Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier: QofzKIJqSuRS71oMYLW5qoYS/jb9Sj5unCMysmiS37g=
Subject key identifier: 38:CE:95:62:A2:D0:F3:41:A6:17:F7:F0:F6:E9:D7:AE:B0:25:AB:20
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 019FA0E03DC3D5627DA22F4AFBDEC64AA0E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number: 0969
Signing time: Mon 27 Jul 2026 00:01:18 +0000
Manifest this update: Mon 27 Jul 2026 00:01:18 +0000
Manifest next update: Tue 28 Jul 2026 00:01:18 +0000
Files and hashes: 1: LwqXAM6lPGk_PmFvOULH64ObLAs.roa (hash: MrcdOxOshx/gVLtXaalP4jwQbNYdpAAfBt14JuVSsXw=)
2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: MmO39EjTPFNJwknifZSi+b3e7wXpndd6eTbztd3cyBo=)
3: s-1hinZK4tY9bZC4k9BOYyXjqxk.roa (hash: qbBIxBxOXTtMEXXkSI4yM3F77zIR/XL9wvzMoK2RSOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:3d:c3:d5:62:7d:a2:2f:4a:fb:de:c6:4a:a0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: Jul 27 00:01:18 2026 GMT
Not After : Jul 28 00:01:18 2026 GMT
Subject: CN=38ce9562a2d0f341a617f7f0f6e9d7aeb025ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:2c:3b:3d:36:04:aa:eb:a0:33:62:d7:36:
0b:c6:79:b1:ad:0c:e5:dd:35:da:75:f5:0d:8b:7e:
c1:a9:56:d5:c7:f2:4b:da:76:59:e5:3f:7f:8b:51:
2e:f8:0d:0c:92:7e:a6:6e:99:1a:5b:21:a5:a6:8b:
b0:46:ac:b9:75:c4:f3:a5:4a:21:9a:f4:5a:dc:d3:
9e:e7:6a:eb:ae:2d:81:0d:d1:31:2e:a1:87:b8:0f:
76:b9:03:5f:c6:b4:e3:ee:c2:90:4d:df:bd:b0:e8:
79:0f:0b:64:2f:6a:20:55:b1:cb:78:34:a7:1a:ed:
2f:36:92:30:f0:3d:46:af:ab:a2:66:80:6d:e2:21:
1b:83:fe:6b:00:7c:9d:eb:a8:be:fb:d5:1b:36:b2:
7b:98:93:01:ed:ec:5c:8d:39:9e:cc:ff:34:ec:a6:
71:60:3e:2f:a1:57:d9:38:e3:5c:6f:38:d8:57:76:
65:63:16:b6:30:1d:86:98:82:6f:ea:ff:c4:b4:4f:
6b:fe:7b:d4:d7:9a:de:b1:35:43:8b:a6:1f:10:ad:
4a:24:bc:8d:51:91:5f:cc:f0:6e:30:68:cb:5e:e8:
1e:21:7e:18:5e:eb:67:04:59:cb:e2:4a:db:52:0a:
ff:2a:21:5e:bc:59:0b:2a:e2:7f:4d:f0:44:15:70:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CE:95:62:A2:D0:F3:41:A6:17:F7:F0:F6:E9:D7:AE:B0:25:AB:20
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:04:5f:2f:81:03:9a:c8:5a:8f:90:25:b3:9b:a3:c0:b9:22:
d3:01:43:d0:62:28:c7:44:79:90:cc:13:1f:6e:0b:09:88:5e:
0d:3a:70:ab:80:8a:de:9c:fc:f0:6f:c8:4c:c1:18:91:64:a7:
52:f8:87:4c:7e:b1:fc:09:87:03:fe:dd:58:a1:0b:5f:ab:a3:
c6:e3:d2:01:89:be:6d:5a:ff:e1:78:3b:c4:5c:d8:34:25:54:
84:0a:c4:3b:08:0c:1a:a9:73:45:e3:f5:d1:29:2f:9b:eb:b6:
11:5c:0a:16:10:c7:c7:96:74:8a:5b:63:2c:58:96:ef:31:03:
d3:54:cd:78:cb:15:a7:8c:b5:e0:85:42:af:a0:7b:91:12:96:
b5:66:5d:f9:31:f8:62:dc:7e:b1:38:0d:3a:72:fa:06:aa:f7:
e4:72:1e:d1:8e:ca:1c:33:ca:75:21:98:f0:65:5e:ef:f0:26:
49:f1:e7:0b:41:32:d1:e6:33:1a:96:08:6d:4a:e9:b3:e7:a0:
66:2f:a0:81:97:34:61:29:19:de:61:74:dd:d6:8b:57:95:12:
4e:a1:95:d1:a2:d2:d5:df:71:71:03:c1:41:2e:29:77:18:a7:
24:c7:05:08:fb:74:c7:ca:a8:68:42:fa:b4:18:b9:1a:e3:1c:
ba:94:7b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:05:05 2026 by rpki-client