b9:43:8a:6f:ce:bd:3c:04:cb:2d:b2:bd:72:bc:72:
e0:91:2f:77:04:17:27:a7:64:fd:b2:1a:34:01:65:f7:c5:a8:
1e:e0:74:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:04:15 2026 by rpki-client