Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
File: 3dBY7vGdEboOq68EbnKibl5XJkM.mft (raw, json)
Hash identifier: +UE3UGhLRELDQQ1sEO9KtP/0gwPlUcopjbFqxRDg4/U=
Subject key identifier: E6:CF:22:FA:7A:24:DF:A8:AF:EF:15:56:8B:FB:36:C7:E0:BB:92:39
Authority key identifier: DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
Certificate issuer: /CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Certificate serial: 019FA071B2EA5CE3525EECB9CF44090D4FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
Manifest number: 01E6
Signing time: Sun 26 Jul 2026 22:00:33 +0000
Manifest this update: Sun 26 Jul 2026 22:00:33 +0000
Manifest next update: Mon 27 Jul 2026 22:00:33 +0000
Files and hashes: 1: 3dBY7vGdEboOq68EbnKibl5XJkM.crl (hash: YzcQjSq29wT4Snacomx226HB1mB/w0Ujp8ipgmm8JIE=)
2: 6w_LmvhXnOF2ik3DDNvsrEWVCI8.roa (hash: 6W4Vav7RSMNSHDF7FWCiUK0cI2saEqhD9eRkDI4fbG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:b2:ea:5c:e3:52:5e:ec:b9:cf:44:09:0d:4f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Validity
Not Before: Jul 26 22:00:33 2026 GMT
Not After : Jul 27 22:00:33 2026 GMT
Subject: CN=e6cf22fa7a24dfa8afef15568bfb36c7e0bb9239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:fb:49:aa:ff:43:45:8a:0b:66:21:85:1e:
55:15:06:9d:c2:5d:95:b8:23:5f:6c:64:48:c3:42:
bb:23:d7:2a:3e:d6:be:32:bd:87:b9:6e:d1:2a:19:
9a:6c:f0:92:3d:2b:1a:a8:4f:d5:99:61:48:a5:eb:
6e:b6:7b:9f:91:58:32:d1:44:67:20:56:39:45:90:
74:e6:3b:cb:d9:cc:d0:64:61:70:4a:7e:16:62:55:
22:dc:ce:9b:a9:dd:f7:ce:e7:01:8f:66:7b:8d:f5:
6e:0c:4d:42:f0:ad:5f:c5:12:8b:97:9b:f7:ce:be:
86:3a:42:d1:0b:2a:cf:8f:6e:6a:28:93:c8:f6:33:
cc:bf:74:f2:84:6c:44:d2:6f:db:c3:88:8e:da:e9:
3f:bc:0c:69:b0:8d:bc:9d:f3:71:d5:b5:1a:97:6e:
b0:e1:8b:f6:85:c1:c7:56:3a:1b:63:e5:6b:f1:33:
d4:36:be:5e:11:31:f7:12:9a:cd:49:09:b9:bc:24:
cc:e2:0e:d0:14:fd:6e:1d:2b:2d:a9:aa:85:53:07:
2b:52:3b:97:49:44:51:4c:a9:af:20:0b:9b:ad:ac:
68:6a:16:de:57:a8:dd:34:a2:77:4f:f3:5c:7b:9b:
c2:bd:05:6c:e1:49:e6:e2:45:16:17:50:e8:3c:5e:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CF:22:FA:7A:24:DF:A8:AF:EF:15:56:8B:FB:36:C7:E0:BB:92:39
X509v3 Authority Key Identifier:
keyid:DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:92:3a:26:af:6d:b3:94:7f:24:ce:e2:a6:59:96:04:d9:6f:
67:a8:6e:50:65:5f:8a:b7:1f:dc:27:cb:5d:df:c6:20:66:12:
cb:0f:41:8b:70:1b:64:6a:67:a8:d2:e9:0e:92:17:d0:96:ab:
15:b1:01:02:fa:d6:e4:d1:07:6b:ed:93:61:47:cc:9b:d6:9c:
ee:21:21:74:ae:7b:ac:13:65:41:82:95:a7:fc:59:21:55:51:
11:16:2f:86:77:2d:8f:d3:35:ae:ee:c6:7d:7d:8b:a5:43:a4:
da:c1:3c:ea:d4:1f:42:9e:ec:ef:5e:8f:72:db:8e:04:b9:12:
4f:4d:78:47:ca:21:bc:18:ad:63:62:bc:ce:9f:67:23:bb:c0:
99:56:3c:ea:de:5e:84:32:54:6e:1f:a3:61:5b:f9:45:d1:0d:
dd:27:d8:43:0b:94:80:34:84:23:c0:fb:50:bf:fb:d0:32:c3:
be:fb:c1:43:1f:da:19:86:eb:2b:8a:06:3b:a2:1b:d0:4d:1e:
1f:2f:ca:58:97:56:c7:6c:72:07:70:54:ed:1e:5a:88:85:f7:
02:c2:fb:21:5c:55:aa:f5:b4:33:54:1d:a8:a2:2f:82:eb:97:
04:5a:e6:d9:ea:36:9a:10:3b:d9:09:95:91:65:b5:f4:61:53:
b3:6c:9d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:42:30 2026 by rpki-client