Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
File: 3XGhKciwiZWUIZnqbRsigmU1DQs.mft (raw, json)
Hash identifier: hw/7bvDtS0CPKUy0eD9/MISEkOPqCZcCKWeWU0Psegk=
Subject key identifier: 58:C0:11:2C:AA:4B:A7:EC:16:9A:2A:9C:30:F3:5C:D8:B8:D4:81:89
Authority key identifier: DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
Certificate issuer: /CN=dd71a129c8b08995942199ea6d1b228265350d0b
Certificate serial: 019FA1F2744B7BD474E2BF9ED3E4A62A26A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 05:00:48 +0000
Manifest this update: Mon 27 Jul 2026 05:00:48 +0000
Manifest next update: Tue 28 Jul 2026 05:00:48 +0000
Files and hashes: 1: 3XGhKciwiZWUIZnqbRsigmU1DQs.crl (hash: XxjLOooqAnp1nxub43nnkws+/TXft4hX8NZrIcUZw/k=)
2: BVmlLvTO3TnwU-WykyLWkZijiEQ.roa (hash: GjheiEWnUhL3hO3K8TeuKDirKE8ozbAnofhtWixZIn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:74:4b:7b:d4:74:e2:bf:9e:d3:e4:a6:2a:26:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71a129c8b08995942199ea6d1b228265350d0b
Validity
Not Before: Jul 27 05:00:48 2026 GMT
Not After : Jul 28 05:00:48 2026 GMT
Subject: CN=58c0112caa4ba7ec169a2a9c30f35cd8b8d48189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:11:a5:4c:46:a8:4b:7b:6e:c3:32:a6:1a:97:
8f:fc:f1:df:aa:32:a4:aa:da:fb:9e:b9:a2:c0:d4:
48:81:f3:a0:99:86:8d:ea:24:c8:0c:a8:32:a0:35:
86:27:58:f5:37:3d:8b:ed:8a:23:84:31:56:79:09:
3c:47:82:30:d5:1b:a9:70:28:24:c2:67:00:95:d6:
98:7f:3d:e3:30:34:d4:6f:ea:99:3e:87:cb:d0:71:
ef:65:65:d4:84:59:41:7f:48:25:5a:04:8a:2f:7c:
4f:4d:73:65:85:e4:74:52:3b:2d:98:0e:a9:9d:1b:
47:ac:2b:da:b7:8c:6f:0e:90:c1:2f:80:c6:26:d2:
1f:43:de:b4:f9:b5:ac:75:4d:8a:38:bb:e0:b0:04:
d2:00:ed:f7:45:72:3f:5b:cf:3c:54:fb:ed:a8:a7:
1a:83:00:93:f0:11:c0:b0:b6:6d:c8:27:b7:4b:c9:
de:67:b6:b9:a0:91:06:ca:b2:5f:d0:7b:55:5e:85:
76:c1:c6:5e:8f:83:a7:4a:2a:c1:7b:6e:b3:15:a9:
38:93:08:27:01:fa:cf:5e:36:c9:90:30:84:85:68:
75:d0:34:47:de:d9:b5:0f:90:ae:a5:43:72:e9:b4:
b9:2d:ba:98:b1:c5:ff:62:0b:c0:a3:8e:43:4c:c1:
34:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C0:11:2C:AA:4B:A7:EC:16:9A:2A:9C:30:F3:5C:D8:B8:D4:81:89
X509v3 Authority Key Identifier:
keyid:DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:d2:97:5e:81:88:93:8a:94:ef:c1:d9:94:52:9f:23:93:
d9:66:22:dd:96:c9:12:cb:34:48:35:37:f3:c6:ee:a2:eb:11:
42:c2:3c:ee:cc:7e:1a:40:ea:84:5c:d2:cc:8d:08:8d:40:84:
25:c6:6a:31:d8:cf:04:a2:26:3b:79:71:f8:58:fd:10:cb:a9:
06:a5:f9:e1:41:41:b5:b8:93:41:b4:ae:bd:54:1c:79:63:1b:
51:16:29:0a:a2:e1:27:fd:6b:79:70:a3:87:a0:75:8b:82:26:
74:ad:bb:6a:19:46:0f:32:53:fc:9e:ed:2b:78:ef:47:61:84:
97:81:27:31:7b:0d:ec:65:06:6c:29:20:7c:b4:95:c5:86:e2:
75:1c:84:bd:f3:d3:e5:d0:08:45:d1:c2:d4:3f:7f:eb:d9:54:
34:a4:b3:05:04:56:a1:45:e6:17:51:52:88:f2:81:94:3d:de:
63:27:af:b3:4e:da:5b:24:d3:4a:10:09:f8:3e:97:c3:50:6e:
c2:0b:6b:b0:59:b7:19:62:19:14:b2:aa:33:7b:cb:8e:28:91:
36:73:05:05:2f:59:e2:c2:0f:55:a2:53:2b:fd:9a:9d:db:bb:
49:3d:31:fb:be:5a:45:92:d3:17:d2:2b:b2:55:c1:5c:b7:1a:
b4:97:74:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:49:51 2026 by rpki-client