Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: dKSBbk/0a/YoW6ktc0t6Ypi5ptp5bR5SsA+Hh7IZ+Lk=
Subject key identifier: 2A:5A:8F:71:DA:CA:3D:2C:5D:26:CB:1A:6A:FB:79:B8:D3:16:3D:26
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 01A001DD91E69110CBC1E85625DBE32F9696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 19AD
Signing time: Fri 14 Aug 2026 20:01:33 +0000
Manifest this update: Fri 14 Aug 2026 20:01:33 +0000
Manifest next update: Sat 15 Aug 2026 20:01:33 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: f20HInWJvmBf9GynjTkdZ4bX28Ql72gY2Dg1hnqFXy0=)
2: 66xj8nJZJDodIpTEFYfIO2lI0pg.roa (hash: cnTcAyScXe7FLebnmc+X1hADlgaMe8Kz4UH8Ho7fCks=)
3: YC7q8GupNzZHSH1s2Vu8MGm0c2Y.roa (hash: TnzlosbHJ70+TNYLJ5XWl/2V3tal0xrZM8UfJyyEdK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:91:e6:91:10:cb:c1:e8:56:25:db:e3:2f:96:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Aug 14 20:01:33 2026 GMT
Not After : Aug 15 20:01:33 2026 GMT
Subject: CN=2a5a8f71daca3d2c5d26cb1a6afb79b8d3163d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:94:e7:99:89:89:2e:19:3e:97:c0:13:66:
7f:ad:fd:3f:82:cc:19:29:1a:76:22:9b:18:82:4c:
18:85:94:7b:7b:17:64:d8:b6:4c:40:d5:c7:c0:e3:
3a:2b:6c:56:0a:ea:72:fd:2e:55:6c:2c:a7:b7:16:
14:85:9b:b4:bd:64:71:36:1d:ff:e4:c2:ce:73:41:
3e:ec:9d:0b:3c:a2:60:42:ac:03:b3:3b:a8:d2:f6:
df:83:2b:2d:da:6f:13:fa:4a:f1:99:cd:c8:06:42:
37:02:b8:6b:b7:da:73:58:09:a5:3b:8d:85:9b:da:
8c:fc:84:aa:f6:39:f1:f4:78:39:93:66:07:07:e3:
14:f2:c7:21:2d:5c:0c:64:e0:9c:5e:7e:3f:8f:53:
b0:67:14:36:f8:59:90:7a:46:86:72:97:81:cf:34:
00:80:1d:e6:e9:4d:e0:72:87:17:54:50:d0:6e:1f:
18:a0:42:9f:15:4e:67:df:96:ca:df:68:98:e1:55:
c9:b5:1d:7b:f7:9f:02:3d:75:3a:08:93:51:fd:9e:
94:d2:c8:66:88:62:5c:2e:2c:5d:b9:f7:28:74:d5:
d1:6b:e9:17:9e:cf:b0:34:2c:5b:a3:f3:e5:ee:f6:
93:09:53:0b:f8:b7:c0:1b:4d:1e:5e:a2:31:30:ed:
35:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5A:8F:71:DA:CA:3D:2C:5D:26:CB:1A:6A:FB:79:B8:D3:16:3D:26
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6a:cd:99:82:ee:5d:bb:60:c3:13:9f:71:bf:3c:db:7b:61:
fe:12:62:77:04:31:59:7d:df:5e:fd:68:05:23:d0:5b:8d:f2:
dc:62:22:46:49:21:a0:27:ae:18:60:eb:70:16:ca:fa:c3:45:
90:74:d0:84:d5:62:f2:46:7e:ec:07:c8:2e:fb:f4:2f:02:d9:
11:e9:cf:a8:e6:bc:3c:b7:51:41:09:85:ed:ef:9e:da:da:07:
67:c5:58:86:5e:90:23:81:7c:7f:d6:3c:21:99:9f:ec:a7:27:
30:e5:9a:f2:45:94:8c:de:07:21:62:b4:73:65:f5:38:57:ee:
1d:34:4e:6f:07:b1:27:36:44:2d:27:9c:51:24:ee:07:e4:31:
b7:42:c7:07:bb:f3:2c:e5:b7:02:fc:81:99:3a:83:d1:8e:96:
5f:b5:16:e5:ea:a4:c5:8d:d8:64:96:a3:3b:0c:ee:1a:09:ac:
9c:a4:c8:72:e0:97:35:80:bd:f0:be:5c:7a:dc:0b:dc:9f:4a:
3c:9f:8c:1d:64:04:32:82:32:cf:20:40:07:33:bd:69:16:08:
76:c3:76:0c:ed:8c:f2:88:f2:ef:2b:3d:c6:48:b0:ae:1b:66:
37:07:42:ca:f0:6c:9e:1f:db:46:26:32:00:14:35:27:f1:83:
53:d0:16:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:03 2026 by rpki-client