Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier: mPGhN+BiHoB4RSZtxjwA29RFZ2G6jx+ULIyfVjFNLaA=
Subject key identifier: A4:CD:5E:39:31:71:13:D5:FB:18:F2:C0:B6:19:60:6D:EE:35:C5:2B
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 019FA03B1F61EBAB107A6363704C45623F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number: 0C40
Signing time: Sun 26 Jul 2026 21:00:56 +0000
Manifest this update: Sun 26 Jul 2026 21:00:56 +0000
Manifest next update: Mon 27 Jul 2026 21:00:56 +0000
Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: FYlRQHZxZ4UCxsIRa7KRYPBh6DG9IiwR2D+W48P3c0g=)
2: OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa (hash: WPn0W+4jICl9OeInrEgUZWegwTFzjRsf+1TWPog3Wy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:1f:61:eb:ab:10:7a:63:63:70:4c:45:62:3f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: Jul 26 21:00:56 2026 GMT
Not After : Jul 27 21:00:56 2026 GMT
Subject: CN=a4cd5e39317113d5fb18f2c0b619606dee35c52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:6b:9a:77:70:e8:c5:c5:a6:99:6a:40:d4:
50:76:28:19:3b:0e:c8:68:da:1c:97:e3:ae:8c:3c:
8b:fa:90:40:20:80:23:bc:c6:c6:a0:ce:42:0d:c0:
c3:cb:59:41:0f:55:a1:7f:1d:17:34:d2:61:c2:a8:
0e:e2:88:7f:19:32:3e:db:bc:7b:2e:68:bd:96:ad:
f4:1d:1c:45:e3:8e:49:bc:52:7a:6d:56:c9:17:8c:
49:92:9d:63:e9:40:0e:58:a0:91:de:e6:97:1c:2e:
1b:e1:b5:90:5e:da:1e:f5:87:99:30:f4:71:eb:45:
7b:b5:c8:c2:15:f1:71:bd:5c:f8:d5:97:3d:39:f0:
ba:4c:da:6b:c9:a3:05:01:68:07:9d:e0:c0:5a:95:
e4:42:0e:28:f8:0c:e7:ae:8c:25:02:5a:9a:eb:1b:
3a:3a:6b:12:6e:cf:3f:bd:e8:cf:14:f3:fc:2d:18:
62:2f:87:83:3f:1a:47:6a:62:18:a4:0d:18:c1:0f:
95:d9:52:04:30:2d:ce:0e:98:d2:f9:ab:4b:8d:fd:
3a:e9:30:99:6b:4a:bd:75:b1:54:2c:9c:d0:dc:b6:
ac:99:b8:82:df:56:aa:e5:5a:47:7b:26:dd:ae:e8:
c5:21:98:c9:f7:78:85:15:b8:42:f0:54:a4:2a:24:
1f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CD:5E:39:31:71:13:D5:FB:18:F2:C0:B6:19:60:6D:EE:35:C5:2B
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8f:cf:7b:0d:73:f9:03:38:f6:0c:10:44:ae:a8:e9:32:de:
6b:4f:6f:c8:a2:e9:50:74:83:ff:11:06:9b:96:d0:63:44:45:
3d:a6:6e:f3:96:fd:b4:3c:e8:49:28:81:c0:b3:d4:0e:af:8e:
89:32:69:76:d4:0f:db:74:eb:0d:af:57:b0:51:73:89:b9:ee:
a5:68:81:13:df:28:eb:29:b6:bf:1c:8f:9c:79:74:ee:42:34:
86:d5:c4:52:0e:88:c5:45:44:be:43:3e:f0:65:dd:ff:04:97:
79:43:3d:12:44:58:0e:5f:5b:e3:6f:f1:02:0e:f5:bd:6c:f7:
50:61:10:e4:bf:6f:f1:e3:6f:b3:9b:3b:86:2a:f1:3a:e6:f3:
08:55:b1:e7:91:f7:c5:e9:79:36:ea:c7:1b:dc:24:b4:ae:00:
0a:2d:aa:1e:5b:e3:6b:0d:1b:91:8e:fb:5b:00:68:e1:d7:4c:
66:05:f8:85:9d:7e:13:16:9d:a1:96:e9:1b:4a:8a:33:56:41:
aa:60:56:68:69:aa:0e:3d:4d:c0:81:e6:3e:71:67:63:db:00:
8d:96:18:dd:21:ab:30:cc:e5:10:3b:a1:45:46:47:82:d5:ee:
f3:dd:fa:98:03:e9:ed:07:78:8e:da:43:af:17:9f:37:6d:3c:
f7:10:dc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:46:58 2026 by rpki-client