Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
File: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft (raw, json)
Hash identifier: xbIw3V9PKWwP8JvBEdYyqtJo9yJhL87CnwiEKbS7I/4=
Subject key identifier: 78:6D:AB:85:56:03:77:70:6A:9B:41:79:59:A3:74:46:37:7F:73:18
Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
Certificate issuer: /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Certificate serial: 019F84FAD8EAC91BD3AA58C6A50FCFC282F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
Manifest number: 02AD
Signing time: Tue 21 Jul 2026 14:00:59 +0000
Manifest this update: Tue 21 Jul 2026 14:00:59 +0000
Manifest next update: Wed 22 Jul 2026 14:00:59 +0000
Files and hashes: 1: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl (hash: PQAzXYDAxzFdjCSXOl6xvK5ApRGUSoA4FekMoyPQ7h8=)
2: hitJJLRKZoeTjFy1UdVtOKCeU3E.roa (hash: P3W2mUUG6W+rjdD2ot4LgXNOj0ClkdXmzifsh0+3Km0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:d8:ea:c9:1b:d3:aa:58:c6:a5:0f:cf:c2:82:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Validity
Not Before: Jul 21 14:00:59 2026 GMT
Not After : Jul 22 14:00:59 2026 GMT
Subject: CN=786dab85560377706a9b417959a37446377f7318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:33:6c:86:b6:0b:5b:04:aa:9c:cb:95:8c:
b8:ea:fa:9c:35:59:07:09:24:28:23:78:5b:50:f2:
42:88:f9:35:7e:58:65:e3:47:ab:b0:a5:2b:16:5e:
b1:02:19:de:7f:ce:a0:06:5c:71:cd:c9:69:a6:c6:
f9:46:8a:7f:48:6b:c5:04:0a:03:68:dd:2d:1f:79:
8e:55:7c:69:6a:a4:f4:12:92:f8:2e:ca:9c:c0:b8:
d5:ef:6d:72:86:41:0f:00:c5:7d:3a:20:e6:46:2a:
2b:27:44:4d:f5:bb:9d:0c:22:3d:51:93:a5:39:cf:
17:32:55:bb:70:1b:e2:b7:3f:7f:d0:f6:fb:c2:ac:
3c:d6:0b:78:48:3a:37:e0:a2:4a:ab:a6:27:47:83:
e9:c0:fa:d1:f4:7c:51:13:70:d8:4e:47:df:dc:1f:
e4:b7:bd:10:4f:ea:3d:08:53:99:16:df:6f:df:a7:
8d:71:d9:95:c2:04:d3:35:76:62:03:48:aa:d8:4b:
da:4f:a1:a9:f8:1e:02:10:86:02:11:56:38:13:8e:
f9:b2:c0:6f:92:e0:17:48:b1:8a:51:5c:83:a1:cd:
42:30:b2:89:c5:c3:36:22:34:19:c2:a7:73:11:50:
0e:46:9f:af:0c:cf:cb:bc:dd:8e:f6:07:12:a9:8e:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6D:AB:85:56:03:77:70:6A:9B:41:79:59:A3:74:46:37:7F:73:18
X509v3 Authority Key Identifier:
keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bf:5e:25:b9:4e:77:13:0d:96:3c:19:26:a1:32:00:7c:07:
85:06:78:50:73:ba:9a:f0:6b:74:89:99:31:e1:ee:9d:44:7a:
37:c0:e4:b2:c2:c8:51:84:24:ad:0b:5b:07:77:9b:3d:c0:56:
63:02:b3:33:4f:f3:47:b9:17:7e:7e:84:1b:3a:6d:ff:b9:31:
a8:66:71:3f:5d:0f:b7:de:df:1c:0b:eb:82:d3:68:b1:b8:56:
5e:04:72:8e:a1:1c:cd:af:fd:1e:d7:51:da:eb:eb:ab:19:1c:
26:78:11:8d:71:d1:8f:c2:6d:b8:cd:97:9e:0d:43:df:a9:73:
79:b0:17:26:2f:a2:64:67:34:f4:31:e7:f8:d0:45:0c:c7:00:
3a:f8:0f:ac:88:15:f6:ea:3c:1e:1b:26:50:00:0a:54:68:c1:
a6:6a:fd:c6:6e:0b:0c:5a:ac:25:36:d9:7f:e8:68:cf:b2:16:
ed:d9:7a:71:e3:19:94:0a:b5:27:58:56:7f:55:36:9a:b8:1d:
f0:93:58:eb:ae:23:62:65:21:c3:df:95:8a:e1:cf:0b:00:10:
48:5b:8f:d9:39:f8:16:4d:ca:4f:6a:33:29:7e:67:e6:92:a0:
22:94:42:dd:42:41:0d:82:8d:59:00:9c:8d:c0:1b:0f:ac:1c:
07:11:d7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:05:44 2026 by rpki-client