Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: 2pi3AWjtLQ0iV3TTkh3Z7qMmB3pZawJ7nDtlADkPVQI=
Subject key identifier: FF:B0:77:EE:94:3E:4A:82:F7:98:E0:B4:9F:9F:BC:6C:92:57:89:A5
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 01A001DD776E791BE96B3F89AEDC81C825B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 13B5
Signing time: Fri 14 Aug 2026 20:01:26 +0000
Manifest this update: Fri 14 Aug 2026 20:01:26 +0000
Manifest next update: Sat 15 Aug 2026 20:01:26 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: 7y190VgjeBVVe3L6LFsMnaro8AWrqvMCtsgB4EkBhjA=)
2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:77:6e:79:1b:e9:6b:3f:89:ae:dc:81:c8:25:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Aug 14 20:01:26 2026 GMT
Not After : Aug 15 20:01:26 2026 GMT
Subject: CN=ffb077ee943e4a82f798e0b49f9fbc6c925789a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:1d:19:30:73:c6:db:bc:53:80:b6:1d:ae:
92:02:54:d6:3d:0b:3c:1a:0d:74:0b:bc:b3:7b:16:
13:61:87:cf:c4:f1:fd:aa:e9:52:07:e1:4b:3e:42:
db:81:c1:ab:74:b7:da:c2:78:bc:bf:b9:1c:d7:18:
c2:d2:96:f9:2f:60:08:27:24:37:3e:c0:91:8a:24:
d1:c1:57:a0:e0:6d:87:c5:50:e9:fc:f8:a6:9f:34:
f1:92:ba:86:f8:ff:bc:48:1b:ca:17:c6:99:c2:1f:
83:ef:11:21:40:1d:dc:6d:41:b6:ed:dd:b8:fb:20:
71:fc:68:b2:33:15:62:6d:dc:55:46:81:80:aa:2a:
4b:12:7e:0b:68:4b:5f:89:da:0b:fb:05:cc:b8:13:
c8:f0:23:53:52:ad:be:00:6c:73:37:ca:38:c2:4d:
65:34:3a:a8:56:6f:8a:3c:0e:45:38:29:9f:37:4b:
8e:d2:35:62:e7:2e:99:c7:9b:b4:1d:93:5f:7a:4a:
97:0a:ee:c0:90:f1:23:01:70:65:11:25:e3:ac:8d:
f9:a6:9f:30:f6:a9:38:f0:22:10:f9:28:e5:b1:a9:
57:48:d3:13:1e:8d:9e:4a:ac:bf:37:2f:a8:0b:e4:
80:d8:2b:3d:81:a6:7e:86:31:0c:d6:6d:12:39:69:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B0:77:EE:94:3E:4A:82:F7:98:E0:B4:9F:9F:BC:6C:92:57:89:A5
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:48:27:be:d4:86:7c:f0:0e:2c:c9:88:cb:3d:25:6c:86:57:
1e:77:80:98:60:e0:ca:98:4b:9d:22:c0:07:7b:b6:2c:c6:a7:
e9:32:eb:a1:16:be:3a:0d:b3:fd:5b:2c:95:94:0b:72:79:5b:
5a:af:21:f2:36:4f:78:48:50:2d:d1:31:58:c4:ca:18:eb:c4:
7a:b1:18:76:f6:0d:ec:fe:df:a6:54:52:9b:61:9d:d9:82:5d:
ba:cf:a0:9a:05:7d:18:97:2e:74:08:fe:32:f0:d8:7b:67:07:
20:7c:a8:09:8f:15:71:32:7f:a5:39:8e:e4:03:d1:a0:7e:f0:
dd:31:63:d4:b2:df:db:02:3f:90:3d:a9:82:18:9e:33:95:ba:
60:63:49:0b:5b:7d:8b:34:ec:f6:9a:73:56:84:ed:c5:fc:49:
78:b3:36:4e:a1:cd:54:48:f5:db:3c:bc:06:82:a3:9f:16:70:
38:b9:e4:04:9d:53:b7:2c:b8:83:9f:6b:5f:2b:4b:a3:1e:4e:
d7:22:3f:4f:b8:ac:ec:41:06:14:25:aa:e9:33:0d:27:15:10:
a1:74:4c:9b:e9:9a:cd:d2:2c:54:31:79:f4:c4:75:3a:67:97:
f2:fa:55:d0:e0:f2:04:fe:0f:cb:60:d3:6d:59:2f:9e:a4:63:
9d:ab:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:26 2026 by rpki-client