Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
File: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft (raw, json)
Hash identifier: 7KFyVkwO85bLSkAODGEjQWC5UYPw8U+f9tQFgZ/Q9yE=
Subject key identifier: 40:5E:51:03:41:6C:6F:08:4F:E6:43:C9:2B:4F:9B:4C:1B:2F:5B:CC
Authority key identifier: DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
Certificate issuer: /CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Certificate serial: 01A002F01AD9A7B5A80130A6E8ABE67EE46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
Manifest number: 01E9
Signing time: Sat 15 Aug 2026 01:01:24 +0000
Manifest this update: Sat 15 Aug 2026 01:01:24 +0000
Manifest next update: Sun 16 Aug 2026 01:01:24 +0000
Files and hashes: 1: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl (hash: WIQQ12/wUy0aojNPCjMGrmOP9bTtJsu6vvVtiZT/980=)
2: FiJY_f6GKm6veDvPVDNX9LWOSRU.roa (hash: SMTBlb+NpQPNeXGuJJJYcwSp8wfNIzukvM7Bw3VT8hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:f0:1a:d9:a7:b5:a8:01:30:a6:e8:ab:e6:7e:e4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Validity
Not Before: Aug 15 01:01:24 2026 GMT
Not After : Aug 16 01:01:24 2026 GMT
Subject: CN=405e5103416c6f084fe643c92b4f9b4c1b2f5bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:12:c1:89:b4:79:5e:e1:ac:3f:99:aa:ec:
7b:68:38:e1:e8:7c:0f:03:82:8e:e4:2e:b5:d2:26:
b1:fd:9c:0d:f0:44:ea:58:3d:c3:01:a2:e2:69:1d:
7b:e7:9b:39:f7:df:82:94:f8:b4:31:f1:32:ec:2f:
78:a8:e8:d0:31:03:b4:eb:67:9e:6e:b6:d9:b2:41:
0e:31:f3:45:a1:9a:c3:6f:4b:66:80:30:c3:b4:e7:
c6:f6:b8:ff:37:ff:29:4b:b0:43:3a:c9:21:a4:0d:
6e:73:40:05:7e:5b:47:97:c4:f0:e7:b0:8b:0d:0f:
bf:77:45:92:6b:c0:51:58:42:8a:31:39:11:d2:ed:
24:70:81:49:ea:15:a2:9f:7c:25:4f:e9:c0:e4:33:
7a:67:c5:10:af:28:f1:1e:70:59:c2:0f:cc:1d:59:
5e:29:e0:a8:c8:6c:9b:6b:f7:45:86:88:0e:60:1c:
63:0f:53:a0:26:d3:8a:af:50:6c:b1:09:95:a3:cf:
90:b6:21:f2:64:76:b8:43:fe:0d:37:2c:83:09:19:
33:6e:56:9e:fd:db:f6:2c:34:f6:af:96:37:36:3b:
d7:be:fb:27:f6:fe:6c:74:6a:4f:13:2a:47:73:e8:
4f:08:a7:d5:8c:2c:a0:e3:25:25:3b:8f:5e:b8:83:
6e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5E:51:03:41:6C:6F:08:4F:E6:43:C9:2B:4F:9B:4C:1B:2F:5B:CC
X509v3 Authority Key Identifier:
keyid:DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e4:7b:76:47:58:21:1f:6c:f0:5c:af:34:26:fe:6b:c6:76:
33:00:d3:db:3b:3f:72:cb:eb:a5:e4:c4:0f:c4:33:af:38:52:
88:d0:86:19:4e:ae:4f:42:23:60:f8:5b:35:f2:79:27:f7:64:
da:7a:04:e3:2e:a2:6c:53:6c:3d:a5:08:86:7d:1c:05:a2:70:
2c:f2:86:46:95:4d:86:54:e3:22:d4:59:2e:55:f0:04:f3:b9:
36:9a:1d:6a:da:ea:7d:9c:21:5c:d4:2a:fa:65:ac:af:05:8a:
3c:df:0c:ec:fa:a1:99:de:84:d5:86:18:8b:d8:88:96:57:1a:
81:09:a3:fa:7b:13:54:a4:b6:78:fd:11:5a:07:38:d2:51:20:
17:57:c9:4c:33:d2:6f:9c:93:95:14:64:e5:05:10:3f:63:ab:
1d:93:75:48:25:15:df:98:6d:c3:f9:d6:c1:be:53:a3:fc:06:
7a:b8:aa:85:36:13:1b:13:b1:66:89:20:69:0d:5f:38:a2:99:
b2:f9:e2:b6:33:d9:f7:b4:5f:26:db:ee:36:c9:c3:ce:4c:c5:
37:40:99:83:0f:b0:b6:45:e3:56:57:4e:f8:1b:4c:b0:00:53:
5a:d1:ff:ac:33:c3:15:fd:bb:22:c2:b6:cb:5e:b7:d1:56:d0:
21:21:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:04:27 2026 by rpki-client