Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: 3b3s8U6mnnrNZGP+9VS4fkArRrACkz9hOpidheRRQkE=
Subject key identifier: 32:9B:7F:DF:26:5D:08:28:54:84:FE:37:59:96:A2:F7:D6:21:0E:B2
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 019F8F7F3946F1D01FAB0825EF335F6CFB89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 1905
Signing time: Thu 23 Jul 2026 15:01:47 +0000
Manifest this update: Thu 23 Jul 2026 15:01:47 +0000
Manifest next update: Fri 24 Jul 2026 15:01:47 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: HA7Njhfg7C5Z+f/2fE/0N+zp81ltHVozE0HzSn1zEdo=)
2: xU2EDS3A1kqxHB5fmWawALQua5w.roa (hash: gy/kCjpuCiDHyb5854bh+q6WsJ4/S+45FLFM/o6soug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:39:46:f1:d0:1f:ab:08:25:ef:33:5f:6c:fb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Jul 23 15:01:47 2026 GMT
Not After : Jul 24 15:01:47 2026 GMT
Subject: CN=329b7fdf265d08285484fe375996a2f7d6210eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:a6:f6:5c:1b:51:2f:98:36:f9:2a:11:3d:
90:73:d4:0d:12:b3:c5:f1:e1:82:51:9e:25:37:8b:
b1:e2:28:8b:90:2e:cc:c0:e9:69:48:ce:3b:a4:5f:
7c:71:ce:f4:61:ff:09:f8:1b:3f:71:51:fb:83:54:
c3:5c:8f:39:d1:a4:fd:3d:6f:0b:67:55:c4:7d:73:
15:ab:ad:22:68:7e:53:f2:b2:49:64:88:45:75:9c:
d9:8c:85:70:af:8e:c2:74:6d:63:74:7e:69:89:cf:
83:87:eb:3e:e6:45:b3:8a:fe:6f:98:e9:f9:ea:83:
0c:22:f6:31:b9:e5:04:e3:76:3d:7f:09:db:ba:41:
f7:c8:ef:11:69:1b:94:95:dc:b1:11:ba:5a:68:01:
1f:7e:30:a6:1a:76:81:44:df:b8:cb:00:d3:ac:47:
84:31:8e:9e:a7:58:9a:cb:39:3b:ac:56:ed:8e:b8:
b3:4c:5f:31:6a:d8:b5:e2:d8:8b:8e:e4:98:8d:22:
fd:a4:3c:d7:ca:43:1c:e6:88:c0:2b:77:44:c1:08:
ce:19:70:c1:ea:a6:9a:a6:f2:92:f2:fe:bd:53:66:
09:e8:87:c6:08:11:9e:82:b5:c8:ca:1f:84:20:dd:
e1:65:4a:ec:6a:3a:47:69:f0:54:80:23:19:93:1e:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9B:7F:DF:26:5D:08:28:54:84:FE:37:59:96:A2:F7:D6:21:0E:B2
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:39:76:1d:48:ae:0a:33:c2:bd:5c:00:8a:5f:02:9a:b4:ec:
9a:03:87:4b:f1:bf:84:82:98:c0:71:f0:de:0a:62:d2:c6:64:
13:89:94:6a:d2:18:14:b8:4f:7f:08:22:36:f7:7c:c0:41:66:
c4:63:31:1f:29:8d:29:b2:d1:13:db:b6:a4:77:3e:8d:44:86:
9a:ff:73:df:3f:b5:70:3f:4c:f4:95:8a:b6:be:c9:fb:53:95:
34:01:55:91:e2:30:93:44:33:81:20:05:9f:3c:c3:22:63:e1:
02:46:4d:24:7c:32:0e:89:0f:18:21:72:15:29:fc:07:d3:d3:
02:ff:30:1f:94:fa:e9:ea:00:b9:12:50:e5:66:ed:6d:5c:5d:
8c:e3:f9:9b:d4:15:32:16:e2:23:2e:84:63:3f:28:17:fc:5f:
c2:ab:95:df:6d:bc:08:f5:bc:1e:c1:08:4f:58:94:3f:15:95:
5c:3d:04:cc:93:d0:ca:91:3c:65:cd:a5:cf:29:10:aa:dd:cb:
53:e4:4b:24:a9:37:dc:15:50:d2:2c:ac:ea:03:31:56:b2:e5:
2e:ea:9b:c6:f7:ef:89:e6:ec:31:1e:48:95:73:c7:4c:db:5e:
f0:be:0e:93:68:91:3f:cd:45:d4:fe:27:9c:ae:37:67:1c:f9:
0b:8b:95:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:39 2026 by rpki-client