Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: //sDr+f78jReg5p8zTXjgl9Yzkrx1AenPvtcfWNafl4=
Subject key identifier: 7D:72:1C:44:FF:91:8F:63:06:F8:64:11:83:4D:4D:23:AE:51:F7:4C
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 019FCAEFC8CDAE2C3C5EE65AB315F52CC562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 107C
Signing time: Tue 04 Aug 2026 04:02:19 +0000
Manifest this update: Tue 04 Aug 2026 04:02:19 +0000
Manifest next update: Wed 05 Aug 2026 04:02:19 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: 1dswtGs0B0YdIctI3haYtbXkiubmp5i9oiEfNNLi0zY=)
2: 58GFDuus_tVD8dh1HAcQzm6Bd5s.roa (hash: pyGHBxobR5Y4/oQZr4EFtkYZAaS4T1/SsoP9evw4DUA=)
3: D7CjrTPEmaFgX5q30EgqridM6Ks.roa (hash: 6VDTLT0bKAkkx8WWVo+B1/Z/i7C3vrJBLQ7Xx0A+EvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ca:ef:c8:cd:ae:2c:3c:5e:e6:5a:b3:15:f5:2c:c5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Aug 4 04:02:19 2026 GMT
Not After : Aug 5 04:02:19 2026 GMT
Subject: CN=7d721c44ff918f6306f86411834d4d23ae51f74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:c1:9f:09:3d:dd:02:ac:1c:ab:16:f7:fb:
b5:71:2a:eb:70:6d:25:5d:d2:61:a0:b8:36:57:8f:
1b:60:4b:7e:fb:3a:36:28:f5:75:09:05:60:3b:ce:
1e:eb:85:ba:5a:67:41:0e:73:ca:92:4e:7b:79:6d:
16:c7:d2:10:f2:2f:94:96:e6:55:04:49:b8:a3:cd:
ce:0c:b6:3b:39:b4:3c:28:e7:a7:12:0d:5e:60:4a:
30:60:25:69:cd:40:e3:38:97:49:58:e4:ad:46:25:
46:a4:75:81:d2:63:ed:39:db:6a:38:0c:b6:cc:e5:
b3:cd:ca:20:23:1c:a7:02:d6:3c:c1:5d:33:bc:42:
50:c3:f7:58:df:50:75:47:f1:f9:73:bf:79:e7:fd:
83:84:5e:ba:e0:3e:83:d9:15:ba:3d:ac:3b:04:1b:
ff:fe:7e:de:aa:fc:71:71:d3:01:7d:bf:8f:cb:50:
e2:49:90:92:36:e8:2e:05:85:92:a4:23:e1:9a:4a:
cf:a7:f7:3e:8a:91:66:4b:19:45:31:65:30:07:52:
8d:0e:43:88:e1:33:9c:73:89:7e:2c:72:98:5b:1b:
41:87:65:eb:30:05:92:89:25:75:ef:56:d3:4c:f2:
65:f2:e0:bd:df:17:34:84:ed:a8:89:ec:c6:b2:1a:
c5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:72:1C:44:FF:91:8F:63:06:F8:64:11:83:4D:4D:23:AE:51:F7:4C
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e9:f9:29:75:8e:74:01:a3:98:dd:6b:77:f1:42:57:f3:33:
b4:0d:2a:cf:c2:f3:40:23:71:42:ec:2e:46:3d:f2:23:3b:11:
36:d8:93:2b:28:13:52:d1:52:01:c6:ce:90:6b:85:ea:2f:50:
6e:7c:d1:0a:b6:f3:87:ed:ce:e7:a8:89:09:79:13:f0:24:75:
a3:93:55:c5:26:ec:ca:9a:1a:51:6a:b9:19:e1:a5:65:a4:a3:
17:be:7e:92:af:7d:62:d4:6e:8a:31:55:00:0d:1f:6d:ed:05:
80:f9:f4:90:c0:60:c3:1f:52:61:8d:8d:73:54:33:95:06:1c:
f2:b7:64:63:81:b3:9c:da:26:f0:04:d4:63:4b:ab:66:e8:8d:
be:16:ff:e0:89:90:3b:07:42:df:ed:24:08:3d:21:39:df:73:
65:e5:94:13:49:ba:57:a1:65:30:bc:2b:c3:73:63:27:8c:6b:
3b:94:56:ef:f0:94:ef:b4:e0:50:16:3a:d6:b1:ac:54:02:73:
de:3d:a6:8f:d5:e7:4e:e6:9d:ad:10:cf:a9:f7:c4:9d:8c:94:
66:10:cc:23:fc:e4:51:9c:e2:fd:5b:75:80:11:bd:dd:cc:d5:
2b:aa:8b:72:5d:65:61:e0:2b:15:80:ce:d7:72:6c:47:4c:53:
30:f3:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 08:50:04 2026 by rpki-client