Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
File: 3SoSF2c-sRypijUTlSBAfJdo38M.mft (raw, json)
Hash identifier: tii++GlyGPz82n8v5ta1LQ0SuL46CnAb18kE4xw/kBE=
Subject key identifier: 40:01:B4:8A:71:4A:D0:19:F0:FA:EA:3A:2C:05:6D:35:31:17:57:D8
Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Certificate serial: 019F1A1EB907602D6C14A965E00E83DD47F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
Manifest number: 028C
Signing time: Tue 30 Jun 2026 20:00:48 +0000
Manifest this update: Tue 30 Jun 2026 20:00:48 +0000
Manifest next update: Wed 01 Jul 2026 20:00:48 +0000
Files and hashes: 1: 3SoSF2c-sRypijUTlSBAfJdo38M.crl (hash: wQMlBXN2BY63p5o3Vjzu+y11NjlKk6hMd9GWvKygmjE=)
2: WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa (hash: 8pC1xGdRfwbbzKrCgP0LBKBZ1huDVz6z9MO3fLjaue8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1e:b9:07:60:2d:6c:14:a9:65:e0:0e:83:dd:47:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Validity
Not Before: Jun 30 20:00:48 2026 GMT
Not After : Jul 1 20:00:48 2026 GMT
Subject: CN=4001b48a714ad019f0faea3a2c056d35311757d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:16:8f:7f:74:2f:f4:d4:be:17:28:4b:7f:
91:cc:3f:7a:0f:1d:d2:46:b6:b1:42:aa:24:94:a5:
d9:f4:69:72:4f:d0:26:87:bb:d9:ee:20:85:3f:a9:
81:43:45:fc:f0:19:ed:32:ab:f7:9e:4d:24:d3:a3:
ac:31:f9:46:91:91:e5:8e:95:dd:7b:f5:b2:07:30:
5e:cb:fc:a8:49:fe:46:d4:43:b3:9b:33:fd:74:7a:
98:c4:8c:f1:4b:89:13:71:ca:12:86:c4:36:d9:52:
ad:bf:fb:27:25:84:ad:47:d2:d8:f6:1f:24:39:08:
38:9a:25:29:e8:36:43:76:38:c0:5d:2e:ca:a8:e1:
19:b3:04:00:44:3d:34:5f:a3:25:a7:77:03:c3:cd:
e9:c1:b7:ef:69:c2:2d:8f:2b:53:bb:5a:94:2e:85:
40:a5:f5:e9:0c:ec:82:0a:b6:7a:37:5c:a0:d3:43:
ba:88:e3:9b:a8:c8:d5:84:33:73:6b:6b:5c:ab:2d:
b3:33:ec:9b:bc:42:99:df:55:fa:f6:a6:b1:ce:1d:
7c:24:d6:f4:4b:4c:c2:2c:de:0a:b3:4e:cf:28:a1:
c4:82:2e:5f:11:05:cd:a4:0c:99:2a:71:d5:f2:86:
f0:f2:74:70:b8:1b:9e:a1:3e:94:bb:48:c3:c9:f6:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:01:B4:8A:71:4A:D0:19:F0:FA:EA:3A:2C:05:6D:35:31:17:57:D8
X509v3 Authority Key Identifier:
keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a3:18:a3:d1:a6:f6:ea:cd:cf:54:ad:db:74:1a:9b:e9:2c:
39:56:c2:bd:f5:a2:6b:9f:18:d3:7e:48:6b:38:28:bb:b1:97:
f7:31:74:c1:32:4b:e5:07:17:6c:21:22:f7:68:a8:1b:bb:2f:
ec:f2:c9:4a:1c:d6:75:23:94:ec:e7:63:e6:8c:8c:3c:1d:eb:
6a:48:65:e7:e8:83:32:2a:fc:d9:4b:27:9d:a6:01:83:27:4f:
f4:14:88:41:be:ce:e1:c9:e0:28:17:a4:ba:a9:d1:1c:fe:2b:
c3:6c:fa:57:54:7c:8a:90:60:7a:b9:17:6f:f8:79:23:46:ae:
6b:e5:02:29:99:71:02:39:50:75:10:74:61:e2:03:ad:ed:32:
19:29:4d:97:04:7e:df:72:a7:8e:db:22:61:d9:ad:17:2e:46:
6e:36:70:b3:d9:27:e8:ca:e7:47:6a:f5:a8:1f:d0:61:aa:9d:
9e:22:c9:56:31:40:47:46:c2:7e:b6:b9:bc:66:d2:79:0a:66:
b8:9f:70:f8:11:18:18:02:7f:b9:b8:6e:f3:af:73:7c:ad:70:
62:c4:a3:43:26:21:5e:3f:c9:19:ec:52:27:1e:aa:36:6c:78:
4e:f8:3a:a5:03:b0:22:d2:f3:f2:a7:f7:69:5b:df:6c:b4:9a:
79:20:98:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:58 2026 by rpki-client