Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: evQZ596vntNrwBRbeIayY2v9BKqAtQFvXs7glJPfAzc=
Subject key identifier: DC:B7:E1:82:0C:2E:B8:E3:55:07:16:14:3F:1A:70:96:B7:91:43:A8
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 019FA184336804C979E8D5D2048059E1537D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 03C8
Signing time: Mon 27 Jul 2026 03:00:23 +0000
Manifest this update: Mon 27 Jul 2026 03:00:23 +0000
Manifest next update: Tue 28 Jul 2026 03:00:23 +0000
Files and hashes: 1: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: im0VBx6PDdlY67uulI6K/3W+9yI50MjH/SjNwC24gp4=)
2: k9k26h_wk2KwXBbexASmBckIdio.roa (hash: IkgLudWAy48LS7n3a0wG6CHVGFDidThlfHrJKCCT1wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:33:68:04:c9:79:e8:d5:d2:04:80:59:e1:53:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Jul 27 03:00:23 2026 GMT
Not After : Jul 28 03:00:23 2026 GMT
Subject: CN=dcb7e1820c2eb8e3550716143f1a7096b79143a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:bb:b7:35:e4:6f:6a:25:d4:51:9c:2c:db:
6a:98:d6:ce:11:64:1f:ca:1c:b8:90:3d:33:2e:fb:
4a:71:fa:6b:f1:73:9c:56:9a:2b:01:04:05:ff:4c:
51:6a:57:ef:93:5d:6a:a0:bc:76:77:8a:d7:91:54:
b1:a1:a1:83:48:c2:33:7a:38:dd:2b:52:a7:4e:37:
dc:89:73:6e:60:3b:5f:28:50:77:34:fb:23:a5:ef:
28:62:db:8b:d7:f8:01:33:59:23:40:4f:62:b6:25:
b4:50:eb:96:f9:15:15:7c:42:81:e2:f9:b7:da:70:
c8:42:f7:7f:b3:3a:ff:44:bf:c7:9d:bb:cd:9f:cd:
3d:03:c5:f0:be:94:65:56:af:c2:84:b2:99:a4:5b:
7c:f5:b1:70:e6:66:49:a2:a5:14:37:9f:da:df:5a:
ef:41:3a:bd:de:c3:2b:0a:50:72:b0:46:71:7a:bc:
83:f1:5e:7f:50:1f:43:6b:74:78:53:b2:e1:13:18:
f4:25:76:ee:a2:2e:74:9f:e6:66:82:dd:db:a9:63:
c1:fe:3b:fe:0c:13:00:71:13:08:96:8d:98:8b:fa:
b7:98:33:f2:0d:62:2a:3c:49:bf:63:f2:56:26:82:
5a:99:9e:b3:a5:6d:7e:80:e8:9a:94:63:3f:8f:d9:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B7:E1:82:0C:2E:B8:E3:55:07:16:14:3F:1A:70:96:B7:91:43:A8
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:86:8b:81:3c:70:52:87:1e:7b:a7:5c:5b:54:9e:e5:29:7c:
33:39:8f:94:de:e2:b2:46:c2:a3:fd:9f:f2:38:94:88:a0:45:
fa:7a:2b:8a:87:64:c6:2d:7c:5e:35:1a:62:23:62:dd:03:be:
be:62:d5:5c:73:e6:8a:50:57:85:a9:eb:b8:0e:aa:02:c8:a4:
56:6f:3e:46:a7:a3:52:99:4e:bf:b4:cd:a0:d9:04:16:d8:8b:
68:74:0b:76:00:4b:eb:58:6c:a1:ee:a2:bd:82:c9:2a:54:f1:
bc:05:e4:a9:18:90:01:72:f7:2d:28:68:9e:4d:61:cf:46:22:
b9:bc:b5:d4:61:42:5b:92:45:03:96:41:25:f1:1d:ad:9f:85:
fb:eb:cf:76:23:b3:d2:79:87:80:bb:fe:65:32:c7:52:ae:bb:
43:10:1b:fd:a4:25:d3:de:74:7d:50:a1:cd:fb:26:08:58:80:
89:c1:7e:6c:0e:aa:bb:66:92:3d:e9:a4:52:9c:36:fe:dd:f7:
cc:55:d0:6f:32:32:89:64:76:f7:21:33:9b:7b:63:c8:17:57:
19:73:89:5d:18:27:25:74:ef:20:f2:94:67:85:a6:9c:87:18:
b7:87:73:80:5c:9b:9d:a3:46:d8:da:04:30:e5:60:24:13:62:
c2:97:df:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:01:02 2026 by rpki-client