Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: auWqtm0abRNLBynH62tl+SiQxj5NaE1MPNvBZ0XR1uc=
Subject key identifier: C9:72:E0:EA:70:C9:45:99:B4:AB:4C:93:A7:17:F6:A1:3C:D1:69:41
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 019FA304F3FFAB9D8E22EEE8D9502102C07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 1064
Signing time: Mon 27 Jul 2026 10:00:38 +0000
Manifest this update: Mon 27 Jul 2026 10:00:38 +0000
Manifest next update: Tue 28 Jul 2026 10:00:38 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: tnXX/iJnWbaOC/kpyMBq65tGnqoOtOP8Ga0Y5AnY4Rc=)
2: QFEuDeeu4X6RvqTM-9j-vL-jCec.roa (hash: enIY13X+DtKSJonUyur86EMN51RX0wJhm2ZaFev3lAE=)
3: lGfy-skAnLgxdiq51q1vJk9OXZg.roa (hash: 905M+SG71AWuwma3AVwJNMrg+VeownsgNGw18kPIIEs=)
4: shwWHH59CwEK5l3nYzgvrpyDADs.roa (hash: Xxgj4+MGImPO/BRjCoJfEL8QyT6UC4SQ9MovxKsATjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:f3:ff:ab:9d:8e:22:ee:e8:d9:50:21:02:c0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Jul 27 10:00:38 2026 GMT
Not After : Jul 28 10:00:38 2026 GMT
Subject: CN=c972e0ea70c94599b4ab4c93a717f6a13cd16941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:37:cc:5b:dd:a4:b4:42:9b:f9:89:bc:5b:
b6:c2:bf:c3:05:89:76:8e:60:de:39:b1:d4:a9:6b:
e0:d6:70:16:fa:f7:6d:61:96:d2:86:da:f1:66:46:
d4:2e:fd:93:8f:33:58:87:11:3d:a6:c2:dc:fb:72:
3d:c4:60:08:04:5c:3b:35:d6:0d:00:ce:8a:9b:c5:
51:23:bb:66:d6:07:74:ca:42:c6:78:72:36:43:ba:
06:fb:7e:0a:59:7f:7e:3f:29:ef:ac:b9:8d:8a:7c:
a7:a4:53:df:ae:7a:dd:f9:83:78:3e:2c:1f:68:69:
1f:b5:ea:3a:c2:03:61:f5:25:9d:71:01:32:45:43:
3b:05:27:e4:e5:56:bb:01:f8:5a:99:62:17:32:19:
17:67:99:29:4e:83:ff:e4:f1:25:0a:47:84:81:53:
4a:eb:b7:65:81:04:b4:a0:f9:ba:45:c9:31:0c:20:
7b:17:9a:b1:ee:91:ed:6b:5b:31:80:5a:05:9c:7d:
7c:0b:0b:4c:e0:4f:5e:aa:68:ef:9c:f8:6e:55:01:
57:e6:0c:17:2f:71:02:ed:41:55:ad:58:3c:8e:36:
9b:fb:8c:a3:6e:db:11:26:0c:b3:1d:ff:a6:d3:af:
fb:3b:8b:79:07:5e:2d:c7:a4:d5:c8:9c:06:41:f5:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:72:E0:EA:70:C9:45:99:B4:AB:4C:93:A7:17:F6:A1:3C:D1:69:41
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b6:3e:a3:80:25:f5:d5:2c:aa:db:55:72:15:d5:bb:bc:14:
ea:b4:af:2e:8b:68:2b:62:e2:2c:3b:88:97:bc:f9:7e:7b:7e:
50:6e:dc:fe:4e:42:96:17:25:a1:30:f4:00:dd:80:27:ac:07:
dd:99:fb:87:22:57:24:6c:63:5c:8b:5d:6c:d6:96:b0:5d:ab:
d1:f3:5c:a9:64:60:8a:21:0c:e7:eb:e6:73:88:66:71:57:44:
2a:1b:d2:e7:d3:62:cd:dc:ea:32:72:5c:c7:45:c0:3d:f7:93:
fb:32:8d:dc:75:b7:4d:0a:84:18:ff:8f:58:98:92:d5:4e:c5:
c0:8b:68:f3:2b:16:a8:e6:d3:20:de:38:27:1e:f4:2d:05:bd:
69:1c:0c:8b:c9:34:be:5c:e8:84:db:8e:c5:32:de:06:3e:ea:
53:d3:e8:bb:3e:45:40:74:cc:94:7a:52:cc:5e:7c:39:72:71:
96:8a:da:7e:5b:c7:e2:6e:af:a9:35:84:6c:6c:e0:11:0f:6d:
ab:1f:4c:7f:dc:cc:48:6d:cb:32:d5:70:29:b3:d7:f4:79:6f:
ed:45:33:6e:77:67:a7:48:69:c2:2b:fe:3e:9c:f8:a3:6f:58:
cc:a6:e4:02:77:24:5e:03:7b:61:0f:ca:77:57:d7:df:1d:66:
7e:d9:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:50:21 2026 by rpki-client