Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
File: 3ikhmJ19kMZOuzVliDH-ao9JyTg.mft (raw, json)
Hash identifier: vASRMNqByoP+xfJnFQeQbL7cbmYYzQLG8cKG64rIvyc=
Subject key identifier: 3E:C1:CD:8F:83:4E:3A:3B:47:A4:17:22:8E:B3:D5:FA:6F:11:B6:F5
Authority key identifier: DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38
Certificate issuer: /CN=de2921989d7d90c64ebb35658831fe6a8f49c938
Certificate serial: 019F91DA4CC59A212EE51005DA60DC7C65A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
Manifest number: 0E38
Signing time: Fri 24 Jul 2026 02:00:30 +0000
Manifest this update: Fri 24 Jul 2026 02:00:30 +0000
Manifest next update: Sat 25 Jul 2026 02:00:30 +0000
Files and hashes: 1: 3ikhmJ19kMZOuzVliDH-ao9JyTg.crl (hash: PIh45G/DzBXXC+ySdwjBp1eKkser+ydbDE6n+fSbCmg=)
2: _ioUT6ot6spKYeitBH6WHig08aI.roa (hash: lPf90VagjG9YZhFPp1sns8p7TmON2JIuqMSkRErr21k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:4c:c5:9a:21:2e:e5:10:05:da:60:dc:7c:65:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2921989d7d90c64ebb35658831fe6a8f49c938
Validity
Not Before: Jul 24 02:00:30 2026 GMT
Not After : Jul 25 02:00:30 2026 GMT
Subject: CN=3ec1cd8f834e3a3b47a417228eb3d5fa6f11b6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:e5:0e:e0:d0:a3:a0:f1:c9:e6:17:66:86:
d1:b9:b0:18:a1:49:21:08:df:31:8f:d8:aa:7e:16:
86:90:8d:79:bf:bf:c7:c0:a5:13:23:c0:0c:09:0d:
6d:66:fd:c3:0a:a3:27:91:da:2e:42:61:83:7c:b4:
01:b2:36:79:70:73:da:48:d6:53:56:2d:57:a8:57:
42:de:e9:15:46:12:80:0b:ba:c5:87:18:40:8d:b7:
08:d3:2a:4c:54:5e:13:28:0c:3d:be:02:90:65:93:
9b:f9:63:07:74:e5:9e:96:64:f2:3c:e6:e0:4e:99:
62:c4:0a:34:1e:df:e7:f0:88:02:49:56:7f:e1:70:
2a:9b:96:36:cc:49:95:14:7e:05:23:04:de:51:f1:
16:c6:05:9d:8a:fd:dc:e4:d0:4b:a9:18:ab:3e:57:
98:c7:bc:fe:d0:f7:61:73:f7:d3:7b:52:80:09:57:
7e:4c:36:33:4f:e3:ca:dc:40:1a:c1:e6:64:9b:71:
8c:48:32:7b:ae:42:8f:36:78:4f:f0:ea:cc:49:ac:
f6:6a:79:8e:93:6a:79:e6:b2:68:7f:35:58:46:2c:
14:5c:b8:ad:66:d0:42:35:ea:7c:34:71:15:81:dd:
61:4d:86:d6:9b:3a:9c:1d:7a:fc:0e:5c:30:3e:55:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C1:CD:8F:83:4E:3A:3B:47:A4:17:22:8E:B3:D5:FA:6F:11:B6:F5
X509v3 Authority Key Identifier:
keyid:DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bd:b0:79:f0:39:2b:9a:2b:7c:b3:42:50:94:1c:4b:e1:e8:
fe:81:69:08:15:53:ee:d5:fc:bf:59:b1:e5:67:a9:73:eb:5d:
3a:30:1a:0a:0d:ee:5f:4f:0a:85:37:d2:fe:a5:a7:49:91:cb:
b5:f8:44:fe:4f:b5:ef:a6:87:49:48:a0:4d:f9:71:2b:42:9e:
86:e8:e3:44:60:81:c6:66:73:03:a6:cc:ee:c6:7a:23:75:e5:
03:6c:be:61:49:ba:06:08:2e:b1:53:34:d6:7b:b2:7f:c4:f3:
5f:3b:bf:ca:05:13:71:80:2b:a3:05:cc:05:28:f6:61:e5:a5:
12:07:5b:9e:b0:a3:22:b2:13:e4:05:54:39:90:4d:46:08:6f:
5f:4d:70:56:15:a1:21:26:8b:3a:26:0f:1d:e3:0e:05:65:a7:
44:8e:84:92:80:49:e1:99:5f:fc:79:98:64:69:2b:34:6b:3d:
ed:55:2e:74:34:f2:77:a0:b1:f1:a5:73:7a:ea:31:cb:57:78:
c9:7a:59:85:28:d2:81:1c:4b:93:b0:08:5b:a7:c7:0f:15:33:
c8:ff:d6:ae:32:5b:a1:06:25:fd:92:bb:63:e3:a7:c4:85:8d:
46:d5:e9:38:3f:bf:95:37:77:75:87:94:b4:e6:ab:75:2e:3f:
ea:49:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:53 2026 by rpki-client