Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: /Unr6MXrzDfMZXJBpjhEkJos8GnH6MFjVzP1qBY+yKw=
Subject key identifier: A6:31:47:D0:31:D3:5D:23:ED:88:2E:97:F2:9A:CC:B2:63:89:3F:D0
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 019FA0A889F5FBD8F04305C164C10E0236BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0D4C
Signing time: Sun 26 Jul 2026 23:00:27 +0000
Manifest this update: Sun 26 Jul 2026 23:00:27 +0000
Manifest next update: Mon 27 Jul 2026 23:00:27 +0000
Files and hashes: 1: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: Jj09oUsWDC4UZsn5RiH0Twu5qNMoF0iCKD6xtzM65dE=)
2: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (hash: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:89:f5:fb:d8:f0:43:05:c1:64:c1:0e:02:36:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Jul 26 23:00:27 2026 GMT
Not After : Jul 27 23:00:27 2026 GMT
Subject: CN=a63147d031d35d23ed882e97f29accb263893fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:1b:2a:32:36:5e:f7:df:c9:85:6f:46:3c:
9a:59:6c:de:d7:42:90:bb:85:87:b8:8a:14:af:63:
c3:62:25:f4:f9:e4:e5:04:5f:38:eb:6e:1a:f1:05:
c7:18:9f:45:25:46:12:97:c1:bd:24:25:c6:a8:ff:
f3:2d:05:89:d0:ee:2f:27:a2:ef:40:d7:4b:a9:55:
fb:12:a4:24:e7:83:be:45:83:ee:3e:9d:05:05:f7:
c1:20:df:d3:a7:f3:70:2e:1a:24:1e:43:8e:c6:f4:
c2:43:aa:71:5b:9c:76:b1:43:da:9b:b9:0d:11:f7:
6b:32:cb:61:07:83:89:3a:82:e5:3c:9f:0e:83:13:
cd:dc:02:7e:96:33:15:27:14:db:82:28:ec:be:6e:
12:ff:49:ad:ab:18:d0:57:86:23:fd:39:e3:ba:0c:
9b:4f:6f:9a:0a:17:c0:04:86:92:4c:79:e9:9b:eb:
c4:9a:00:b7:15:6b:51:b8:05:2e:c0:ce:f8:b0:5a:
33:36:e5:85:0b:f9:2c:18:f1:51:27:e8:25:5e:8e:
19:3e:df:39:83:ce:82:a3:ba:8f:5a:26:4b:17:90:
32:2f:6b:32:10:6f:48:fb:95:05:0c:3a:cd:f5:f8:
65:b2:b0:27:b0:bd:8a:c8:f9:f1:9e:43:44:32:9e:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:31:47:D0:31:D3:5D:23:ED:88:2E:97:F2:9A:CC:B2:63:89:3F:D0
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0b:f7:c8:1b:3f:71:1e:94:3b:d3:25:f2:6a:97:32:3b:e9:
86:ac:f3:30:f0:ad:d3:d4:16:6d:00:18:9e:73:c8:d1:80:3e:
d6:cf:7e:bd:be:d2:ae:68:ef:4a:0f:c6:e1:56:a8:1b:5b:48:
87:e0:69:07:35:38:59:cf:e5:b3:00:80:70:ac:4b:bc:d4:b4:
67:c2:f4:67:ca:66:7c:8f:3d:ea:f3:2f:15:98:1d:26:a8:ad:
2e:34:aa:7e:e3:26:04:aa:b2:9c:24:e7:24:74:3d:33:c3:de:
0b:3e:55:ca:9d:8b:4d:e8:5c:5d:16:aa:75:a9:ca:a1:90:2f:
75:cd:3c:5b:88:f3:c3:05:c3:8c:5c:a7:b0:9f:0b:d6:03:e5:
1e:81:c9:8b:3b:92:7f:2c:c2:d9:3e:96:84:3b:26:4c:a9:de:
ff:3a:b5:d0:9e:ce:b2:b5:9c:a5:20:b4:8d:63:6c:fe:0f:5c:
db:fc:d6:34:05:95:29:9d:11:73:28:37:98:29:13:af:6c:22:
74:d2:ce:e8:e4:e7:a1:3b:71:16:db:88:83:c4:98:19:14:a1:
32:a5:b2:3c:0b:7a:b4:e0:a0:75:cb:b7:c8:f0:cf:8c:66:b6:
22:a9:2f:58:58:45:b8:73:11:00:0d:b3:eb:cc:f6:eb:e6:47:
46:f9:6c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:16:59 2026 by rpki-client