Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
File: 3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json)
Hash identifier: 03rTPgLNOFFWBN4iAnzW2wwy9Iq1pPD0pM995IYRxP8=
Subject key identifier: 99:00:A2:8F:D3:3C:70:91:84:24:26:56:45:D5:C5:03:42:F2:23:35
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial: 01A0024A928159C4BAD54E8EE4BF1FF005B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
Manifest number: 1354
Signing time: Fri 14 Aug 2026 22:00:36 +0000
Manifest this update: Fri 14 Aug 2026 22:00:36 +0000
Manifest next update: Sat 15 Aug 2026 22:00:36 +0000
Files and hashes: 1: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: 8lfJYt3ngJhg5MK49I0q5z/8fTDyHEQdYZ6hHK7sfgk=)
2: h3ZDg5youB0K7vntlWcD6_hznfg.roa (hash: 9Ot/r2EVZQa+csMn0s0+LAGhdTl5GbdXVa69dBPCmRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:92:81:59:c4:ba:d5:4e:8e:e4:bf:1f:f0:05:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Validity
Not Before: Aug 14 22:00:36 2026 GMT
Not After : Aug 15 22:00:36 2026 GMT
Subject: CN=9900a28fd33c70918424265645d5c50342f22335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:0b:6d:15:51:8d:58:71:39:d1:69:17:d1:
dd:21:61:8e:86:df:5a:7a:ad:25:33:78:20:da:a9:
ab:b9:85:54:79:0d:98:d6:e1:65:de:97:f9:53:00:
1c:73:d4:6a:2f:c2:a3:cf:7f:55:47:b9:ea:4c:b7:
4c:20:bc:b7:52:65:0e:8b:27:00:a0:65:17:3f:4d:
72:91:0f:a0:ba:31:cb:02:cc:a4:d4:c0:cb:96:6e:
3b:dd:45:78:3c:43:c8:a1:f9:6a:2c:17:ff:ca:74:
b7:49:83:f6:0d:13:a7:b2:cc:a1:79:f4:16:c8:c7:
4b:79:14:ee:f6:70:6a:eb:6e:cc:e7:41:8b:46:4c:
df:ab:80:d3:47:fb:8d:bc:25:3d:dd:36:4d:64:9a:
38:93:a4:ba:f6:e7:58:5e:7a:5d:73:57:2a:62:a3:
64:d3:fa:e4:66:0b:54:d7:69:a6:1f:20:a7:4e:42:
71:35:02:d5:1d:ee:b4:14:d6:0b:bc:e0:8f:da:d0:
a3:37:ee:5c:ed:c4:8b:9a:14:56:e8:0f:bf:96:49:
d1:0e:b6:72:c8:1a:4c:47:9e:ad:d0:aa:a1:fa:e6:
b0:be:23:4c:9f:61:d2:27:d8:32:70:1f:43:79:f2:
c9:0e:51:52:1e:c2:08:2a:d4:f5:4c:ff:1a:dd:0f:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:00:A2:8F:D3:3C:70:91:84:24:26:56:45:D5:C5:03:42:F2:23:35
X509v3 Authority Key Identifier:
keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:22:01:b8:b0:5b:ee:8e:ef:94:b4:46:bd:28:2c:ef:eb:db:
1e:78:ad:5a:ef:fe:9b:52:b9:67:0e:a7:99:05:94:99:49:89:
d4:4f:d1:3f:b9:47:1a:51:5c:c3:f8:e1:c5:53:1a:f0:20:a1:
f2:d0:70:07:27:dc:dc:df:e5:24:7f:1e:36:93:a3:cf:86:01:
2c:fb:41:9b:7a:97:7b:25:d0:36:87:4f:a8:a1:cd:84:98:e9:
59:2a:d3:c3:ba:cf:4e:97:c0:71:f9:6b:39:fb:eb:57:cb:a3:
da:91:4c:0d:7a:1e:b5:d3:8d:0a:13:39:c3:cd:15:80:89:8f:
0f:36:13:84:fd:04:60:db:30:67:fc:5b:a7:76:9f:09:c6:b9:
3b:6d:25:7e:0b:74:43:9d:22:4f:e4:7a:ca:2a:17:7d:ee:7c:
e7:43:35:63:8a:80:b5:2a:38:dc:6f:3c:3c:bc:57:c1:9c:38:
40:fa:16:5a:ab:25:1b:76:33:c2:9b:83:40:4d:b5:e4:7e:5b:
52:d2:8c:37:21:32:2f:c2:77:ff:7b:da:55:d3:7a:29:c4:bb:
5c:ac:ce:11:43:dd:77:7e:a1:36:97:df:9f:5d:33:36:91:3b:
0b:9b:82:cb:c2:3a:3f:0a:42:1b:ba:52:93:6f:68:07:ee:8c:
e0:8a:47:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:24 2026 by rpki-client