Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
File: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft (raw, json)
Hash identifier: +BRUKQZ8M4roMclR5D2n33pUWHqaJ8cE6Vv4n6kMXhs=
Subject key identifier: C9:A0:B8:7D:7B:04:70:B3:B4:AE:89:AA:3F:1E:39:11:6B:8D:B7:D0
Authority key identifier: DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
Certificate issuer: /CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Certificate serial: 01A0016F6B1EA60A2AD2C4923E41A1CB6355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 18:01:14 +0000
Manifest this update: Fri 14 Aug 2026 18:01:14 +0000
Manifest next update: Sat 15 Aug 2026 18:01:14 +0000
Files and hashes: 1: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl (hash: quZ6FGmH+y3+I6bkk0ci0C+KQvPXo9/S3pvs4G2eF2E=)
2: QAWM0Lol009j6uKq6lsWaoRBKH0.roa (hash: lK/TjxV7zjq43eORaaonfTSL2oVI9tSkgfqFQO6a0ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:6b:1e:a6:0a:2a:d2:c4:92:3e:41:a1:cb:63:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Validity
Not Before: Aug 14 18:01:14 2026 GMT
Not After : Aug 15 18:01:14 2026 GMT
Subject: CN=c9a0b87d7b0470b3b4ae89aa3f1e39116b8db7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:d4:65:18:f9:79:ce:03:ee:10:cb:07:77:
03:dd:92:96:48:6e:ed:e7:79:05:9d:53:2b:96:47:
99:cb:e2:2d:09:33:9e:ed:91:b2:1e:8c:45:20:2f:
11:9a:f7:dd:03:1e:09:7f:cc:d8:e9:57:23:27:72:
79:e2:a7:79:18:ff:3d:a3:48:21:28:5d:eb:88:96:
92:0f:02:67:b4:ea:0c:c5:9f:8c:71:1d:4b:fd:5a:
bc:9b:26:36:20:65:c0:f6:03:f6:cd:96:ee:1b:fa:
53:41:19:60:4c:4d:58:09:7f:13:d9:6c:9b:3d:2f:
3d:30:44:88:7c:8b:8c:54:2d:fe:a8:be:d7:a2:c6:
b9:21:66:70:ee:9e:a1:64:e3:44:84:1e:1d:b7:89:
18:36:ae:e9:8f:5c:98:cc:5c:ea:ad:b2:4d:b3:b9:
ea:30:14:da:02:27:41:ca:9d:6d:64:e9:bb:76:65:
d1:56:c7:98:8e:18:cc:72:60:a2:06:5b:92:29:f9:
3d:42:7d:14:04:75:3a:8d:63:14:7f:97:c2:1f:a6:
80:ef:fb:7e:7b:4e:3c:71:28:ef:df:59:bd:97:db:
b0:4a:2b:f2:1a:f5:13:bd:99:84:c7:bc:73:e1:ee:
d0:87:a2:be:36:76:81:12:39:54:3a:2a:9b:48:7f:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A0:B8:7D:7B:04:70:B3:B4:AE:89:AA:3F:1E:39:11:6B:8D:B7:D0
X509v3 Authority Key Identifier:
keyid:DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f5:3e:d4:c3:1b:9c:6e:01:fe:fb:cf:7a:08:fd:72:ff:48:
a6:38:77:9f:aa:91:5c:d3:1f:16:af:1a:a6:1b:fc:7a:b7:22:
41:fe:20:e1:51:82:ee:f1:15:5f:1a:bc:71:86:00:7f:1d:6b:
12:01:60:87:10:ab:e5:4f:ff:17:d9:7d:09:11:79:f3:60:85:
84:5c:2d:77:b3:b7:f8:2d:e4:aa:d7:9e:b7:82:bf:bf:44:62:
f5:74:3b:4f:df:64:60:29:c9:39:41:da:85:f2:c4:82:32:71:
48:00:17:41:69:d7:9b:d0:ab:2c:26:78:7a:f3:89:56:6d:ab:
bd:3a:e4:2a:b9:3f:c5:09:94:3b:d8:7f:32:8f:05:90:e1:4c:
47:9f:34:24:3f:2a:4a:a6:cf:a8:7e:8f:5b:af:46:6a:bb:f4:
d2:86:3f:e3:6f:86:08:38:c2:ed:44:6a:15:ce:1e:ea:ef:e2:
95:5b:e3:61:c2:6d:0f:bb:80:07:2f:56:eb:86:f2:1c:26:8e:
26:57:2f:fd:4b:a5:1d:9f:5d:68:ce:1c:33:7c:9a:53:b6:3a:
79:53:ef:b9:1e:0a:16:d4:00:7a:3d:de:d1:1c:26:2c:2b:27:
e4:d6:88:07:a2:ec:01:17:24:29:05:a4:c7:05:76:13:03:b0:
f8:ee:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:38 2026 by rpki-client