Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
File: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft (raw, json)
Hash identifier: 6FMtxRmevtPF5uvH81zSN80MdWE4KD/dar0RXxDZCsE=
Subject key identifier: 09:F8:E0:37:4A:39:7D:39:8E:2F:54:E1:2A:C8:BA:AA:AB:20:8D:10
Authority key identifier: DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
Certificate issuer: /CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Certificate serial: 019F9E836E68E54753A84E5C59C4A42DB7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
Manifest number: 01E5
Signing time: Sun 26 Jul 2026 13:00:41 +0000
Manifest this update: Sun 26 Jul 2026 13:00:41 +0000
Manifest next update: Mon 27 Jul 2026 13:00:41 +0000
Files and hashes: 1: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl (hash: IAYG725J/LgvFJGH9ohMbBLRyGMTj95kPJz40F/6gX0=)
2: VGuckUmXD3FffNojHBh4mr4L2f8.roa (hash: 8TbPfvVyzj3G5WKw2nSbHXcBZE5w35KkZHPmx5cAQsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:83:6e:68:e5:47:53:a8:4e:5c:59:c4:a4:2d:b7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Validity
Not Before: Jul 26 13:00:41 2026 GMT
Not After : Jul 27 13:00:41 2026 GMT
Subject: CN=09f8e0374a397d398e2f54e12ac8baaaab208d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:27:3a:e1:59:4a:b3:a3:59:90:1c:14:f5:
8f:70:d4:38:68:30:48:02:68:69:99:f8:51:15:55:
46:90:1b:3b:df:3f:6e:43:a2:45:e4:0f:73:fe:af:
7c:dc:2a:67:2a:f5:cb:cb:2e:6e:17:24:e3:54:53:
5b:c2:60:0f:19:0b:15:cc:61:4d:c8:13:f0:cb:81:
40:10:fd:46:b6:50:e8:34:67:85:24:d4:26:66:b1:
c2:b4:69:1b:67:15:9b:85:f6:2f:ea:db:6c:a5:0f:
b0:de:ed:33:e8:5f:7c:10:33:c9:1f:6a:5f:ad:ac:
4d:dd:3f:f0:21:40:59:18:fd:28:a2:51:a3:51:fd:
69:c9:91:b4:c9:08:f8:93:08:49:79:18:cb:f8:c2:
63:a2:fc:d3:53:31:03:39:aa:53:76:ef:f5:01:c1:
44:ea:fc:77:66:cc:a5:7b:08:e2:38:b8:f3:8e:9a:
30:bd:3a:ad:df:01:4c:2b:0d:45:40:d3:bb:5a:2b:
1f:56:3e:2c:3f:10:5f:68:81:14:2c:56:58:7b:9d:
08:3e:9a:28:93:64:e2:32:c8:e4:be:aa:6f:c8:3b:
d3:a2:62:a2:72:e7:b2:0f:2d:16:24:bf:88:fc:b8:
ef:56:b1:46:4d:5d:fb:90:ee:09:07:3d:a5:53:20:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F8:E0:37:4A:39:7D:39:8E:2F:54:E1:2A:C8:BA:AA:AB:20:8D:10
X509v3 Authority Key Identifier:
keyid:DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a3:f5:73:ba:53:74:ff:f6:db:69:49:81:c0:fa:bf:a3:79:
ea:8d:5b:fc:0d:df:0f:65:15:6f:59:e1:51:bc:90:a0:32:88:
97:c8:8a:e8:69:f2:aa:b0:b6:89:f1:1c:ca:5b:43:7c:97:0c:
81:31:c2:49:9f:ff:95:e6:ff:c1:94:4c:5e:fe:e8:43:69:64:
7c:5b:fd:c6:d8:97:56:45:47:b9:d9:27:11:84:16:b8:19:0f:
f5:01:d1:e6:1d:4a:f8:35:8c:80:84:83:5c:4a:2d:bc:8e:00:
79:13:d5:86:51:cb:bf:4f:df:09:1f:39:0a:e7:f5:d9:bd:eb:
03:8a:c1:06:e1:33:7c:00:73:65:87:35:fe:96:d8:33:59:5f:
55:f0:a0:98:97:51:cc:67:a9:5b:25:35:c2:a3:f3:be:e8:69:
da:7a:b8:0c:fc:de:69:c7:fc:f5:88:14:4f:4e:17:e7:41:c6:
a8:9c:a5:fa:b4:5f:76:1f:bb:91:08:d3:31:52:f0:48:16:b2:
d1:51:66:ab:6f:92:4e:0e:32:9b:36:6f:06:3a:19:11:df:c6:
0b:b1:d0:91:39:ca:1f:8b:53:6f:14:07:57:5e:55:89:ee:06:
38:3a:f7:d7:e2:06:c8:f2:c5:03:e2:48:81:04:09:96:e7:67:
8b:e1:09:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:28:18 2026 by rpki-client