Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
File: 3SoSF2c-sRypijUTlSBAfJdo38M.mft (raw, json)
Hash identifier: db6YGR38PdXaQTaxXj6hIWKzmkO8YLddcA5MVNeQVSw=
Subject key identifier: B5:1D:EE:5C:26:D9:E2:01:67:B1:AA:DF:A4:0E:BE:87:C8:06:56:93
Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Certificate serial: 01A001DD8A5FD842EEAC35A05AC9C0E494BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
Manifest number: 0304
Signing time: Fri 14 Aug 2026 20:01:31 +0000
Manifest this update: Fri 14 Aug 2026 20:01:31 +0000
Manifest next update: Sat 15 Aug 2026 20:01:31 +0000
Files and hashes: 1: 3SoSF2c-sRypijUTlSBAfJdo38M.crl (hash: GdySdDFEe0qyUA21KAmgxQE9TV24TCcltoXNGsg7WUw=)
2: WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa (hash: 8pC1xGdRfwbbzKrCgP0LBKBZ1huDVz6z9MO3fLjaue8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:8a:5f:d8:42:ee:ac:35:a0:5a:c9:c0:e4:94:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Validity
Not Before: Aug 14 20:01:31 2026 GMT
Not After : Aug 15 20:01:31 2026 GMT
Subject: CN=b51dee5c26d9e20167b1aadfa40ebe87c8065693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:6c:71:8a:ba:58:49:9f:f3:4b:0b:13:bc:
a8:2d:35:38:f3:20:1a:aa:92:bf:b9:ee:4d:65:99:
8c:d2:1d:09:72:37:d9:f1:6d:17:dd:1a:60:49:e8:
84:1d:d1:5d:9e:a3:a5:81:4b:a9:97:82:94:3c:66:
c7:4b:1a:21:13:0a:3d:38:3f:f2:f1:f4:09:59:f6:
f0:42:87:52:54:77:05:69:e6:1e:8e:a4:cb:d1:8f:
8d:70:d0:62:cc:23:61:25:0b:29:7a:0c:b9:71:1b:
bf:de:1a:a1:93:ba:04:63:91:7b:1c:de:db:69:3e:
c6:7d:35:20:c9:e6:98:70:71:39:25:84:99:84:67:
59:3f:20:84:23:29:a8:13:05:e6:9c:d7:ca:b0:7d:
da:d4:eb:f0:86:fa:83:a8:b8:56:96:61:85:5b:d6:
9c:d5:f4:e6:8a:a7:77:16:0b:2c:15:f6:d4:ae:44:
de:27:87:3b:f2:f8:71:e6:a2:c8:3a:ad:1d:36:17:
fe:d5:cc:01:89:6e:5c:12:3b:1a:64:87:b3:32:dd:
b5:b7:dc:0e:f0:c3:05:c1:b6:81:03:7f:d8:13:cf:
f4:63:54:36:5b:7c:77:dc:79:31:fb:fb:00:ac:57:
43:dd:47:2d:be:fe:21:58:c2:fe:b7:30:6e:44:6d:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1D:EE:5C:26:D9:E2:01:67:B1:AA:DF:A4:0E:BE:87:C8:06:56:93
X509v3 Authority Key Identifier:
keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d9:83:3a:16:a1:cf:f3:f1:e2:81:3a:a9:2f:5f:ea:7d:be:
a4:37:fa:78:8c:72:40:b2:a6:cc:16:c9:2d:2d:17:46:86:9e:
f0:f0:f7:10:a4:df:a6:88:39:12:79:50:a1:04:28:7a:be:e3:
4f:d8:c3:e4:c4:a4:a2:64:5a:44:cd:28:7a:20:df:77:ab:8d:
27:ee:ef:64:6b:b8:32:a8:04:2e:ba:56:6d:73:38:12:9f:ac:
2b:50:8d:5c:48:58:ee:60:4b:7a:92:77:80:ee:2f:fd:bd:c5:
ca:81:4b:b9:3f:93:73:be:64:0f:82:ca:b7:68:18:94:db:f4:
cb:2c:68:9f:3e:ae:16:79:92:d7:bb:55:9d:4d:a0:88:54:dd:
29:a2:6d:d2:b0:e2:40:bb:04:c9:94:1e:ec:b2:32:9c:07:fe:
4a:a3:80:a2:3c:5e:df:ee:41:44:a3:86:20:74:40:79:8f:ba:
b8:1e:6a:a7:5c:c6:4b:87:55:63:f1:46:b6:7b:c0:2f:b9:ee:
ae:96:4f:4f:ef:37:e6:23:f0:b4:9e:5e:58:f9:4e:43:17:6b:
f3:5a:51:38:4e:d8:66:fb:5c:78:89:73:84:8c:ea:44:87:16:
b0:33:83:04:be:da:c8:5b:bc:af:2b:fe:9d:7a:79:2f:42:d7:
be:32:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:26:46 2026 by rpki-client