Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: DmdHlHzoUuFHxR5Lp6w5TP8doF1DH7DrJVhRQHQ6E40=
Subject key identifier: F1:F4:9D:E8:AF:86:74:E8:9E:2A:9B:CD:13:2A:E8:33:EA:8D:82:3C
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 019F90C7B60BD59278C49BDEED6822708A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 21:00:35 +0000
Manifest this update: Thu 23 Jul 2026 21:00:35 +0000
Manifest next update: Fri 24 Jul 2026 21:00:35 +0000
Files and hashes: 1: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: YuS89UFLYmo/gPHKnU17NI8DQ4ru9hGuW6LDW+cP1sM=)
2: 7DFhLxfNsNdBG7misMM2Gd6pq98.roa (hash: 91BxkeL//UY4lGamLg4LH3uIYXXl6dNvyu0iOuqwroo=)
3: kOLGFIQ68N0t89GXfLW_l-tuaZs.roa (hash: JEbR7GHzj1yo7N6pB32D4eZu3GhxlqvfkdXGhcPXMmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b6:0b:d5:92:78:c4:9b:de:ed:68:22:70:8a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Jul 23 21:00:35 2026 GMT
Not After : Jul 24 21:00:35 2026 GMT
Subject: CN=f1f49de8af8674e89e2a9bcd132ae833ea8d823c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:c5:de:d6:38:98:5e:df:21:14:07:a0:c1:
b0:6c:00:a1:31:d2:2f:97:88:db:0b:01:6b:6f:3b:
0b:4d:c8:a5:e2:04:58:4d:c2:7b:19:d7:81:9e:29:
aa:6f:9f:9c:66:38:5a:66:34:ab:7c:77:cc:47:fd:
7a:43:3c:7f:fd:b6:5f:24:f1:c8:11:ff:de:90:80:
c2:42:a1:79:07:8c:24:ef:7c:7a:06:58:b5:c7:1a:
61:8d:bf:a8:1a:b3:2a:aa:76:e6:72:7c:39:af:a1:
19:c9:e8:71:13:8a:c0:f9:c7:d7:65:93:e2:08:46:
48:bc:d3:8a:a6:07:ff:11:e6:78:44:8c:f7:8b:28:
e6:42:03:f1:7c:24:6b:48:a0:01:8c:69:e8:0d:1e:
7d:01:59:3f:48:70:f8:b0:8e:c0:63:3d:ca:9c:db:
3d:e2:5a:c7:32:29:14:7a:b1:d8:c4:99:a7:78:7d:
f0:5c:f3:47:e6:7b:a0:8f:b8:ec:71:96:c1:40:7c:
7d:1f:44:22:67:55:2f:48:16:53:51:5e:02:44:4d:
a4:33:a8:ef:08:25:de:2a:2f:e6:5b:00:55:fc:93:
02:d1:ba:45:83:7d:95:a2:4f:22:f4:01:01:f2:12:
7b:45:fa:e1:16:62:07:bf:0a:01:93:9d:87:88:46:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F4:9D:E8:AF:86:74:E8:9E:2A:9B:CD:13:2A:E8:33:EA:8D:82:3C
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:21:e4:3f:45:62:98:94:c7:9d:4a:15:31:9c:12:5f:88:b8:
89:aa:e9:d5:73:3d:0d:28:f8:79:16:b0:1e:5d:6c:17:61:c0:
5d:77:d9:14:e7:6c:15:28:d5:ae:ae:7e:33:c4:ba:87:06:62:
6b:5e:51:aa:66:a9:b5:d6:98:3d:8b:d9:98:61:13:39:99:5a:
61:12:90:ee:40:48:ae:f8:a3:dd:2f:09:d2:c4:39:f9:90:54:
62:95:45:7f:38:43:57:e5:56:43:3c:54:2e:ec:be:96:df:b7:
c3:5a:f5:a3:31:cd:6e:d4:ae:e6:17:81:db:16:c8:0f:6e:8b:
4c:1a:43:18:c4:91:6a:0b:b9:38:2f:85:32:ee:26:0c:9a:e1:
d1:ec:b6:64:16:cd:8e:01:05:fd:de:a1:83:b1:38:0b:13:b3:
33:ea:1a:d2:3c:1d:df:5e:c5:3c:e6:ac:c5:50:58:82:eb:f5:
15:33:a3:30:97:cb:1e:fc:ce:67:35:5f:73:85:c1:b0:0b:16:
de:e7:72:87:87:4e:f7:3b:7f:41:45:9c:88:75:45:f8:23:10:
88:96:41:e0:24:c5:a7:cf:ee:07:3f:8e:4c:1b:78:48:6f:65:
5c:56:4b:be:12:07:48:15:99:22:0a:e9:5f:d3:a2:f8:39:2d:
fd:15:5f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:35 2026 by rpki-client