Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: 5dCpzUQPSgipRgJdgzdSeqxZuRi2jqYaNJeKCzA9P0A=
Subject key identifier: DB:7C:86:FD:3D:E5:A3:D0:B3:A5:D6:D8:FE:92:56:E2:1E:78:F4:F4
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 019FF9ECCAC9D210CC07C54A30DF4E7D1697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 19FD
Signing time: Thu 13 Aug 2026 07:01:12 +0000
Manifest this update: Thu 13 Aug 2026 07:01:12 +0000
Manifest next update: Fri 14 Aug 2026 07:01:12 +0000
Files and hashes: 1: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (hash: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q=)
2: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: 31KeyqSLUjZY5gw5YUXfIBIZ0os8II63P8/LcHjC8L4=)
3: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (hash: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:ec:ca:c9:d2:10:cc:07:c5:4a:30:df:4e:7d:16:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Aug 13 07:01:12 2026 GMT
Not After : Aug 14 07:01:12 2026 GMT
Subject: CN=db7c86fd3de5a3d0b3a5d6d8fe9256e21e78f4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:55:c2:39:63:02:57:c9:f5:01:34:14:e1:
0e:38:27:13:61:fb:08:e9:e0:bb:2f:e9:36:95:dc:
95:9c:46:9a:9e:0f:5a:54:5d:39:69:32:4a:ab:b5:
b4:77:d7:e1:63:67:df:31:6b:12:b3:91:c9:24:e9:
5c:63:fc:c0:76:42:d6:1c:be:1d:39:0f:98:a4:9c:
a7:8a:8f:2f:9c:c7:13:34:88:0d:12:79:27:f3:d3:
27:1b:d2:fd:c4:14:52:46:67:c1:cd:c2:fe:d2:5c:
45:6b:82:9e:6d:0f:55:1b:8e:b7:b2:b2:b8:ab:a1:
a4:75:29:06:f7:00:5c:29:1e:67:b4:14:d7:fb:a2:
88:9d:df:63:0b:45:53:e1:84:c8:1d:de:22:35:52:
3a:a6:fa:e6:2e:7a:65:11:90:6b:4d:86:1f:b0:a4:
1b:00:78:cf:9a:92:e3:e8:da:84:75:f9:3c:84:ba:
e2:2d:b3:6d:94:a7:b1:90:93:0d:bb:34:2c:a2:72:
43:37:bb:e0:a8:6e:9d:1e:3d:59:b0:5f:40:23:a3:
11:df:52:5f:d7:d2:c4:c8:90:be:10:05:f1:a9:16:
5f:9f:bd:74:5c:aa:4b:55:75:7d:95:18:3d:af:5a:
bb:19:df:3f:c9:23:b5:cd:99:f4:4a:54:48:dc:93:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7C:86:FD:3D:E5:A3:D0:B3:A5:D6:D8:FE:92:56:E2:1E:78:F4:F4
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a8:7c:f6:3b:1a:b4:f7:08:8e:41:0a:48:56:88:15:f3:af:
8a:76:69:68:17:c2:7e:27:08:a9:39:82:58:60:d7:c7:30:a4:
56:b7:28:b8:fa:9c:48:ff:0c:a4:d6:16:5d:09:17:e4:83:90:
76:af:4f:0e:63:4d:d4:ff:2a:53:0c:7f:f6:6e:66:d4:a4:be:
45:3a:ef:a8:a6:46:94:0f:fc:8c:bd:79:f3:a9:f3:be:f4:84:
50:24:8c:10:11:61:1a:ef:4d:7b:78:a7:21:28:5b:15:3d:03:
51:ca:82:3f:96:d6:c0:fa:d5:89:c0:a1:80:cc:2a:b9:13:3a:
b8:61:83:37:f0:1a:0b:84:10:ae:47:75:e2:0e:30:b8:f6:f6:
77:03:a1:87:e6:91:7e:10:ca:4d:1a:88:b6:fc:72:64:da:f3:
83:41:e6:28:b0:37:3b:a6:a8:71:55:7b:13:33:7c:08:8f:64:
ad:ff:8d:09:c9:76:be:6a:1f:ca:a5:08:41:8b:79:cb:ec:28:
5f:bf:61:e0:3e:92:7c:11:20:cb:32:fd:a1:89:84:ab:36:bb:
92:11:3c:97:24:1d:25:55:19:60:cc:f4:c0:2f:ba:f8:fc:8d:
e9:08:c1:d3:ca:f5:52:bc:ca:0e:4c:01:39:1b:25:85:02:52:
a6:2e:c8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:48 2026 by rpki-client