Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
File: 3-ytVuquEjX6eI5OrTkiwpbig6U.mft (raw, json)
Hash identifier: lQoyYCYZDCiudtIcfBS68fGDy7717XYlnQLgPLdyirk=
Subject key identifier: FD:7F:03:88:DB:8A:77:69:5C:66:1F:E4:CA:69:42:EA:81:3A:7D:E6
Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Certificate serial: 019FA14D4B85BDBA74E05F89907F37C0A742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
Manifest number: 050B
Signing time: Mon 27 Jul 2026 02:00:25 +0000
Manifest this update: Mon 27 Jul 2026 02:00:25 +0000
Manifest next update: Tue 28 Jul 2026 02:00:25 +0000
Files and hashes: 1: 3-ytVuquEjX6eI5OrTkiwpbig6U.crl (hash: rPoaBaSu9r7kvphaz3Llkak+50pXJt9xU2BP2TyYp4g=)
2: THfbU74ywtQ8sKspPoGoe7QN1LQ.roa (hash: cZXszgxvNHrOfZXBgPIvxUmNlIbSPNniYOHYtr5et54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:4b:85:bd:ba:74:e0:5f:89:90:7f:37:c0:a7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Validity
Not Before: Jul 27 02:00:25 2026 GMT
Not After : Jul 28 02:00:25 2026 GMT
Subject: CN=fd7f0388db8a77695c661fe4ca6942ea813a7de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e8:39:5e:d1:e7:cb:9c:fa:e8:b6:08:d3:fd:
a6:2e:d9:18:41:fb:09:60:a9:2d:33:d7:08:a4:0c:
35:37:65:54:dd:d6:1b:3a:5e:12:5e:ae:c9:2d:ba:
4e:76:6d:23:85:13:c8:cf:1a:84:ce:88:46:f7:8e:
13:0d:ac:cf:dd:21:60:80:a7:89:34:3a:72:87:a3:
56:73:b5:68:41:8b:cc:58:4e:59:02:b1:9e:10:77:
98:09:09:9f:46:47:0c:f0:f1:dd:f3:b8:2a:d0:2b:
d7:a4:50:ee:37:db:1c:2f:18:64:f7:43:93:d4:38:
a6:56:e6:68:e6:57:a2:80:82:e9:1a:7e:5d:39:2a:
2b:86:ae:01:03:80:dc:ad:6d:88:b4:7b:4f:bc:ab:
7a:e8:bb:05:6b:e4:86:7d:8f:84:64:24:cb:1a:2c:
99:b2:ec:a7:83:30:ba:4c:09:09:86:80:53:8f:e3:
61:7f:77:51:72:12:a5:ce:81:f1:13:d3:46:a5:a6:
43:94:4b:e1:61:73:b1:92:6f:dc:a8:c2:79:d7:22:
0a:44:56:b0:b8:b3:b3:a3:8f:25:3e:21:ec:dc:c9:
9e:f6:87:54:fa:36:e9:b2:7f:e7:6d:9f:21:7a:81:
de:64:a1:0d:d4:42:99:ef:59:b5:a4:14:36:95:99:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7F:03:88:DB:8A:77:69:5C:66:1F:E4:CA:69:42:EA:81:3A:7D:E6
X509v3 Authority Key Identifier:
keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:87:cd:2c:c9:7f:75:8a:7f:41:df:b4:62:68:71:8c:05:69:
50:63:75:0e:bc:5e:6a:92:44:42:41:1e:4a:9d:41:da:1e:7b:
93:cf:4a:99:16:ad:61:cc:cc:9d:e6:ea:fb:af:7c:9c:0c:36:
76:fe:2a:ce:72:d6:d8:46:91:66:0b:f6:17:74:5f:64:a3:a1:
1c:ab:ed:3e:f9:ea:dd:d6:89:bb:8a:fc:d1:35:09:7f:e7:0e:
f4:47:bb:17:a8:f3:3e:24:51:8e:65:6e:f3:6d:2b:8e:94:01:
48:ac:1d:1f:18:f9:62:3a:0f:0d:62:02:2f:d1:9f:37:45:da:
80:5e:e3:9d:4d:0b:16:9b:30:26:01:61:04:31:1e:12:2a:1c:
78:7d:db:08:10:1f:73:59:10:9b:dc:df:b8:24:d0:9e:f3:ba:
25:19:6d:36:40:df:57:7e:ba:16:3d:11:bc:11:38:a2:6c:a5:
72:8f:74:e7:f3:93:a7:c8:5a:ff:33:59:27:64:ae:62:ba:1a:
05:b7:fd:ae:5c:c1:42:6d:31:28:bd:55:18:15:50:75:df:d8:
00:a6:44:7a:2c:8b:a1:22:28:9b:d3:31:e9:75:b1:34:e1:bb:
6c:5c:cc:5b:28:42:cc:7b:8a:37:28:3a:b1:7b:88:b6:27:69:
b0:62:10:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:39:01 2026 by rpki-client