Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File: 3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier: 3LV3jEOCAqScBpogDeRocGK1b+5HHTWM4003ywqhyP8=
Subject key identifier: 40:71:BE:2D:CC:06:98:D4:6B:4F:29:09:8C:8A:55:08:8F:5F:98:38
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial: 01A0005D253284C1442AEB53C094DFD7918A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number: 17D9
Signing time: Fri 14 Aug 2026 13:01:39 +0000
Manifest this update: Fri 14 Aug 2026 13:01:39 +0000
Manifest next update: Sat 15 Aug 2026 13:01:39 +0000
Files and hashes: 1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: 971XssXcnkKdMQF20OBUwW0amZF5/P60hokdIHdjpzY=)
2: W_PAmrwUdBQv2HWxrdSy6SHG4Mk.roa (hash: U5b72Zmh/JVyUJzYUod1+mwOGitj2M1nMBA9xsjmnOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5d:25:32:84:c1:44:2a:eb:53:c0:94:df:d7:91:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
Validity
Not Before: Aug 14 13:01:39 2026 GMT
Not After : Aug 15 13:01:39 2026 GMT
Subject: CN=4071be2dcc0698d46b4f29098c8a55088f5f9838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:f0:93:70:5c:e6:3f:c0:ce:97:79:17:5c:
e9:a8:8f:de:86:90:15:01:a0:37:be:92:e4:55:c2:
0f:d1:c3:fb:ab:ac:65:70:a1:43:7e:34:ef:97:59:
13:f6:8d:8a:04:64:1f:2e:d8:4b:15:76:55:e7:f2:
92:6c:a9:00:b1:31:d4:cc:a9:81:43:f5:a7:98:6e:
d0:0d:30:11:e2:46:05:ae:34:f3:0c:cd:72:d7:08:
6a:f8:f1:30:44:ae:6e:a5:c4:8f:cd:e8:fe:d7:60:
8d:92:a7:64:08:02:c6:e8:c3:2f:ec:45:e6:af:2c:
6d:c0:20:5b:0e:58:2e:5c:3a:88:ca:e5:f7:cb:2a:
0b:46:15:a3:27:56:9f:c0:53:c3:63:e6:98:68:47:
34:e9:fd:4c:8f:27:76:c0:f1:7e:b0:e7:f8:89:e4:
47:f0:14:c1:ce:0e:ad:f1:e4:e3:e1:08:99:e5:d2:
6f:d3:b1:6f:9a:4c:46:98:c9:3e:75:77:fb:01:b6:
30:23:7b:31:40:c1:9d:07:51:1a:70:52:26:ee:5b:
59:b6:2e:e3:4d:c1:f9:35:b8:f6:58:63:29:22:2e:
fa:ee:61:29:4f:c4:64:aa:44:93:f4:2c:26:7e:ef:
1f:dc:5f:83:35:81:77:08:2a:82:03:55:ce:8c:14:
6d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:71:BE:2D:CC:06:98:D4:6B:4F:29:09:8C:8A:55:08:8F:5F:98:38
X509v3 Authority Key Identifier:
keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4b:80:7c:fa:a0:a6:c6:64:b4:ef:da:80:81:4b:f0:c7:1a:
10:d8:11:15:87:f1:b5:31:cf:86:37:fc:a2:e1:8c:d2:08:cd:
3f:72:90:38:9c:31:3b:e0:e4:3f:bd:66:3d:24:d4:92:3a:09:
6e:58:fa:38:e8:50:55:7e:36:9a:9a:69:bf:f3:08:26:8c:dd:
8a:b6:7f:92:4c:0f:90:49:72:73:9c:2d:dd:82:4d:7f:58:ca:
aa:f1:da:5a:a4:65:fc:38:97:ae:74:c1:f7:ca:1d:32:72:ca:
6c:6f:10:85:2c:ba:05:eb:37:ed:bd:47:10:0c:18:2c:9a:cf:
91:b6:3f:59:8a:ae:21:03:41:c2:06:87:8b:17:f4:73:a2:c1:
d4:31:a5:ef:e5:19:f5:4a:80:4c:11:e6:8d:20:4b:b5:8d:8c:
d7:45:36:54:2e:29:dc:19:06:58:ca:d7:76:1b:88:7a:08:3b:
b0:f1:dd:de:90:80:a8:1a:e8:61:53:d0:a6:eb:cf:46:5b:ca:
22:1c:24:23:d8:d6:27:fd:29:29:05:aa:3d:3a:af:82:34:9a:
e5:1b:20:ae:dd:41:cd:fb:56:74:0d:4a:e0:65:29:df:07:3c:
f4:a4:c2:c6:af:79:0b:34:3b:eb:44:fb:4e:02:00:76:1a:7c:
84:23:aa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:08 2026 by rpki-client