Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: kRUFUcsCI4z9+siFHZVlMkJbpgcz89nGpm9PnZbgLws=
Subject key identifier: D8:6E:67:98:F7:CD:81:71:3A:CA:24:86:39:A3:D9:DA:45:1A:41:12
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019FA29772BC1FF56F2CC1A775E84DD498CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 19DC
Signing time: Mon 27 Jul 2026 08:01:01 +0000
Manifest this update: Mon 27 Jul 2026 08:01:01 +0000
Manifest next update: Tue 28 Jul 2026 08:01:01 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: 2tOB9DN0XHYD/h+HX2Vg8ylW+J8VKQB1OdD/GDM7b5o=)
2: W5GHuBmScEfpIPAhuqgylrz1a6Q.roa (hash: iVf+MqYMn6D3or0TDUJHTOHK/dGQL5UOldNHGxN0jow=)
3: tH4NdKGms5TfcW6T3wq-xPP5lao.roa (hash: RAFP/ByUPYbvzL7CQ6hq0JZ4+gFCb5J71aCNcV4HRvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:72:bc:1f:f5:6f:2c:c1:a7:75:e8:4d:d4:98:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Jul 27 08:01:01 2026 GMT
Not After : Jul 28 08:01:01 2026 GMT
Subject: CN=d86e6798f7cd81713aca248639a3d9da451a4112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:da:66:e4:b2:be:70:99:f5:cd:0e:85:4c:
d3:f7:15:3f:31:6c:55:86:62:5a:12:cf:d4:23:52:
21:75:f5:b5:64:73:6d:ec:4e:62:1c:4d:1e:e9:b3:
5b:3e:81:d4:de:6c:60:63:ea:54:a6:35:01:ab:89:
48:b2:bb:8e:77:b4:c9:fd:fb:71:43:e1:6b:9a:7c:
65:e8:10:b6:5a:bf:00:c6:ff:6c:b9:74:1d:6e:12:
30:ac:c7:1b:93:28:5a:b0:2b:be:a8:14:c0:ae:d8:
0f:a1:db:a9:7d:05:4f:58:ec:e6:dd:13:d1:4b:ab:
30:b8:d3:4f:84:1d:c3:d8:4f:11:01:27:d2:d5:ac:
a2:29:3e:ea:04:a3:47:28:58:9e:b4:d3:4c:c2:23:
30:91:24:ca:7e:bc:5c:1a:b6:60:37:8b:c7:ee:51:
10:08:7f:4f:76:40:af:e0:56:ec:d5:17:e6:8d:c2:
db:4f:b8:d7:ff:03:41:fa:e3:5c:0f:66:da:3c:10:
fe:d6:a0:0a:3b:90:cb:14:f2:c0:85:ce:21:86:73:
2a:54:a8:c9:9b:29:b5:55:15:2f:78:9a:67:d7:91:
87:c5:ca:35:7a:4f:27:e9:7a:7c:63:74:2b:eb:ad:
2e:37:ee:20:b5:fa:08:c2:10:9e:15:59:ec:b2:12:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6E:67:98:F7:CD:81:71:3A:CA:24:86:39:A3:D9:DA:45:1A:41:12
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:12:3b:25:8a:e0:61:50:8b:42:da:80:32:14:e7:03:fd:87:
62:0a:25:dc:19:94:ac:28:2d:9c:ef:a1:4d:a4:e0:06:54:2a:
4c:c5:af:14:58:98:6c:dc:93:a9:1b:99:7b:3b:63:bc:bc:08:
7a:4c:7e:0d:38:12:3b:84:63:b2:52:1a:7d:1d:3d:97:8f:96:
33:df:31:91:0d:ab:cc:ec:a2:6a:8f:5f:51:eb:03:2c:a8:2b:
0f:6b:7a:9e:93:cc:15:f3:9a:78:20:d9:5d:2e:6d:65:a4:d2:
58:2e:15:61:f6:3a:1e:09:a5:07:74:39:e1:d0:cb:09:58:36:
ec:5c:85:f5:7e:46:65:7e:4e:5c:27:48:4e:40:cb:c8:cd:6c:
3a:ad:76:b5:88:78:41:d6:53:58:04:1f:a3:21:2e:12:8d:39:
c7:d3:69:26:33:6f:db:13:8b:63:b0:73:52:ac:1c:4f:a6:c6:
6e:15:be:e3:ac:d5:bb:d2:d8:90:44:d1:99:40:9f:38:a3:c4:
76:36:2c:2c:7d:23:70:6f:aa:cc:36:97:ed:bd:35:fb:da:3d:
de:06:50:3b:82:b8:72:fc:b5:31:2f:6a:f0:f6:19:27:cc:d4:
91:a1:2e:f5:b5:f2:09:c4:2b:7d:09:a4:d5:2c:e7:77:f7:f5:
61:e2:dc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:05 2026 by rpki-client