Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: VWiATpr1dr4cfa2s+dKMM41Noe2fWFY6ZzqD2/+lMoI=
Subject key identifier: 80:81:78:F2:4D:15:45:BC:75:8B:95:0E:0C:6D:0F:14:5E:07:95:0B
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 019F84C418BBECC808970FF3FC791FC10224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 19C0
Signing time: Tue 21 Jul 2026 13:01:11 +0000
Manifest this update: Tue 21 Jul 2026 13:01:11 +0000
Manifest next update: Wed 22 Jul 2026 13:01:11 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: fmN9f83q7ny98mox3zMF4iH1SNouhxbKoWIvsjaRZzI=)
2: 6rPz8igkyZRlNFZsutLMqabI34I.roa (hash: Z2BW3rAqZoeVlHqBJzAMivNjITmnHOwFnbfJtV0fFqY=)
3: iC10497tJji-WYhWTVtTKPnCEBA.roa (hash: 6xbmmivHgxTXa78A2SNCDzZGkpnLAKBTJU2rllnxUng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:18:bb:ec:c8:08:97:0f:f3:fc:79:1f:c1:02:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Jul 21 13:01:11 2026 GMT
Not After : Jul 22 13:01:11 2026 GMT
Subject: CN=808178f24d1545bc758b950e0c6d0f145e07950b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:af:8c:72:64:bd:24:ea:b2:17:4c:0c:d1:
52:a6:88:6b:bc:4d:b8:38:26:12:ff:fe:3e:e6:4d:
87:2f:f0:dc:f2:b5:af:1c:1f:91:89:68:ce:0c:50:
8f:f2:50:2b:a5:3d:fa:bf:ef:3f:17:dc:fc:19:c5:
de:ac:c9:e5:4d:b0:e0:52:1b:d0:37:0d:5a:be:ca:
60:57:d3:ad:17:70:ed:08:1e:79:d1:ef:7e:8d:30:
44:19:50:55:43:59:ff:ce:4a:0f:a0:1d:33:eb:75:
a6:47:0a:44:bd:10:a2:e5:96:8e:84:a9:15:fe:00:
54:f3:29:af:a6:02:7e:ba:cb:e2:86:7d:42:fe:3e:
9a:a6:02:64:bc:13:13:b8:6f:4f:9d:b3:cf:ec:da:
24:0c:ef:bb:dc:0d:5b:51:c9:7e:db:0f:ea:c5:51:
3f:95:0c:8b:e5:3f:94:c1:74:5e:fb:9a:23:2c:4a:
f8:9a:df:0b:61:0f:cc:3c:92:b7:5c:b7:4b:a9:6a:
a4:6d:87:6d:25:85:d7:a1:6c:50:4f:27:db:dd:fe:
ed:23:0a:bb:d9:02:d8:28:15:ad:03:9a:e4:96:33:
6d:c8:f6:ba:d2:97:b5:e8:69:ff:fa:c1:04:28:cb:
b0:7e:3b:a1:87:5b:10:94:cb:9e:9b:3f:94:36:bd:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:81:78:F2:4D:15:45:BC:75:8B:95:0E:0C:6D:0F:14:5E:07:95:0B
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d9:3a:bb:e4:9b:97:66:df:02:5f:ba:8e:82:46:7f:8c:17:
58:11:a0:4e:9a:00:5e:09:d4:28:e4:00:44:bc:63:1d:d9:0a:
a7:d2:35:9b:85:11:04:87:89:32:88:62:77:a9:2e:60:dc:19:
15:4a:3e:c3:e5:c8:84:21:e5:15:34:6a:20:06:97:63:64:e2:
8b:d0:5b:9f:47:b1:8a:4a:a4:ff:4b:52:c0:d8:49:c9:c1:83:
e6:88:0b:93:41:0b:83:e3:51:31:21:43:ed:8a:36:af:3d:25:
6a:b2:b4:53:e6:91:27:0b:db:00:1f:91:a9:a0:6c:f3:8e:64:
e9:00:2c:d7:a4:d4:af:a2:16:a8:05:72:66:13:97:59:e8:7b:
31:9e:8a:e8:87:3f:72:46:65:76:9d:94:1f:6f:eb:8a:67:6f:
33:3a:12:b2:66:81:51:6d:27:dc:1e:bc:f4:5a:c4:46:ea:3f:
f4:ba:73:37:3f:02:56:6a:2a:3c:f2:ff:ed:5b:49:56:4a:e5:
bc:b4:67:9f:78:8d:b0:51:93:c9:93:c8:cc:df:13:4b:8d:97:
a1:38:88:93:ad:a3:8f:d2:ed:2f:df:74:c4:4b:bb:76:b4:d2:
7e:eb:41:28:5d:57:3d:84:6d:3f:69:2f:3a:ac:45:a8:d1:21:
79:e8:2e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:34 2026 by rpki-client