Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: oMSXnIWplhtJeMImuXiZp4AQJqodmc+xmEGP9wdwVSo=
Subject key identifier: 80:47:0F:09:06:2B:FF:51:27:5F:00:C5:D3:C2:9D:76:3F:72:C3:BF
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 019F9023328D8FEED8DE9D805B1E223C58EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 18:00:53 +0000
Manifest this update: Thu 23 Jul 2026 18:00:53 +0000
Manifest next update: Fri 24 Jul 2026 18:00:53 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: A8Amph5J1fe406FIOmUTeS7r+i6B1+Cwjr4LAX1G3i0=)
2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:32:8d:8f:ee:d8:de:9d:80:5b:1e:22:3c:58:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Jul 23 18:00:53 2026 GMT
Not After : Jul 24 18:00:53 2026 GMT
Subject: CN=80470f09062bff51275f00c5d3c29d763f72c3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:b9:3f:ba:e1:31:82:c3:f4:23:18:d9:86:
e6:06:b0:7e:be:e9:80:b5:26:35:ac:f0:1b:c9:de:
f0:51:9b:fb:9a:99:ad:e0:5f:32:26:f5:11:b4:fc:
d2:d3:5f:4f:c3:19:b4:21:e9:73:52:7f:3f:5f:09:
7e:47:36:5d:5b:13:99:32:8e:cc:21:16:9e:76:a3:
a1:9a:18:70:b6:28:f1:42:17:54:d9:5d:39:74:3d:
db:33:cf:1d:36:da:f8:cc:6a:13:52:bb:c1:81:e2:
98:ea:3e:fe:5d:ae:4f:47:a3:3c:4e:f6:07:2c:65:
e4:00:f7:4c:6e:05:62:49:29:5a:00:a2:e6:8e:1b:
c1:95:62:a7:73:0f:34:51:44:4f:89:36:e8:22:d9:
11:86:32:88:27:bc:5d:38:77:d2:d8:6d:af:bb:09:
ac:e6:74:b7:e9:13:65:d9:9a:13:7a:c2:f3:84:8d:
c7:82:e2:ab:b6:91:10:c9:aa:9e:4c:b3:3c:07:d9:
9e:5f:14:9e:c8:63:4c:6c:f5:6f:a0:3c:30:5b:d8:
7a:c1:ee:d9:95:83:d8:77:15:33:e6:f0:d3:57:5d:
fa:20:16:f1:33:90:27:ab:a6:6a:f7:14:82:22:14:
51:f2:49:40:eb:1c:60:8a:b7:a0:34:7f:25:c0:1c:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:47:0F:09:06:2B:FF:51:27:5F:00:C5:D3:C2:9D:76:3F:72:C3:BF
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:78:16:29:13:a0:57:41:2a:84:47:32:aa:b3:e4:34:20:fa:
96:19:8d:6b:0c:4d:77:5e:01:09:2e:09:b1:62:05:8f:19:b3:
e5:e6:d7:b9:ce:b6:a4:2e:ea:68:68:fa:86:4f:1c:dc:ae:38:
42:ef:2d:89:14:84:28:41:00:7a:4d:64:ff:8a:52:2e:15:66:
99:b9:89:17:20:07:42:98:e5:24:09:74:cf:f3:9b:7b:6b:bf:
67:d2:91:46:0d:04:2d:8e:e6:e2:a3:96:99:66:31:19:1a:08:
6c:46:5b:00:8c:5a:ed:30:0b:07:ea:f1:91:b3:0e:51:b6:23:
04:e2:90:ba:97:da:36:e7:3d:5d:a1:af:e7:58:6a:88:3c:1f:
03:e7:fe:08:e6:4c:90:ce:bc:e6:e4:36:ed:11:9e:1b:e2:46:
f2:5a:8d:89:af:3a:d2:67:f3:73:c5:d6:f8:a4:ad:d0:57:43:
31:c4:7d:13:85:89:55:64:f4:10:21:3b:e5:c1:76:86:66:25:
0f:7e:24:4d:ef:48:4f:b6:c6:63:e2:0a:15:5b:cc:cd:3f:da:
94:67:b8:ef:9a:89:61:69:77:24:91:93:14:b5:4b:74:a4:97:
27:55:1c:93:7d:7c:95:4b:56:64:24:70:d1:f3:10:d4:61:ec:
8a:18:b5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:26 2026 by rpki-client