
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File: 3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier: p1+LTvttGSONo6Rml8Y90UAtRcwY4Su8bH38UKkXiss=
Subject key identifier: 37:6D:6C:E2:DE:F8:76:61:30:66:ED:A2:EF:9F:4C:2C:76:5D:2D:0F
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial: 01A000CA2793CE13FE9F69371FF221F19708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number: 1A05
Signing time: Fri 14 Aug 2026 15:00:43 +0000
Manifest this update: Fri 14 Aug 2026 15:00:43 +0000
Manifest next update: Sat 15 Aug 2026 15:00:43 +0000
Files and hashes: 1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: ykp4uNZNqjbelvhY1f3bt7D04CRD41udZM2Qvk3RDZo=)
2: DX5ooE9ZIZJaF02Q9CvGnKIWcNY.roa (hash: wTDsCt307bisN+gK3/IsNzSToPiLxzeSSNZDltvG+zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:27:93:ce:13:fe:9f:69:37:1f:f2:21:f1:97:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Validity
Not Before: Aug 14 15:00:43 2026 GMT
Not After : Aug 15 15:00:43 2026 GMT
Subject: CN=376d6ce2def876613066eda2ef9f4c2c765d2d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0b:06:af:44:6a:c5:37:be:0b:d8:25:ae:25:
74:2f:a8:ab:69:01:92:bb:41:a1:b9:25:f0:a5:0c:
2f:dd:0b:f1:fb:9b:cf:58:c9:d1:6a:cf:91:b8:df:
ef:bb:ae:e2:76:7d:e1:42:a3:5d:01:ea:cf:db:ff:
8a:17:6f:6b:8f:8a:60:a8:fe:86:28:1b:70:e7:02:
21:75:bb:3d:72:56:1e:0d:99:18:3f:6b:f2:4e:61:
ec:b6:9e:c3:c9:aa:87:12:57:9e:b1:99:ef:75:ee:
8a:d4:24:83:c0:49:00:ba:18:8b:10:c6:96:da:ef:
35:91:a2:d2:8d:68:1d:e2:28:a6:86:fc:aa:c5:b7:
f0:0c:73:92:17:06:dd:99:5f:81:1f:3b:f0:bd:2b:
93:8e:a4:69:6e:cb:24:fa:34:d8:7a:56:38:fe:ad:
94:13:7c:c4:d5:f7:c4:c2:cd:f8:cb:54:19:37:5a:
d3:35:37:21:1b:ce:ed:f9:57:67:e9:14:72:ab:1f:
c9:69:a3:30:d9:c1:7d:47:5a:a2:c6:37:d0:37:60:
aa:e4:b5:52:b3:34:41:5a:69:68:51:cc:9a:68:f3:
ef:49:22:9a:2a:9d:6b:f9:4a:46:cd:82:91:81:a5:
c2:60:a1:c9:b1:21:f6:f0:6c:08:64:9f:8a:9d:ac:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6D:6C:E2:DE:F8:76:61:30:66:ED:A2:EF:9F:4C:2C:76:5D:2D:0F
X509v3 Authority Key Identifier:
keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:27:1b:a5:9a:47:9b:60:0b:da:a0:0d:f7:4d:ea:a6:a1:58:
f2:41:6d:b5:b3:06:59:40:01:0e:42:20:a9:8c:d3:2e:16:19:
3a:89:02:47:aa:12:88:a6:3e:f5:01:e5:97:6f:64:3d:0c:80:
63:ac:2a:29:31:20:3e:5f:80:b0:9e:a7:f3:ae:48:81:60:c2:
29:8f:96:68:2e:bb:76:db:d2:a1:9c:73:1b:61:09:3c:98:b0:
27:5f:15:9a:18:12:ea:98:b4:db:51:0c:4b:1d:15:ff:91:8a:
1d:c0:87:7a:db:a3:b3:f7:89:f2:c0:e1:a5:85:3c:16:d1:51:
68:e4:63:98:ab:d0:58:37:39:ef:5e:d6:1d:1e:4e:62:da:cc:
2a:62:4c:9e:64:b9:3b:65:29:a3:6d:6f:ae:7f:b8:1b:bb:fe:
eb:5b:3e:e1:00:bd:04:0a:36:b4:51:06:89:27:4b:1e:fd:6f:
71:3a:54:45:64:dd:aa:d0:80:7a:5f:a4:3a:3e:7a:cc:32:79:
17:94:8b:0e:8a:69:33:65:c2:06:56:70:b3:9c:9e:51:16:89:
0e:92:ec:70:b1:b4:f5:dc:65:76:1e:5a:3b:4e:5c:00:96:75:
3e:c3:32:f1:66:1e:39:a5:0c:3d:94:99:f4:f1:3a:d0:6e:0d:
87:97:14:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:14:24 2026 by rpki-client