Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
File: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft (raw, json)
Hash identifier: KuQalV2Q0GulKM52gLqSzcswIERE02svDbe5KGhd9RY=
Subject key identifier: 7C:FB:44:3F:C5:A8:E3:8D:63:91:A8:C1:F9:60:1C:DD:B8:8A:1E:1C
Authority key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
Certificate issuer: /CN=dead4c89f7aed8681d0202d22479d86e1462f889
Certificate serial: 019FA44ED374E68E9DAB06DF01C61752800D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 16:00:57 +0000
Manifest this update: Mon 27 Jul 2026 16:00:57 +0000
Manifest next update: Tue 28 Jul 2026 16:00:57 +0000
Files and hashes: 1: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl (hash: uTT64UaH11pFMey8k9j8/G1Y3ZOQDf7Nr9oxEVOL89I=)
2: nGLpAbzPIa0fYIAvBp2NmfsMLMY.roa (hash: kwgj2EY4C+VKLivxvxueFyLeX+WYaalA75ogbGHFJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4e:d3:74:e6:8e:9d:ab:06:df:01:c6:17:52:80:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dead4c89f7aed8681d0202d22479d86e1462f889
Validity
Not Before: Jul 27 16:00:57 2026 GMT
Not After : Jul 28 16:00:57 2026 GMT
Subject: CN=7cfb443fc5a8e38d6391a8c1f9601cddb88a1e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a6:5c:29:0e:f2:ef:1e:bd:f1:0e:97:58:b3:
40:60:cd:61:2e:58:38:b2:82:61:6a:6d:59:05:b2:
bf:33:00:04:6e:0c:70:f6:07:3e:6f:ba:7f:50:42:
a0:5f:db:14:73:0c:08:c1:cf:37:90:8a:c6:f2:7a:
eb:66:0d:c7:b7:df:78:f4:97:3a:3c:c2:e4:cb:6d:
57:d4:fe:5d:21:30:fc:c0:07:f8:94:29:3e:5a:82:
da:e9:3a:ba:ad:a0:c4:42:12:6d:b2:c7:33:c5:ba:
28:33:8c:52:fc:db:26:fe:a0:1c:3b:e0:38:88:97:
d0:0f:19:0d:81:23:2b:ab:2f:e9:bb:3c:f0:ec:df:
67:e2:55:74:81:59:5b:55:15:37:ff:fb:c1:63:51:
d7:e2:a8:e7:d2:e1:d3:a4:83:e9:40:44:9d:f3:8e:
43:47:75:ff:a9:a6:00:64:f5:f9:44:e4:2f:f0:3e:
74:fc:04:1a:c4:1c:23:d6:c4:02:bb:8b:34:ed:03:
80:43:06:de:34:de:06:e9:86:c8:28:3b:13:59:12:
7e:4f:8d:0c:a4:8a:37:82:cd:48:45:10:78:7d:21:
95:d5:4d:9b:aa:0e:a6:a3:f8:3d:d0:2f:a4:52:59:
36:21:4e:30:28:50:f9:78:c9:f4:72:29:3f:c9:03:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FB:44:3F:C5:A8:E3:8D:63:91:A8:C1:F9:60:1C:DD:B8:8A:1E:1C
X509v3 Authority Key Identifier:
keyid:DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b8:18:cc:32:8f:ef:72:18:12:f6:2b:5b:9b:9d:8b:72:51:
b3:1c:9c:a5:10:99:8c:3d:64:ad:d7:24:e0:de:d5:54:13:cc:
5c:d7:74:cb:85:16:14:02:a7:09:2b:e2:d4:0e:d1:a0:7b:ac:
9b:34:eb:a2:9f:f8:32:f1:40:5f:29:a1:5e:ce:9c:c3:50:4a:
82:6e:29:f8:18:42:81:f3:58:c8:d7:cd:b2:f0:f9:8f:29:e7:
17:04:f9:d0:02:10:1c:1b:81:32:dd:15:f2:f5:14:a0:00:0d:
5e:c4:a5:d2:e3:8b:25:f9:3b:e3:de:07:67:ed:99:cc:97:8e:
46:17:57:cc:61:ae:aa:62:16:f7:73:f2:c3:58:61:71:ac:1a:
c7:82:ba:36:77:53:02:8f:24:8b:9c:f2:2e:b2:58:c5:41:66:
39:38:89:e0:86:f0:d6:e7:f1:34:18:6f:0f:8a:0f:ee:82:a8:
0c:82:80:4f:2e:97:74:a6:68:9e:a7:79:00:20:78:3e:a3:71:
14:ea:d1:38:c8:b9:7b:78:72:9f:e0:10:86:97:96:30:a6:5b:
6b:6b:46:19:f2:94:7d:81:ed:b1:92:52:e1:8a:d5:c7:c6:bb:
1a:63:bd:83:a6:ed:9e:62:bb:f5:e2:21:e7:51:dc:ab:03:c0:
9c:a2:d0:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+kTtN05o6dqwbfAcYXUoANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYWQ0Yzg5ZjdhZWQ4NjgxZDAyMDJkMjI0NzlkODZlMTQ2
MmY4ODkwHhcNMjYwNzI3MTYwMDU3WhcNMjYwNzI4MTYwMDU3WjAzMTEwLwYDVQQD
Eyg3Y2ZiNDQzZmM1YThlMzhkNjM5MWE4YzFmOTYwMWNkZGI4OGExZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56ZcKQ7y7x698Q6XWLNAYM1hLlg4
soJham1ZBbK/MwAEbgxw9gc+b7p/UEKgX9sUcwwIwc83kIrG8nrrZg3Ht9949Jc6
PMLky21X1P5dITD8wAf4lCk+WoLa6Tq6raDEQhJtssczxbooM4xS/Nsm/qAcO+A4
iJfQDxkNgSMrqy/puzzw7N9n4lV0gVlbVRU3//vBY1HX4qjn0uHTpIPpQESd845D
R3X/qaYAZPX5ROQv8D50/AQaxBwj1sQCu4s07QOAQwbeNN4G6YbIKDsTWRJ+T40M
pIo3gs1IRRB4fSGV1U2bqg6mo/g90C+kUlk2IU4wKFD5eMn0cik/yQN9HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHz7RD/FqOONY5GowflgHN24ih4cMB8GA1UdIwQY
MBaAFN6tTIn3rthoHQIC0iR52G4UYviJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jZWE2NWYtZWNhMS00ZjgwLTg3NGUt
NWJjZmNlNWNhMmM3LzEvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jZWE2NWYtZWNhMS00ZjgwLTg3NGUtNWJjZmNlNWNhMmM3
LzEvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7gYzDKP
73IYEvYrW5udi3JRsxycpRCZjD1krdck4N7VVBPMXNd0y4UWFAKnCSvi1A7RoHus
mzTrop/4MvFAXymhXs6cw1BKgm4p+BhCgfNYyNfNsvD5jynnFwT50AIQHBuBMt0V
8vUUoAANXsSl0uOLJfk7494HZ+2ZzJeORhdXzGGuqmIW93Pyw1hhcawax4K6NndT
Ao8ki5zyLrJYxUFmOTiJ4Ibw1ufxNBhvD4oP7oKoDIKATy6XdKZonqd5ACB4PqNx
FOrROMi5e3hyn+AQhpeWMKZba2tGGfKUfYHtsZJS4YrVx8a7GmO9g6btnmK79eIh
51HcqwPAnKLQXQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 00:59:20 2026 by rpki-client