Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: r4ZhMmFstNrfYOx/VuJ7Iaj76UQlS3zt/FAtBD7oeIM=
Subject key identifier: 60:9F:F6:3A:49:85:6E:77:32:A2:9F:E8:7D:15:4C:91:1F:A6:CA:0A
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 019F93C9A6506008FB7832DFA7695CAA075A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 150B
Signing time: Fri 24 Jul 2026 11:01:33 +0000
Manifest this update: Fri 24 Jul 2026 11:01:33 +0000
Manifest next update: Sat 25 Jul 2026 11:01:33 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: JmlkUb31kgbMuHyYBD2KCu9ybq25bjQaHhrnJw1/mB0=)
2: 6TUuFWgBkm98OJlIkhqINWWAoI0.roa (hash: GA9PdoKCJE0Uq5wLiSfj1Mw/gZ339oU3m0s7B3MQNRA=)
3: _qA7-iuYEvTbfVREYl9q7tay4Bk.roa (hash: Z/glgCy5dfzogAACVBlWtKvnqFreHrzxfTJl0PSlZgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:a6:50:60:08:fb:78:32:df:a7:69:5c:aa:07:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Jul 24 11:01:33 2026 GMT
Not After : Jul 25 11:01:33 2026 GMT
Subject: CN=609ff63a49856e7732a29fe87d154c911fa6ca0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:7e:dd:ac:f6:eb:6f:2f:f7:34:b8:44:c6:
0e:f9:d9:3a:15:0e:ab:ba:d8:98:14:6e:46:7e:1e:
ab:bb:b0:ed:16:6b:76:85:32:31:70:db:77:a5:ba:
52:fb:e2:b6:29:ff:f2:ab:07:2b:1e:67:80:1d:06:
dd:7a:17:f5:1c:40:2a:f4:e4:03:2d:3d:da:7c:ef:
e4:0f:2e:11:b5:d0:8f:07:b8:39:e9:d8:3a:75:2b:
63:5c:23:6d:b8:d4:16:cc:d9:c6:37:56:09:4c:af:
ff:da:41:da:1e:4b:ea:29:13:8b:96:32:cd:7c:67:
e4:72:fa:02:db:77:51:e6:c1:9f:11:cd:60:29:f6:
fa:b4:ec:72:31:e2:d3:34:38:3a:f3:97:e1:28:27:
39:ca:b1:df:17:9c:02:bc:0a:fb:57:56:a2:22:d1:
7b:9e:d4:c0:ec:2e:91:48:c7:a8:f9:ee:e1:55:6d:
60:ce:5a:90:4e:90:55:87:fe:3a:2f:bd:64:09:b9:
74:a1:03:27:a9:b9:0e:b7:0e:db:58:1f:82:7d:e0:
eb:20:e7:4a:96:b1:ab:e1:89:6f:b9:e8:ca:d2:a7:
96:06:f9:db:79:40:a5:36:1e:4e:e7:d8:e3:02:39:
2d:55:c8:68:bb:8e:60:3f:a6:a7:9f:39:89:48:02:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9F:F6:3A:49:85:6E:77:32:A2:9F:E8:7D:15:4C:91:1F:A6:CA:0A
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:98:8d:b2:83:98:9d:2f:7d:6b:0a:74:62:8c:04:12:ca:16:
7d:f9:ea:f9:8d:bf:0a:de:c6:dd:71:cf:42:91:52:b3:db:11:
66:94:65:43:9b:6b:02:97:64:1b:8d:c8:79:a9:55:b3:60:e2:
97:cd:d2:22:8b:3f:bf:72:86:fb:50:24:8c:6a:c8:c8:23:fe:
f0:a9:54:82:a0:84:a9:6b:6a:4c:ba:ba:d2:3b:92:17:fb:99:
9c:d6:33:db:70:b3:5e:df:21:8a:8c:f5:73:9e:01:d3:6f:9c:
03:60:46:cf:46:ee:06:33:76:b1:44:bd:25:c1:2c:89:cb:27:
38:e6:28:7a:af:5b:3a:21:a6:97:a7:9a:0a:af:16:9c:c8:ae:
94:05:30:e8:ce:c2:c1:e1:cf:45:83:3e:c9:71:b6:0f:ad:e0:
b8:28:e6:1a:3e:9f:71:56:fa:85:84:a2:ef:6d:13:99:fb:9f:
ee:ad:2b:40:75:31:1d:72:69:22:a2:81:c2:ea:cb:a1:8b:c5:
d8:69:f2:fa:8d:71:74:22:b0:f0:74:f0:71:52:7f:44:0b:3a:
4f:71:95:a4:15:52:34:ea:97:73:f3:06:f5:3a:40:7e:22:80:
98:48:fe:d0:ff:92:da:84:92:df:fe:a0:b9:f2:f9:ab:73:be:
99:99:3a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:49 2026 by rpki-client