Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: e5YRX9vvzc4bcqoCYStrI2TmxNCGU2+p7RJzm7v4TOY=
Subject key identifier: 42:C5:CB:50:D1:4D:33:14:65:AA:F7:3C:99:0C:2A:8B:AA:7D:67:9A
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019FA116D7447BACCE11FFFB8EE0AA72B64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 19D7
Signing time: Mon 27 Jul 2026 01:00:56 +0000
Manifest this update: Mon 27 Jul 2026 01:00:56 +0000
Manifest next update: Tue 28 Jul 2026 01:00:56 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: 0TcODR2XlQetsnifBqmaBgy9YAByEr9y6auLkVVyIRw=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:d7:44:7b:ac:ce:11:ff:fb:8e:e0:aa:72:b6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Jul 27 01:00:56 2026 GMT
Not After : Jul 28 01:00:56 2026 GMT
Subject: CN=42c5cb50d14d331465aaf73c990c2a8baa7d679a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:77:d0:cd:7e:7b:92:06:5a:c3:aa:89:30:
40:1b:5b:32:f7:dc:47:4d:03:b8:7e:de:a2:5b:b5:
a1:8f:70:2e:66:33:6d:23:78:69:91:d1:15:95:73:
38:34:77:3d:4c:d6:ac:60:9c:6a:01:a4:45:16:84:
17:90:20:47:a2:9a:51:19:4a:9a:b6:46:ba:f4:bd:
11:ca:ae:7c:85:b5:a8:da:4b:4a:9e:fb:20:b5:6e:
6f:29:87:f4:2d:80:a3:f2:79:24:ed:17:37:16:9e:
42:ed:67:2a:b7:ec:b4:25:8b:9c:a5:00:2f:79:27:
62:46:d6:ba:4a:ab:69:70:79:7e:ed:b8:10:d7:8a:
2c:33:77:67:a8:4a:a8:86:be:f1:4a:c5:a4:1f:a8:
82:d3:61:a9:47:31:9c:be:9b:5a:4a:8a:82:ee:97:
4c:77:3d:92:0b:6b:73:7c:b6:2b:d4:6a:e6:ae:81:
28:41:11:d6:af:c7:bd:43:b4:68:f7:bc:59:08:5b:
a8:f8:b7:06:13:01:8a:17:99:00:71:3b:c2:76:16:
38:05:d2:d1:63:3b:69:34:5c:e5:32:41:28:73:44:
e5:b4:03:b2:ea:41:96:08:15:22:b1:a7:68:4a:df:
7e:1c:44:5c:4f:8c:eb:d8:3c:97:33:8c:30:1b:77:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C5:CB:50:D1:4D:33:14:65:AA:F7:3C:99:0C:2A:8B:AA:7D:67:9A
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e8:3f:d0:fb:fc:38:01:8c:ec:4e:bc:72:a6:73:47:38:f5:
ae:d9:eb:31:97:b7:85:67:be:b8:61:20:db:71:16:9c:fa:cc:
86:e5:66:e9:c6:8f:16:bc:ac:9d:be:d8:29:20:17:73:50:1c:
14:f8:5d:5d:31:50:1b:fb:1b:27:af:39:3a:f7:e5:2a:a2:c6:
c0:6f:43:91:06:9a:22:1d:e9:0b:35:86:c9:85:2a:2f:68:53:
0b:8c:5c:57:9a:99:6b:75:f3:e2:c4:44:8b:32:a5:53:60:6e:
11:cd:5a:b4:68:69:7b:fb:66:59:dc:8e:3a:e1:41:46:fc:78:
6b:23:0c:a1:d3:06:7c:fb:70:b2:9b:f0:dc:10:4a:b4:ef:8d:
21:ed:35:fc:b7:94:7d:ed:21:62:46:a1:f1:6a:1a:c1:9a:91:
b1:75:e5:a2:18:21:d9:13:82:f3:a7:ba:a8:41:4a:44:cf:bb:
a5:f2:12:ce:d0:70:fd:70:74:85:7c:de:7e:7b:80:d2:63:0a:
c1:59:99:dc:24:ae:26:f5:fd:47:d1:41:f8:26:87:9d:cd:0f:
fe:cb:ed:29:75:68:83:f5:37:89:ca:fb:be:5a:d8:fe:82:e2:
a0:9b:84:14:b0:8d:c8:ea:43:1e:70:e6:79:3f:2d:ee:76:17:
7b:90:8e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:43 2026 by rpki-client