Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier: Av10sCR9YhlCmxn/nkfuTAWY2uswWC61KMTEUVXBBRQ=
Subject key identifier: 96:32:08:20:2B:0D:20:60:BA:4B:46:3D:A9:B3:CC:B9:D6:4A:71:F1
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 019F8F7E62B7A2A16ABFE76786FD97DB82E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 15:00:52 +0000
Manifest this update: Thu 23 Jul 2026 15:00:52 +0000
Manifest next update: Fri 24 Jul 2026 15:00:52 +0000
Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: j8qrT46aLANaR98/nC7jKxpuA6YrOHNi6LDksa5OvaY=)
2: LmwyPllgT27iDmcYfX7agNvw4rA.roa (hash: kpm3XdXtMEMrfdjcWSVw0huoNKfPlGFqAs8H1ASM9Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:62:b7:a2:a1:6a:bf:e7:67:86:fd:97:db:82:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Jul 23 15:00:52 2026 GMT
Not After : Jul 24 15:00:52 2026 GMT
Subject: CN=963208202b0d2060ba4b463da9b3ccb9d64a71f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:40:96:e0:74:b3:54:b8:8d:6f:32:a6:4a:b1:
50:68:7d:81:b8:d6:e6:e0:92:96:d2:66:a1:9d:56:
77:9a:dd:00:67:82:d8:3f:49:90:8f:3f:c8:17:57:
6f:a4:b4:4c:16:66:91:0c:68:00:58:dd:ba:34:eb:
54:4c:2f:e6:fa:6f:78:34:ca:b6:c4:3f:22:b1:74:
48:a9:d0:1a:a2:f3:bc:ab:bc:ce:5c:56:fb:4c:b7:
58:b5:e7:cf:4c:dd:29:3a:03:4b:db:52:d9:55:0f:
69:c5:4c:48:c6:a3:89:b8:ef:07:eb:a7:0f:0f:5d:
cc:24:2b:04:48:5c:29:79:4f:4a:20:84:e2:b7:f2:
25:aa:26:22:19:3c:7e:42:db:ad:61:eb:a7:15:80:
e3:3a:00:b7:bf:2a:08:31:1b:04:a6:40:95:f3:2d:
db:73:40:86:c0:6a:78:2e:6e:a2:1e:fe:38:87:ab:
c5:10:08:64:ef:06:f7:64:64:ea:f7:fd:ca:c5:05:
5f:ca:0a:5b:f8:7b:6c:9d:aa:56:d0:39:7c:b0:7e:
09:23:f3:96:b7:a5:41:21:5d:be:60:98:fb:1f:38:
2d:d6:ad:52:58:44:65:57:18:51:b5:38:e8:9e:f9:
66:ef:3a:59:3e:f1:4a:fe:56:1f:28:7a:d8:4b:b8:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:32:08:20:2B:0D:20:60:BA:4B:46:3D:A9:B3:CC:B9:D6:4A:71:F1
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f9:36:7c:9e:69:cf:36:70:5a:16:3e:52:7e:eb:69:31:c2:
23:cc:62:65:49:21:ad:18:6f:95:2b:38:3b:d3:75:2c:35:30:
c6:9d:04:f9:23:06:7b:04:39:69:b2:f0:b0:82:bc:07:a9:26:
01:0f:02:9f:5b:69:d4:05:22:49:03:36:dc:28:89:4f:e0:59:
48:6c:cf:d1:0e:02:9a:6a:03:45:2f:bf:bf:9d:2c:12:f0:d8:
60:0a:34:02:e5:bc:45:4a:c4:c5:ad:17:0b:33:3d:00:f6:4e:
8c:c8:05:39:59:29:ec:79:a6:a4:c9:38:21:31:ab:b9:db:aa:
de:48:f4:c3:13:17:0d:af:25:38:34:05:1e:2c:3f:1e:fe:ff:
c1:16:ea:cf:49:c8:12:c0:65:c4:ac:ae:09:4c:58:93:4b:25:
7b:53:c6:dc:8e:4a:8b:6f:63:0d:d0:45:9a:e3:fd:ac:15:c8:
cd:e9:24:36:56:0f:a5:f8:ff:9a:4e:b1:d8:94:14:62:f8:57:
0e:a6:01:b0:56:59:88:fd:16:86:a0:fb:cc:52:80:2e:3f:bd:
bf:9c:9d:dc:b7:9d:56:99:91:be:0e:52:69:4f:d0:00:93:5f:
b2:36:26:74:80:ef:3c:ed:37:28:17:91:a7:06:65:c9:0b:0d:
d4:a3:58:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:15:23 2026 by rpki-client