Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: zvDvC53b3w2PazXBzF07o9XHveqvMiDBNqK+jJOSIG8=
Subject key identifier: EC:32:86:73:D6:90:CD:1D:4C:D4:A6:81:DB:D4:20:7B:C2:A4:E3:B9
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 019F9DDEBA6E6D586D9B747159CDFF2F2012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 0572
Signing time: Sun 26 Jul 2026 10:00:47 +0000
Manifest this update: Sun 26 Jul 2026 10:00:47 +0000
Manifest next update: Mon 27 Jul 2026 10:00:47 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: yDWceEROIFWn1kFx9vZHFaBsLoY7i+fptW2+BsSKtDs=)
2: RwZ9F-pdINA65vVgGDGApgyfhto.roa (hash: eZaWhNjBT1qB/UTcePoZ/N6A45ILygXPpUHwGv0YfOw=)
3: SFQQoJg97TGHjrgzii8KpRT8xfc.roa (hash: iv/LMo2P0Oa29pglyapnh+eYTODXjJUku1HA9y8udbA=)
4: sOAijZZYpwie6wu7M4Wlx6kerB4.roa (hash: H5sz+pWO9A1d2Sg5RORtCUGJSuWJhTFvhX/iRzLdtRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:de:ba:6e:6d:58:6d:9b:74:71:59:cd:ff:2f:20:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Jul 26 10:00:47 2026 GMT
Not After : Jul 27 10:00:47 2026 GMT
Subject: CN=ec328673d690cd1d4cd4a681dbd4207bc2a4e3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f5:98:b1:6c:fa:d2:f7:0b:9b:8d:99:12:10:
fd:2a:bc:c8:06:20:89:f0:47:42:25:fc:33:31:d3:
b6:6b:76:82:75:08:aa:e7:17:0c:7e:a7:eb:d1:c9:
0d:1b:df:38:87:aa:90:c3:8f:3c:0e:08:01:c4:b7:
fa:08:71:05:58:d1:d1:ac:94:34:bc:c1:28:c1:63:
f9:65:ba:2b:82:14:3f:dc:5c:93:71:1a:83:dd:79:
54:5b:4a:19:4a:3b:25:75:14:ca:3d:1a:17:d4:df:
58:30:52:4c:5c:eb:2a:bd:b7:bf:4d:dd:ff:42:b6:
d7:0b:8f:76:77:9f:30:9a:74:62:5d:81:fa:db:b0:
27:5b:06:a3:d2:d1:99:db:b5:87:8f:e9:5c:e8:50:
d7:fe:6e:4c:be:32:00:3e:23:f0:44:10:ac:15:49:
1d:7c:a0:2d:15:f3:e3:08:aa:e1:3f:c2:ba:31:c4:
81:c7:75:02:34:e9:df:bb:93:a1:f2:96:d8:25:47:
74:8a:56:8a:ea:a9:a9:f7:49:1e:b8:74:6e:7d:19:
c4:37:70:cb:c8:58:ae:70:fd:f5:67:20:dc:1d:aa:
56:de:a7:5e:eb:03:53:1b:e2:81:94:ab:e0:74:b1:
94:91:d8:82:53:14:20:6f:e3:28:4c:a7:a4:a2:6b:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:86:73:D6:90:CD:1D:4C:D4:A6:81:DB:D4:20:7B:C2:A4:E3:B9
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c7:e7:a9:02:10:da:92:04:16:ad:d3:97:06:94:51:3f:86:
28:ba:86:86:b6:5e:41:ae:db:88:39:a2:f7:20:94:83:eb:16:
12:f0:89:03:2a:f9:b9:99:6d:9a:5d:99:a4:06:39:b4:5b:73:
0c:5e:1f:32:d1:a7:3a:eb:5a:7f:0e:45:72:ca:45:f4:9a:24:
8b:fb:e7:f5:af:25:26:f7:3c:31:40:c3:70:be:7c:cb:66:c3:
04:07:d7:00:30:56:7e:a8:dc:04:f2:1a:19:96:31:d8:6d:b3:
08:2f:e3:12:b1:86:86:7a:93:11:d6:85:6b:10:1b:b3:a2:22:
6e:46:ed:e5:5d:fc:33:96:e3:f4:65:37:82:6b:38:1c:16:51:
1c:44:6e:53:5e:8f:c3:a9:9c:ab:98:d0:d0:2f:09:a4:e8:eb:
6a:c0:11:8d:5a:4e:06:3b:7b:27:a3:35:4d:4e:3f:4f:a4:04:
af:bf:da:16:c1:a1:3d:f1:82:68:0d:40:65:89:2a:09:3a:5c:
b2:dc:28:ff:c7:b9:e4:d7:0c:c4:73:97:02:3c:88:92:44:e6:
e8:3d:aa:d8:e9:f3:a7:23:1a:a2:87:8d:86:f5:25:a5:45:e4:
2d:57:db:3b:00:24:19:4b:27:79:76:78:a2:e9:c3:6e:e8:57:
3f:d3:32:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:52:57 2026 by rpki-client