Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.mft
File: 3VpJ4iJ1cKd8w23V8P-vZhb3Fko.mft (raw, json)
Hash identifier: wxfH+D2fcc0BQxEXuBGkIx1QZjeqvspXjD3CcBOrxok=
Subject key identifier: 36:E6:E4:13:DB:40:B1:D7:6F:13:0B:6C:4A:96:38:51:FA:5F:D7:A9
Authority key identifier: DD:5A:49:E2:22:75:70:A7:7C:C3:6D:D5:F0:FF:AF:66:16:F7:16:4A
Certificate issuer: /CN=dd5a49e2227570a77cc36dd5f0ffaf6616f7164a
Certificate serial: 01A03F3C04320D8E11C9FB78D7C40DB842B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:01:32 +0000
Manifest this update: Wed 26 Aug 2026 18:01:32 +0000
Manifest next update: Thu 27 Aug 2026 18:01:32 +0000
Files and hashes: 1: 3VpJ4iJ1cKd8w23V8P-vZhb3Fko.crl (hash: ix4xMY7eF95O0C68VF9ZM6RVYt5oj6Me+5bR1xDEVVA=)
2: ES-glJ6puZyNN1K9KpsFgz5kbPA.roa (hash: I6nTrLD3olbbdtgUu7ymtqxkGuHsVPiyrUht1lASf50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3c:04:32:0d:8e:11:c9:fb:78:d7:c4:0d:b8:42:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5a49e2227570a77cc36dd5f0ffaf6616f7164a
Validity
Not Before: Aug 26 18:01:32 2026 GMT
Not After : Aug 27 18:01:32 2026 GMT
Subject: CN=36e6e413db40b1d76f130b6c4a963851fa5fd7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:25:de:25:83:f6:b5:47:97:29:49:cd:48:
e8:b4:3a:bd:da:0c:4b:13:70:1c:d2:bc:54:30:1a:
e9:8f:08:fb:de:f8:bc:ac:b6:bb:d7:fb:6e:7a:dc:
39:da:67:0a:fd:98:86:ad:31:d6:cb:a0:e0:b5:a7:
d3:63:2b:3b:3d:d6:ee:5e:63:ff:06:3a:8b:9e:43:
00:69:e5:1d:7f:1a:b1:73:56:d2:fd:b6:9f:e6:65:
bc:24:ce:19:fe:2c:1a:cf:a6:9b:3a:d4:d3:44:55:
dc:76:b2:9d:d0:7b:b4:32:fa:54:86:26:c0:4a:8f:
0d:0e:7e:50:8d:0a:f4:6f:2c:d0:67:8c:f0:83:c1:
72:04:66:f6:06:76:f9:44:56:0c:82:44:6c:80:6b:
d0:70:7b:d2:21:f7:a5:9d:ef:f7:1f:e6:6a:a5:47:
48:a9:f9:49:43:58:51:89:f6:61:1e:44:89:a0:5d:
a7:09:21:03:79:b4:5a:3f:e0:2d:b5:42:8b:d4:c9:
41:27:e2:8c:b4:6c:ba:86:0b:73:88:9f:94:c5:a4:
a5:63:01:d5:cd:56:7d:0a:26:2e:25:9a:5e:98:f3:
d7:d8:a7:8b:f8:3f:b4:69:fa:0b:65:be:52:8e:89:
c0:84:da:e6:e2:7d:de:9d:7b:12:4c:7f:f6:5b:3b:
3f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:E4:13:DB:40:B1:D7:6F:13:0B:6C:4A:96:38:51:FA:5F:D7:A9
X509v3 Authority Key Identifier:
keyid:DD:5A:49:E2:22:75:70:A7:7C:C3:6D:D5:F0:FF:AF:66:16:F7:16:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:48:c4:dd:65:60:d6:bb:5e:69:94:30:a8:8d:cf:7d:bb:8c:
ea:80:5d:bd:ae:ad:16:42:88:6f:4b:5a:ac:78:d1:22:58:95:
bf:82:1a:6f:6e:0b:de:c6:11:4d:50:48:38:ee:30:9c:b0:02:
cd:0a:76:a1:d1:fb:1a:ad:09:a3:3d:98:d7:24:5f:60:8e:17:
4d:64:a4:3e:75:ea:dd:2a:aa:1c:4d:f4:0b:9a:62:06:81:6f:
ce:d4:42:75:4b:b8:7c:7f:16:8d:99:dc:b0:7f:1d:ec:67:45:
9f:bb:84:32:9d:38:eb:7d:5e:5e:f3:4e:fb:58:7d:f8:f2:7f:
fb:3d:3b:bb:78:d7:74:d3:81:7f:c2:e9:1d:68:d5:d0:f4:80:
af:d2:26:a5:50:d2:b8:49:f7:88:a5:15:8c:0b:89:43:d4:10:
52:ab:0c:84:98:f0:dd:91:6c:1d:0f:00:c8:40:98:ad:2d:81:
a9:dd:e1:2b:f2:77:de:43:90:1c:3d:12:36:21:31:9f:19:f1:
bd:39:97:e0:f2:68:62:55:6f:71:cd:af:6b:91:9f:16:40:02:
76:5f:9c:8e:8b:bc:ce:7a:88:89:b0:8a:11:84:f8:e0:21:03:
9b:32:45:75:c1:4b:82:69:7c:bc:27:ed:de:7a:1e:95:63:46:
00:72:3a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:24 2026 by rpki-client