Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier: LEtsKBUjZSNEmRTAyHzqFqj8B1pBjb9b4j5artpcMV0=
Subject key identifier: A3:BC:12:E3:9D:D6:78:D8:B0:3E:44:58:0E:BB:E8:80:81:34:75:F7
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 01A001A5F8002564F3721C93A4825AE4B229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number: 16D7
Signing time: Fri 14 Aug 2026 19:00:49 +0000
Manifest this update: Fri 14 Aug 2026 19:00:49 +0000
Manifest next update: Sat 15 Aug 2026 19:00:49 +0000
Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: aEK9CakBaVAzPHZjQU3EzwuTi1Vi/kh0BPS/xMekiAg=)
2: QkgMfGMyuSgoLTqRtj3rvepp9lM.roa (hash: SZyDNV8jKwjMVASMH9KvMwuDodmFVa99uOn85IdE4bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:f8:00:25:64:f3:72:1c:93:a4:82:5a:e4:b2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: Aug 14 19:00:49 2026 GMT
Not After : Aug 15 19:00:49 2026 GMT
Subject: CN=a3bc12e39dd678d8b03e44580ebbe880813475f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:3c:53:73:1e:9a:a1:8c:42:eb:24:43:1d:
04:73:66:6c:2e:39:06:99:e5:50:81:02:4f:d5:6a:
53:d1:3d:19:33:76:95:ce:a4:bc:5b:91:f4:0d:a9:
88:e6:5c:47:4f:29:43:f0:38:79:46:df:1f:7e:10:
76:cf:04:e1:3c:ba:92:e9:7b:35:a7:03:1e:62:c9:
c7:b3:75:84:de:6d:05:6a:39:41:54:de:ee:33:30:
44:d5:73:3b:e6:a4:3a:2b:d3:3b:eb:31:3b:97:e8:
9a:88:5a:59:53:08:30:6e:08:55:bd:ff:fe:92:cf:
a9:a4:15:80:47:94:61:8a:0c:13:49:8c:1c:60:29:
42:a9:fb:50:95:82:5a:6f:d1:fa:3d:25:99:dd:f1:
87:4a:01:8b:34:76:81:3b:05:20:90:11:4c:07:e7:
b8:ce:c7:20:ba:cf:c3:4e:b1:93:7a:a4:ab:a9:f8:
b6:dc:d6:5d:27:ab:f2:f7:6f:e3:3d:49:9e:fb:42:
f5:64:a0:dd:d8:76:66:93:d1:83:18:9f:3b:67:cc:
c3:26:f6:b4:0c:48:17:9b:3e:80:ae:ff:cb:09:03:
36:fc:a4:78:02:9b:94:20:14:cf:6d:fe:7b:bf:a9:
68:72:13:8c:88:59:d7:6d:8b:04:96:23:36:b2:92:
be:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BC:12:E3:9D:D6:78:D8:B0:3E:44:58:0E:BB:E8:80:81:34:75:F7
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:dc:b3:ce:de:16:a9:80:46:cd:aa:08:57:a0:25:05:08:20:
bb:89:a5:b6:ba:40:4c:0d:ce:3b:7c:65:0c:4d:23:72:e3:67:
2b:e0:18:b1:9f:b3:3e:06:f8:9d:04:72:b5:20:bb:a3:a8:e4:
d4:05:cb:dd:7c:dd:06:0d:f7:1d:cd:3b:3c:6d:bf:21:ba:9b:
4c:51:40:a0:45:f3:bf:5a:c5:5a:d2:ca:44:d9:b6:10:a9:6f:
1f:5b:ea:a8:3d:08:c5:0d:a7:86:a5:e9:38:b0:0a:e2:e2:8d:
ef:ea:ff:20:48:fb:24:4a:a2:e4:58:b6:bc:97:36:d8:14:0b:
be:92:8d:49:ac:0f:e6:4d:33:be:3f:60:c5:82:da:49:c2:8b:
e3:4a:6e:75:55:ca:d3:5a:45:9d:90:0a:d1:72:f1:a2:19:c8:
1d:4c:2c:2c:6c:fd:a3:ab:f2:86:33:f0:ba:50:1e:e5:51:92:
e8:ed:1e:bd:6f:43:55:05:be:85:57:a6:ed:26:36:5e:40:0e:
27:6f:87:91:cf:c5:72:e4:bb:93:02:2d:4e:3a:04:21:69:8e:
8c:da:a6:5d:78:e1:2b:93:d7:55:0e:1e:94:44:82:ce:ad:1c:
7d:b1:44:dc:c3:73:d1:68:33:83:3c:3a:1f:66:07:5a:78:b4:
9e:19:1f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:03 2026 by rpki-client