Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: b0RbjUsddKKU5OHoJBBh5kie9eoe8UHHhqefCSNyky8=
Subject key identifier: 02:23:70:2A:A1:44:F9:64:15:E2:43:B6:44:BC:E8:98:42:8C:B3:5D
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 01A0016F07A475D617A0386BFCA58C3B7EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 1940
Signing time: Fri 14 Aug 2026 18:00:48 +0000
Manifest this update: Fri 14 Aug 2026 18:00:48 +0000
Manifest next update: Sat 15 Aug 2026 18:00:48 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: FuMYiXP/rfLtqtfh94jZHHWX9753jeXTCys/qE+cclM=)
2: xU2EDS3A1kqxHB5fmWawALQua5w.roa (hash: gy/kCjpuCiDHyb5854bh+q6WsJ4/S+45FLFM/o6soug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:07:a4:75:d6:17:a0:38:6b:fc:a5:8c:3b:7e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Aug 14 18:00:48 2026 GMT
Not After : Aug 15 18:00:48 2026 GMT
Subject: CN=0223702aa144f96415e243b644bce898428cb35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:41:59:81:9a:6d:66:29:b6:42:2a:79:6e:
eb:6d:5f:c0:71:ac:aa:0f:ba:a0:ba:32:17:f5:fe:
14:7a:08:bf:9b:fe:6e:0b:d6:1c:98:bd:3d:7d:3a:
17:0c:b0:9a:cf:08:55:74:8e:93:44:68:99:86:53:
06:6f:86:92:21:24:c0:49:59:08:d6:db:54:ad:78:
74:d9:56:ce:35:53:56:c3:05:ea:ee:3e:90:f3:cd:
66:99:b6:76:83:7c:37:bc:b4:d4:0e:35:41:cc:d6:
4c:20:e7:13:81:10:54:e9:cc:6b:f3:69:4f:86:6d:
4a:3c:30:0e:9e:ae:3c:41:c0:72:a2:ad:db:fb:44:
da:d7:d6:9f:d9:e6:19:f3:ba:3f:16:2a:5b:4f:b3:
e9:ed:9b:2a:2d:b4:f8:11:29:e6:69:5b:04:6e:13:
8e:b2:eb:c5:3e:d3:6b:7a:82:57:eb:23:be:e2:77:
68:0b:45:e2:13:0b:ac:e2:1b:6e:c2:26:77:c2:27:
3e:a8:e0:d0:d7:be:e4:31:f2:07:51:44:54:3b:d0:
ea:d1:fe:fa:10:8a:55:94:60:23:43:0b:27:26:e5:
4e:88:e0:20:0e:41:d2:be:21:09:59:2d:d4:8b:d2:
04:21:01:9d:3e:27:55:78:a9:78:b3:03:af:28:67:
e0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:23:70:2A:A1:44:F9:64:15:E2:43:B6:44:BC:E8:98:42:8C:B3:5D
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a1:09:c1:01:fc:66:6b:f0:e8:3a:4e:95:ec:20:31:be:cd:
d3:80:c3:07:78:3c:1f:c0:b5:7d:b7:82:b3:c4:0c:02:d9:28:
5f:07:a2:e1:46:b8:c5:e0:52:5b:df:8d:dd:3b:c7:00:78:eb:
e9:26:99:78:5d:d8:1e:c7:c6:9c:fd:cc:b8:77:4f:f0:ca:a6:
ad:33:0d:04:a1:69:24:4a:56:5c:ae:d9:0d:90:f3:aa:99:54:
e5:81:63:b1:72:62:8c:ec:da:ce:35:e7:da:7b:d8:f7:ef:88:
db:80:eb:05:aa:b0:22:2f:38:91:6e:9d:00:eb:62:bc:1d:36:
02:7e:44:78:52:46:e5:5f:4d:0f:24:19:eb:a3:4d:5b:9f:7e:
0c:4d:8c:21:b8:51:c3:95:85:88:11:86:37:81:06:e9:5f:12:
0d:0c:35:7c:47:6f:9f:cb:03:b1:6f:6d:ce:6a:45:12:5a:f7:
86:17:e4:4b:73:b0:f2:c9:cc:fe:6b:ad:04:c8:d2:0d:4b:d6:
5f:54:70:3f:2f:ce:48:6b:01:2d:a0:a5:00:07:46:7a:ac:68:
27:8c:26:7e:5c:ef:85:11:c9:37:19:57:23:48:6a:bd:bb:3f:
44:76:0e:7f:2e:4a:a2:73:bb:26:6f:02:42:b6:e8:af:ab:45:
0b:ec:04:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:19 2026 by rpki-client