Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: yPRUE12LDEj3ZWFxUjLgTHMzZBtNhgtXPRydtL4lb7M=
Subject key identifier: DC:70:C6:93:DE:96:D7:43:4A:57:39:56:E9:1D:86:3C:B0:EA:BB:B7
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 01A001DD8E6623AEC2E2CC84B82F469C6176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 1544
Signing time: Fri 14 Aug 2026 20:01:31 +0000
Manifest this update: Fri 14 Aug 2026 20:01:31 +0000
Manifest next update: Sat 15 Aug 2026 20:01:31 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: tOcedQr+cttRkEig3rEHFwe3XKR2jO0C3MI9LeyvRjI=)
2: 6TUuFWgBkm98OJlIkhqINWWAoI0.roa (hash: GA9PdoKCJE0Uq5wLiSfj1Mw/gZ339oU3m0s7B3MQNRA=)
3: _qA7-iuYEvTbfVREYl9q7tay4Bk.roa (hash: Z/glgCy5dfzogAACVBlWtKvnqFreHrzxfTJl0PSlZgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:8e:66:23:ae:c2:e2:cc:84:b8:2f:46:9c:61:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Aug 14 20:01:31 2026 GMT
Not After : Aug 15 20:01:31 2026 GMT
Subject: CN=dc70c693de96d7434a573956e91d863cb0eabbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:84:02:68:4a:f1:09:df:01:fc:6f:10:aa:
c0:4c:d3:59:95:75:f3:4a:f4:86:25:b7:6f:a2:73:
5c:af:13:8f:45:52:76:00:f6:7c:40:7c:fa:47:9d:
5d:0a:22:60:5a:57:16:14:d1:e6:6a:60:a7:cf:e8:
55:7d:cd:cc:3c:af:13:8e:e2:15:12:fc:7b:62:81:
b9:0f:57:c3:ff:9b:83:bd:7b:3c:7c:2a:b6:08:10:
f6:dd:92:20:27:78:aa:ba:f4:ae:0e:6e:9f:7e:84:
14:dc:b9:03:07:5b:31:08:0e:a2:a5:b7:24:e9:77:
aa:2a:dc:e5:8c:ba:91:f9:35:c8:b6:d3:42:cb:6c:
da:b3:3f:5c:66:97:b7:c4:de:66:e7:e8:2c:c4:05:
1f:92:d6:9a:5a:26:93:81:a6:c1:cb:ce:2d:4f:63:
85:5e:cb:38:9a:03:20:91:33:e9:1c:05:ae:43:b1:
02:fe:05:dc:ae:db:ce:59:b2:cb:f6:46:2a:6d:2b:
f3:97:eb:f1:2b:24:9b:de:28:bc:5b:53:1b:72:a2:
e5:79:e5:37:7e:ab:b3:8c:6f:89:84:3b:75:7e:67:
4c:dd:4c:05:b9:89:2f:0e:92:eb:20:58:08:d8:1c:
2b:ba:52:3e:a7:ad:c3:7e:ce:e1:7e:06:41:45:d3:
1b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:70:C6:93:DE:96:D7:43:4A:57:39:56:E9:1D:86:3C:B0:EA:BB:B7
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0b:9e:cf:fb:10:6d:46:a6:e8:24:da:40:b7:70:6c:ef:a7:
57:2d:4d:12:87:c0:3a:fe:1b:0d:29:77:03:3f:0c:93:31:70:
6c:46:98:6c:a1:b2:6b:e3:28:e7:ab:ff:6f:8c:54:54:e3:79:
d1:3a:b4:a4:47:6f:f5:28:50:62:fe:26:17:40:e3:62:22:fc:
2a:5d:b3:e0:e5:9b:09:5d:d2:1a:ab:46:d0:05:bf:a0:ea:87:
02:64:ef:f7:e9:3e:5c:e9:cc:d2:28:25:1a:2d:1f:40:b0:5f:
b0:fa:57:a4:9c:a8:32:24:78:6a:01:d9:3c:04:ab:8f:b3:9c:
4f:03:be:3a:ab:a4:49:bb:fe:8d:a6:55:cc:9e:63:4a:e7:8c:
77:93:69:be:6c:8d:3d:31:ce:2f:5c:9f:f5:23:2f:53:91:e6:
e4:59:bd:26:8b:20:e4:7c:c6:b8:45:5c:c6:9b:8b:71:93:33:
ab:55:38:f5:cb:4f:e5:30:d1:f4:e7:f0:f8:6c:98:0a:75:1c:
47:08:85:28:10:81:d5:52:42:c9:fc:fe:2c:f4:79:e4:15:c9:
bd:fd:73:89:41:03:fb:b0:8c:c9:fc:ca:d2:14:ae:17:d7:17:
6a:7b:53:bf:dc:79:2a:c0:7a:fc:45:cb:7b:61:8b:d8:a4:a0:
bc:2b:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:53 2026 by rpki-client