Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
File: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json)
Hash identifier: u8oFmsgnQ8HzeTVuQWfbQvzvfXEowjv41VtA6h6ZQmo=
Subject key identifier: 1C:95:13:0C:06:9D:65:82:5F:DD:A4:D3:D5:46:EA:E3:36:8A:21:F3
Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
Certificate issuer: /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Certificate serial: 019F190CC3A1B744FD0E1E544684FDA565DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
Manifest number: 1992
Signing time: Tue 30 Jun 2026 15:01:34 +0000
Manifest this update: Tue 30 Jun 2026 15:01:34 +0000
Manifest next update: Wed 01 Jul 2026 15:01:34 +0000
Files and hashes: 1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: TBdRoRkou4pYA4z68DrkwM41McEA3aaQdGQFAaRYWKw=)
2: XduW4CBIQXx5gf7im8c_KWeejns.roa (hash: khvq/3b+OvcvNxVFIdvoIzkoKq7bskcSfHtiGKsUD3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:c3:a1:b7:44:fd:0e:1e:54:46:84:fd:a5:65:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Validity
Not Before: Jun 30 15:01:34 2026 GMT
Not After : Jul 1 15:01:34 2026 GMT
Subject: CN=1c95130c069d65825fdda4d3d546eae3368a21f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:bb:0f:38:01:e6:ad:89:bf:c4:4b:40:f7:
b2:08:a2:3f:ca:57:c2:23:2d:8c:98:ab:18:68:3b:
e6:d0:30:81:00:6f:95:59:46:fa:6d:c1:13:11:68:
de:0e:12:1f:45:86:a9:a3:fc:00:67:8e:70:c7:b1:
17:49:93:82:7a:e5:73:8c:12:2f:12:ad:b2:38:b3:
c9:54:d7:e6:c9:20:32:62:ff:38:bf:97:53:ff:c5:
d9:f4:67:db:1a:0c:35:db:88:5c:0c:d0:19:d5:c1:
59:ca:46:fa:9f:52:2f:a0:f4:8d:1f:ec:90:db:b0:
77:ca:eb:9e:ac:89:a5:ca:62:af:a3:c8:93:4b:ef:
6a:d1:87:07:ee:18:b6:ff:9f:04:d6:bb:1c:48:15:
cb:99:72:f3:a7:f6:3a:a9:dd:b6:82:be:96:2f:51:
8f:75:5b:8d:13:df:42:88:1e:5a:0e:90:d9:85:f3:
3c:92:f7:e4:ec:ac:da:76:74:9f:4b:e3:b6:cd:4b:
78:85:f5:6c:08:4e:7e:6a:5c:4c:1d:89:41:d2:19:
dd:1c:f2:65:83:40:9d:ad:15:be:f7:59:9c:d6:05:
d5:a7:17:25:74:58:e2:48:a3:23:bc:1e:8b:0b:af:
bc:e7:d0:9a:0b:b3:c1:ea:6d:9c:88:0b:d6:c3:a4:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:95:13:0C:06:9D:65:82:5F:DD:A4:D3:D5:46:EA:E3:36:8A:21:F3
X509v3 Authority Key Identifier:
keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2b:9b:19:6c:8b:7d:68:f3:3c:52:cc:d3:4d:8a:fb:7d:a9:
ee:9c:21:d9:1c:74:6d:b6:8b:5f:f5:9d:07:9a:9c:2e:34:77:
78:58:86:29:f3:57:6a:cf:5b:36:43:4b:4a:7d:87:7b:6c:39:
96:22:df:b6:dd:98:60:33:5d:85:ec:60:04:75:66:a8:a2:22:
47:af:95:9f:41:8f:3b:bd:e7:e9:a5:56:59:44:93:eb:2c:65:
65:35:17:f7:6c:d1:ed:28:30:4c:c5:a3:6a:97:ce:13:a3:81:
39:ae:37:60:fd:13:00:cc:71:8a:18:5b:7b:6e:71:64:d6:91:
0d:0b:40:77:44:65:ed:88:6b:34:e1:60:76:2f:cb:f6:29:5a:
a6:57:fb:1d:b5:0e:61:29:4a:d2:2f:8b:3b:d4:39:49:0a:57:
2a:68:ae:ae:bd:ce:2b:a6:3b:4c:73:2f:91:ab:43:3b:1a:59:
78:80:75:26:7f:fd:ac:f4:ea:01:57:21:58:4c:fc:96:84:39:
1a:35:c2:b2:c6:c3:46:ee:7d:04:65:1c:32:b6:84:f3:df:50:
50:42:20:da:8f:a6:6d:38:b8:30:51:d5:47:a7:43:35:48:7f:
76:b7:0b:e3:7e:08:e2:f8:54:f8:97:83:68:8c:e0:f8:fd:38:
a3:de:01:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:09 2026 by rpki-client