Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: 80hvMPgd4frfHm9Ik5b6R7zoEOvZK+YBTU8uks061S4=
Subject key identifier: 1F:A8:88:E0:FF:05:F2:48:41:22:BA:89:EC:C4:AF:9C:05:A8:6D:79
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 01A001DD5DD7625E2A8DB75D28463BE1DC43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 1993
Signing time: Fri 14 Aug 2026 20:01:19 +0000
Manifest this update: Fri 14 Aug 2026 20:01:19 +0000
Manifest next update: Sat 15 Aug 2026 20:01:19 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: BgxGkbm5HPpBs7CU/aZR8oG9WCVsubEMDELASSoi+90=)
2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:5d:d7:62:5e:2a:8d:b7:5d:28:46:3b:e1:dc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Aug 14 20:01:19 2026 GMT
Not After : Aug 15 20:01:19 2026 GMT
Subject: CN=1fa888e0ff05f2484122ba89ecc4af9c05a86d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:79:2a:c4:f1:78:c9:fa:55:dd:ea:29:7e:e2:
fb:dc:4b:6a:f2:06:1a:6b:c9:3d:5f:60:7d:85:7a:
46:d1:32:91:e4:1d:9b:a8:6f:ec:78:69:15:1f:3a:
52:7f:25:32:84:2d:49:ac:b8:44:aa:94:f6:c8:69:
a1:be:b8:fa:18:a8:bb:01:b4:54:0a:a4:f7:08:f9:
99:1f:66:ef:cb:29:d7:84:6e:f1:b2:cc:d4:30:4b:
2d:1c:23:85:2f:1c:1b:84:89:18:b4:9a:1c:42:54:
27:c9:4a:0d:1b:2b:6d:53:5a:ca:7d:70:fb:67:4a:
33:be:55:ac:0f:89:e4:53:8f:bb:ec:1a:9a:f9:9a:
30:58:67:c9:ee:77:0c:40:db:78:e7:f0:76:cc:cb:
44:c2:7a:ec:21:c7:af:d5:86:d3:c6:9d:3e:6f:61:
24:4d:e2:6b:b7:d2:65:e3:7e:82:7a:6e:a0:2a:01:
88:3b:ca:0b:56:d3:ed:7e:e8:68:0e:c6:3c:4d:6d:
1b:1a:d5:28:2e:81:22:95:2d:3f:87:a3:45:8b:08:
c3:2a:b4:d6:af:4f:02:d8:50:f4:f7:ac:c0:cc:67:
cf:92:ec:51:f5:73:d5:6d:64:73:51:41:04:5e:01:
0b:ed:b4:0b:86:11:e8:a6:df:5c:45:41:1c:84:55:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A8:88:E0:FF:05:F2:48:41:22:BA:89:EC:C4:AF:9C:05:A8:6D:79
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ee:6e:b4:a5:0e:27:cb:dd:94:9b:70:34:84:9c:e1:72:cf:
81:f3:64:e3:c9:45:77:bb:8c:9a:53:61:0b:14:49:40:5a:97:
b6:f8:92:71:09:48:05:04:a7:7b:66:0e:e6:4f:f8:71:bd:ae:
3f:e9:94:5a:54:52:aa:d6:33:9f:84:b6:91:66:5e:d3:f7:bf:
f7:f6:8a:5f:e4:04:55:20:36:d4:f6:c7:57:ca:d2:77:75:a5:
8f:a6:68:fb:51:e3:ab:cc:5c:b3:ac:de:42:34:f6:77:0f:fd:
7c:9c:c3:bb:3b:05:d9:76:d7:9f:c9:05:40:b5:ad:bf:67:fe:
5e:98:f4:9e:cb:59:0e:e6:5e:05:57:25:fc:ef:ef:2e:26:4a:
88:a3:9c:f6:7e:da:3b:65:d9:2f:fe:59:98:e2:74:ac:9b:c1:
c9:63:d9:06:2f:9e:62:0b:b3:5b:0d:ba:56:0f:88:c6:27:4e:
7e:ba:1d:e7:93:b5:e6:e5:4c:7e:ec:5d:9e:a4:70:7c:ee:b9:
ec:ff:79:8b:ec:03:20:0c:9b:c3:6b:a7:37:30:9c:a8:a2:1d:
e8:c4:59:99:ad:ca:a6:c4:d8:e8:87:0f:69:4d:c0:46:ca:2b:
52:ab:b2:48:32:07:85:fb:23:93:a1:cb:e8:d8:2b:79:0e:a2:
cd:f4:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:57 2026 by rpki-client