Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: V/mwW8eKlx57Iyu1VpP5OxHyc/VOFS4t+jZJeYPLv4A=
Subject key identifier: BA:14:E2:89:D7:49:D1:D4:B1:30:C8:82:F2:B8:BA:02:18:99:34:2E
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 019FA26016219226D05BB8BDA085ABE16928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 18B0
Signing time: Mon 27 Jul 2026 07:00:33 +0000
Manifest this update: Mon 27 Jul 2026 07:00:33 +0000
Manifest next update: Tue 28 Jul 2026 07:00:33 +0000
Files and hashes: 1: 2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa (hash: UnzgZZ3TVB6578Tog21CNFea50mTLp1x803U9EWHzmU=)
2: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: 94qiGdG4ajEYVYmcxvVfw7C+SyAzjWztxrX0AZ4Kxeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:16:21:92:26:d0:5b:b8:bd:a0:85:ab:e1:69:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Jul 27 07:00:33 2026 GMT
Not After : Jul 28 07:00:33 2026 GMT
Subject: CN=ba14e289d749d1d4b130c882f2b8ba021899342e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:63:98:34:9a:b8:b1:11:32:a9:83:be:7c:
f2:04:45:b6:5e:d1:34:83:7d:e1:a4:1f:25:7c:a3:
24:3e:86:ff:96:2a:a9:64:a5:8b:59:e3:b6:11:47:
7d:17:3a:6b:0e:46:68:84:86:82:33:c0:ab:ca:a5:
63:c0:58:b9:09:83:30:df:d1:4d:02:a7:65:7f:27:
cd:4e:b8:75:74:69:61:f1:2a:a3:97:59:56:39:5b:
28:c9:1b:7b:b9:0b:04:b6:d6:5e:be:fb:84:8e:7c:
a2:f4:37:ec:55:23:ef:ef:37:4d:62:75:2c:35:03:
47:08:ba:ae:3b:9e:c2:e8:15:3b:74:b6:25:34:f0:
99:c4:a1:d5:bf:f9:a7:43:ad:ae:e4:09:07:7d:48:
9f:00:08:67:fd:35:86:49:b8:32:40:66:fe:44:b1:
88:0c:9d:cc:22:7d:5a:ea:60:ec:38:49:f4:58:16:
5d:c5:78:36:be:88:6a:6e:2e:b0:d5:98:68:7c:bf:
7c:51:3a:51:db:0e:59:b6:7d:58:58:24:ba:25:c8:
d3:2f:c8:24:9e:10:2a:af:26:b5:c7:67:31:f6:bb:
a9:64:d4:93:1a:4a:10:fe:12:b3:81:e9:cc:12:ee:
42:21:9a:a7:da:e2:8d:ba:5f:6d:5d:2f:84:cb:14:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:14:E2:89:D7:49:D1:D4:B1:30:C8:82:F2:B8:BA:02:18:99:34:2E
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3a:72:44:26:db:5f:23:b3:e3:37:de:51:15:a1:98:e0:af:
ab:c6:03:80:ee:ed:b2:d5:9d:8b:5b:59:65:b0:89:d7:46:92:
f1:88:77:89:ef:04:ec:20:80:c7:b3:1e:73:5b:80:89:f7:84:
0c:36:88:b6:34:9e:3c:d8:80:88:73:63:9c:9e:45:e3:80:b1:
da:3e:e7:44:b2:a8:a2:79:69:83:92:8d:a4:59:fe:cb:70:94:
fe:94:75:db:95:c2:79:d3:eb:6d:52:9f:00:dd:90:68:cf:ad:
19:18:2c:b6:f6:62:01:bb:d9:a9:33:75:2d:7b:a6:e2:d0:83:
52:bd:2c:78:37:0f:31:ab:0e:74:29:b1:16:8a:32:a5:0f:c5:
5e:88:e0:d1:dd:c0:58:1e:c4:b0:ec:3f:04:60:51:52:eb:3c:
b4:0c:c1:22:4d:1f:bd:a4:44:77:86:91:81:24:94:5a:62:ff:
fe:45:5f:09:9d:12:24:bc:5a:d6:29:bd:f8:21:98:cf:0b:be:
8b:e6:2f:53:d3:9b:06:6f:87:75:55:e0:0e:41:a2:13:ad:da:
7a:0a:0b:7c:b0:fd:84:47:ff:45:d5:bf:68:80:cb:49:04:ed:
4a:9c:ef:a7:f0:c1:f5:b9:e6:b8:15:47:18:04:67:71:58:e8:
b6:33:fe:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:17:10 2026 by rpki-client