
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier: lPhnbag7nsHphzdO9YR3IlW9Xk9idMTnX47uifJTL14=
Subject key identifier: 6B:C5:0A:12:01:D2:9A:B9:94:CA:92:B2:3D:2A:6B:58:D3:23:74:07
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 01A0016FEF9CB38FBEC644E63A92308A8151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 18:01:48 +0000
Manifest this update: Fri 14 Aug 2026 18:01:48 +0000
Manifest next update: Sat 15 Aug 2026 18:01:48 +0000
Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: /rrkA51WkP32yJsgJwiDrf09b72TOz1Gfz4EVyr5dRE=)
2: LmwyPllgT27iDmcYfX7agNvw4rA.roa (hash: kpm3XdXtMEMrfdjcWSVw0huoNKfPlGFqAs8H1ASM9Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:ef:9c:b3:8f:be:c6:44:e6:3a:92:30:8a:81:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Aug 14 18:01:48 2026 GMT
Not After : Aug 15 18:01:48 2026 GMT
Subject: CN=6bc50a1201d29ab994ca92b23d2a6b58d3237407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:96:2f:1d:02:45:d3:cc:47:fa:16:58:45:
4e:5f:49:7e:fb:d0:29:c3:5b:c1:f6:e3:43:90:bb:
bd:f9:7f:9b:12:eb:b5:ca:4c:27:84:40:e9:e7:d8:
8c:20:3a:b8:ee:8a:84:88:eb:8c:5f:0c:e0:82:fe:
05:d2:b6:01:8f:af:23:7e:c7:50:7d:59:eb:99:76:
8e:a4:39:a7:e3:dd:7a:50:ff:aa:03:58:fb:70:5a:
d5:9d:1a:53:fd:6d:e0:7c:93:a4:5d:94:30:3a:73:
63:d5:a1:13:b7:eb:7d:83:1f:1d:f3:36:89:13:0c:
f8:92:c9:82:73:88:25:9a:f3:bb:ef:1c:4f:6a:03:
7e:fa:2c:43:49:cf:2d:55:d0:0c:93:bb:50:ce:23:
a3:8b:31:9b:b7:11:e6:f5:45:9d:49:2b:df:81:60:
b1:ed:30:e6:85:29:8b:8a:e8:f6:c7:6d:e6:b4:af:
e4:c4:ac:12:00:34:ca:80:22:0d:db:f9:ae:6d:a2:
48:c3:d9:53:76:d9:25:e8:78:3a:3b:ba:1a:38:a5:
e7:f5:e1:e5:c2:a5:4c:8c:3a:95:1f:75:fb:06:8a:
c3:09:b7:b2:4c:9a:82:2f:11:8d:dd:1c:51:7d:f8:
c5:2a:9b:3f:36:92:5f:4e:be:c8:1c:5c:81:42:cf:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C5:0A:12:01:D2:9A:B9:94:CA:92:B2:3D:2A:6B:58:D3:23:74:07
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1c:48:74:c8:f1:bf:07:bb:9a:cd:2d:e9:fd:0c:c8:78:1e:
a6:1f:28:f2:54:27:4a:95:cf:b1:11:59:20:04:a4:bd:a0:0d:
00:0d:48:af:74:50:4f:f6:06:f9:ea:fd:8a:63:d2:aa:09:84:
db:f0:be:8a:7d:4d:41:84:02:5d:f7:44:31:46:cd:5f:ae:74:
d7:64:61:39:08:24:b5:59:73:eb:84:f4:71:6f:ab:b2:11:e7:
57:11:81:29:02:90:13:ae:7a:7f:56:5a:79:fa:10:8d:1e:b5:
ed:2e:fc:29:76:9b:05:d6:33:df:e1:01:50:13:0a:72:87:c0:
05:aa:06:7c:c2:88:1d:fb:61:73:9d:d2:ee:6c:51:7b:69:f6:
80:71:f3:c5:3e:e5:f8:5d:c4:47:f4:1b:f1:21:b2:b2:ef:94:
87:65:67:db:f2:49:a0:15:61:92:58:85:19:2d:c9:94:33:59:
94:0a:cb:88:eb:7c:29:d0:f1:86:73:e8:5e:85:af:b6:b2:5c:
8c:b2:1d:1a:5c:3b:a6:10:df:ed:3e:2a:7c:dc:a0:fb:f6:d0:
e8:33:19:58:e4:67:d6:8d:ad:42:d0:98:30:7f:16:44:aa:f7:
d9:63:c6:a7:b7:9a:12:da:28:33:fa:87:47:31:70:4a:11:4b:
e0:de:59:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:44 2026 by rpki-client