Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: eLcDZcOIMhsDzKOkD/2vf4gaaSPp2ktPhd+5n00XDXk=
Subject key identifier: C8:36:B5:37:75:81:7F:5F:41:83:9E:B3:36:66:A4:64:42:0A:9E:B5
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 01A0005CA78D7A65B1AA51446D1363D732D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0F0D
Signing time: Fri 14 Aug 2026 13:01:07 +0000
Manifest this update: Fri 14 Aug 2026 13:01:07 +0000
Manifest next update: Sat 15 Aug 2026 13:01:07 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: KQMzrC6dEJYuHzc9ioCyNV/efx5jXDABg+3n1QYChWg=)
2: 7oc8a8fS3DJKvtS40qTcpFXQvEM.roa (hash: 8aVVJ9t5PeC1jL7SS/bu2hleqTmY1JsdKhA8bRBNWso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:a7:8d:7a:65:b1:aa:51:44:6d:13:63:d7:32:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Aug 14 13:01:07 2026 GMT
Not After : Aug 15 13:01:07 2026 GMT
Subject: CN=c836b53775817f5f41839eb33666a464420a9eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:df:b6:c0:90:be:c4:85:ac:66:95:c2:5a:
68:84:cd:fb:0b:b7:ad:38:2c:5d:73:ae:24:0b:0a:
91:21:a2:74:45:74:f2:00:b4:74:21:f9:a5:eb:3e:
ed:01:76:24:04:f9:65:d9:f2:38:11:d2:96:f1:4e:
d7:5c:98:81:90:ea:a3:72:80:88:4f:9b:bc:9b:be:
26:cd:08:f8:d0:45:ef:4c:61:6b:5f:df:b8:3c:a0:
ec:ff:2e:fd:98:80:41:6d:2f:7b:b5:36:14:35:f2:
b1:8b:18:1a:e3:00:29:d2:38:de:c9:71:e9:06:f7:
06:e9:32:ae:24:45:2b:e5:3f:66:4a:9b:76:f8:02:
be:02:f7:6c:dc:f3:9f:ae:af:5e:ee:1d:47:2c:2c:
73:da:aa:86:03:8c:a4:f5:3c:1c:69:ca:9d:f2:16:
80:d1:27:13:01:b3:1f:cf:47:3b:3c:0d:06:ca:83:
25:9c:f9:6a:ab:4c:63:b9:86:9e:d7:44:98:26:c5:
7a:f6:53:e1:b2:b5:7f:c9:12:0d:3a:79:a0:e6:b8:
9e:ce:16:2f:47:55:37:7e:0d:f0:09:07:d5:a4:37:
71:fa:7c:9c:38:3d:5e:50:ac:6e:36:1f:c0:39:c1:
e5:24:cb:23:eb:bf:70:40:47:3d:6c:bd:7a:79:27:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:36:B5:37:75:81:7F:5F:41:83:9E:B3:36:66:A4:64:42:0A:9E:B5
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:71:19:9f:98:fc:27:73:f7:3b:e8:ef:2b:90:72:6d:8a:9e:
9a:aa:f2:42:c3:43:d1:d1:4c:ad:7c:b9:32:b8:6c:e6:f8:ce:
b5:b7:37:03:2f:50:9e:78:26:a6:9a:c4:01:1a:9e:64:44:eb:
7a:ee:74:ed:52:b1:cd:87:e8:f7:c4:3a:ff:e3:c2:2a:a4:4d:
78:8d:e7:3b:4c:47:a5:cc:ba:4e:90:b1:af:ab:29:5c:51:fa:
52:2e:12:ae:8b:c7:b5:17:fc:02:93:ba:2e:0f:9f:a3:8d:d6:
b7:0e:d2:61:87:65:e3:22:aa:67:80:c9:e4:3c:10:5f:39:20:
b4:51:d0:ba:fc:66:fd:bd:86:ca:d5:05:fa:87:86:1e:9c:85:
2e:5e:f9:84:ca:b6:4f:e1:09:5d:49:80:59:ad:bf:ca:e6:eb:
cf:27:2c:70:9c:a3:8f:39:7a:71:da:3e:5c:c1:8f:20:18:44:
7b:51:62:2f:b1:ff:70:9e:79:a9:e6:88:f7:02:06:4f:71:15:
0c:55:8c:2f:e1:26:bd:a4:7e:cf:0a:b7:a9:77:db:3a:50:d1:
61:32:16:1a:d9:3b:6c:a2:58:8d:3c:b8:63:3c:79:97:74:36:
ff:71:8a:d5:04:34:64:91:39:72:d3:f9:ce:31:69:5d:66:ba:
53:c4:80:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:20 2026 by rpki-client