Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
File: 3-4r9D8hqBxJLG5qn8bwdNLwohc.mft (raw, json)
Hash identifier: +KHxQRKw94VEDfs5VJJWi2VhYnJUf/R11UQPg5yKgqw=
Subject key identifier: 5F:5D:C4:C4:F8:EB:4B:8A:46:EA:04:BB:1B:F0:F0:28:44:87:3C:8A
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 019F845578188F56040F75BBA89358BE8D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
Manifest number: 19CD
Signing time: Tue 21 Jul 2026 11:00:21 +0000
Manifest this update: Tue 21 Jul 2026 11:00:21 +0000
Manifest next update: Wed 22 Jul 2026 11:00:21 +0000
Files and hashes: 1: 1fQajHTJp0S8KUunDd6YeyFtENM.roa (hash: mmAzmTwR/ELzJWO/mTGxkNnXnKiWntSSUF9kf4/Kzb4=)
2: 3-4r9D8hqBxJLG5qn8bwdNLwohc.crl (hash: SLVTQwea9CKPNxHMHZ9tm7UIhFGcXATcewHRlPPGQhM=)
3: 6I-aggcE89s528aMt_8CuZqJ61A.roa (hash: 1l0d6AnGSzNrEZie8Z3fZ9Fg7c3oqYcQ4vM6hMLN2Xk=)
4: CBBkKrCM4butKlVI-TgiHj5vk8E.roa (hash: cDORwelpwOEhZ+BpgLvqfOTY9HRVdT1MuxXVpxSB1Go=)
5: XBx3ZjkQBmOob1C1AQifpzrj3Es.roa (hash: toUyH2dFBi0jUqBudUbZQlU2ok2/b2pqbfdKdGPRAog=)
6: l6dcV9zJ9n_Ctd5EzzonA7X-jFo.roa (hash: mwxDuvlYfTCoynYTFAQOpS/BivdbtxW1voj1voq8fsg=)
7: rrxhY0T34NFm8dBURFOGg9BvJjw.roa (hash: CAUMQZvZz6QKlQgRUZEx4oRHdyyDBXGnUQ6HYMNXgDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:55:78:18:8f:56:04:0f:75:bb:a8:93:58:be:8d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Jul 21 11:00:21 2026 GMT
Not After : Jul 22 11:00:21 2026 GMT
Subject: CN=5f5dc4c4f8eb4b8a46ea04bb1bf0f02844873c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:9b:c1:d2:91:06:37:73:0b:3a:70:09:07:
db:7e:06:8c:49:fa:3a:ef:ce:e7:ef:8a:7d:b0:44:
a5:d9:97:f3:8f:b5:a4:c1:c9:e8:f9:e0:78:6d:d7:
13:04:5a:b1:98:84:59:84:72:c4:32:dc:9e:50:e4:
6c:cd:f2:f5:d4:fd:61:29:b1:09:5a:30:85:d4:63:
dc:86:83:7a:dd:c4:6f:5a:de:ab:0d:aa:e7:b9:0b:
68:a8:df:42:67:9b:51:e2:6f:58:36:6b:a4:b4:8b:
51:bc:a2:7d:49:01:49:29:e4:75:12:b4:fe:b0:f8:
5e:08:cd:67:fa:78:e7:e7:a2:81:f5:20:77:62:03:
55:52:f0:3c:47:57:74:87:52:88:fb:07:66:3a:4d:
43:27:2c:46:e3:7a:d2:2e:d6:17:90:db:3f:2f:30:
45:2c:ad:7c:91:3c:92:af:08:46:9e:78:e2:c9:57:
d0:2a:42:78:96:05:80:c1:da:01:4c:af:49:51:ad:
bc:22:e1:70:08:99:2f:74:5e:c9:2e:57:c5:9f:6f:
8b:03:39:f0:0f:9c:13:f6:2b:fe:58:11:8d:30:1c:
3e:74:3a:8a:6a:53:a1:58:c0:ce:b2:5e:4f:61:8b:
1e:1e:25:68:18:e9:2b:8d:86:94:bf:21:bc:e5:89:
0d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5D:C4:C4:F8:EB:4B:8A:46:EA:04:BB:1B:F0:F0:28:44:87:3C:8A
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:30:67:50:1c:3d:38:07:62:1e:a0:b8:f4:1e:e1:73:c1:78:
25:85:ef:5b:26:74:dc:ae:e9:03:3f:93:b1:06:63:6a:d5:b7:
ae:b9:f7:54:6d:46:c4:41:7f:6d:dd:4a:13:ed:7d:c3:77:c0:
28:1f:c2:f9:f8:13:b9:e4:1b:b6:1d:d0:87:a2:ab:b1:4b:81:
42:76:91:a8:be:89:b6:d4:fc:17:a4:02:85:fe:cb:5c:a4:68:
ad:6f:17:de:82:95:b7:ff:ed:a8:72:eb:d9:67:fb:74:78:4f:
50:8f:7c:6e:cd:cd:aa:00:5b:17:1c:39:d3:f4:2c:1f:3a:5f:
77:ba:e5:f7:1b:81:bf:0b:5f:30:7d:58:15:9a:df:f9:1f:aa:
f0:dc:c9:21:e6:eb:d8:4d:88:be:32:7a:d2:04:c2:cd:ee:5c:
a5:4f:ce:ff:2c:9e:5d:82:9e:7f:9c:c3:2e:ea:c3:3f:2d:cb:
9d:0f:04:62:dd:ce:ca:b3:cb:9e:f9:0a:c6:c9:94:fd:f5:b5:
71:48:d8:c0:b0:eb:58:02:95:9c:02:e1:4c:ba:28:3b:58:08:
d5:54:37:df:fb:1c:b3:50:70:28:5d:20:e7:5e:74:36:b5:46:
dd:ac:04:80:d3:76:02:e9:b0:6b:ad:4f:14:f3:20:89:0a:ff:
c1:b4:26:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:43:15 2026 by rpki-client