Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: QBKT+0wEcVOk8UdHPwl4Ttehdrq8o0q4XSBBOTgyLoM=
Subject key identifier: E3:A7:89:7A:C3:BA:DD:9F:43:4B:01:85:1F:D8:5A:98:52:74:08:76
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 019FA1843D965F9FBA0F086CECF8DEAC774E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 19DD
Signing time: Mon 27 Jul 2026 03:00:25 +0000
Manifest this update: Mon 27 Jul 2026 03:00:25 +0000
Manifest next update: Tue 28 Jul 2026 03:00:25 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: Dyf2YPrXRrSccEe1ihg/W0P/3XO9nU77jbm1wOd0i/U=)
2: VfPqQIUYDVEcRMuY0y_1WkG7tNM.roa (hash: jXhdAhn6nzRP7djqjR0wEfaKlgEOeT24wYK6k5lvQMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:3d:96:5f:9f:ba:0f:08:6c:ec:f8:de:ac:77:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Jul 27 03:00:25 2026 GMT
Not After : Jul 28 03:00:25 2026 GMT
Subject: CN=e3a7897ac3badd9f434b01851fd85a9852740876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:c5:36:70:bc:36:cb:3c:23:e9:02:6d:7f:
f7:27:52:ce:6e:5f:b6:13:8d:3d:83:2d:cf:ea:ed:
cf:85:e9:5e:a1:cb:e6:32:9d:f9:9a:e8:9e:38:77:
38:9c:46:20:02:83:b6:2c:94:dc:f3:4a:95:24:2b:
3e:1d:2f:9a:13:7c:22:40:7a:59:74:ee:05:dc:96:
24:7c:ca:d7:6d:80:9e:b6:28:a9:b3:65:b0:dd:7f:
b2:f7:4f:bd:c2:f2:07:5f:b3:e5:9e:18:d6:6c:c6:
af:a2:0e:eb:67:5e:b3:d1:a5:67:f7:3f:80:e2:1f:
39:3c:64:3a:8e:6d:75:8c:db:65:f5:aa:6c:9d:37:
81:6e:42:b5:ef:10:5f:fe:32:74:48:cf:bd:f0:26:
cf:03:e0:3b:58:47:8a:96:fd:ea:9f:bf:40:1a:c0:
4f:02:99:47:3a:cb:23:bf:16:15:76:ac:11:9b:57:
16:67:50:a2:b5:11:6f:5d:38:a0:7f:ba:98:21:7d:
71:61:a8:07:69:f9:11:19:90:8f:de:1f:07:11:c8:
f0:f0:a1:aa:43:53:9a:7f:5a:66:98:a2:4f:99:4a:
98:f0:ad:dd:ad:f7:68:cd:2f:90:57:5a:f6:7f:bd:
48:30:73:0d:c8:92:d7:09:8b:67:79:ab:9c:86:01:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A7:89:7A:C3:BA:DD:9F:43:4B:01:85:1F:D8:5A:98:52:74:08:76
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:67:84:81:7c:d5:70:6d:8d:cc:1f:5e:d9:c7:45:87:c1:4f:
96:b1:be:bf:12:42:14:b2:13:97:61:bd:06:ec:ac:0a:47:4d:
ab:b7:9b:64:8d:eb:87:a5:a3:72:49:82:ab:fd:5d:cc:69:60:
00:79:06:50:40:1f:9c:3d:6b:b0:ec:f3:db:3d:ac:a0:09:f3:
44:ac:ca:ee:72:8b:80:3d:98:67:30:be:cd:8d:5e:33:38:17:
94:de:cb:4e:d0:5c:60:5e:f2:27:93:0d:a7:df:fc:e6:77:4e:
03:ab:20:a3:4f:b4:8c:76:b5:a5:ff:08:84:a5:a3:03:78:61:
dd:2e:79:5e:3b:76:b9:11:48:7f:4d:51:7e:16:67:cf:a4:b5:
e4:90:56:8c:9d:f9:ef:39:3e:69:a4:e6:4d:19:29:9a:56:3f:
06:a6:68:d8:6a:1e:10:7c:d6:e3:4b:fd:49:77:7c:15:51:63:
c4:52:74:76:40:79:24:6b:6f:f7:bf:e6:51:a0:c5:7e:82:40:
eb:30:bb:f0:c4:3a:55:fb:68:cf:1f:23:c5:84:91:a7:54:ce:
ae:73:9e:7f:3c:64:10:31:23:c3:20:08:df:a5:92:96:58:0e:
94:bb:21:3a:91:87:c2:6c:15:aa:05:ae:e8:2a:34:62:e7:db:
f2:37:08:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:21 2026 by rpki-client