Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: 5pv5xe4u1enk7OWAQ3Pab1ljc2170k+2V07Dkq/X1rc=
Subject key identifier: A7:A7:3F:17:17:53:FE:A3:11:DC:E0:5E:E3:5B:9A:0F:18:B2:88:AE
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 019F8FB56409ABF13838CFB08F4658BDDE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 16:00:57 +0000
Manifest this update: Thu 23 Jul 2026 16:00:57 +0000
Manifest next update: Fri 24 Jul 2026 16:00:57 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: uLVfQX5Ovo3mbUhLou2YZpH0Rc/7MhMzOesdtYWQStI=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:64:09:ab:f1:38:38:cf:b0:8f:46:58:bd:de:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Jul 23 16:00:57 2026 GMT
Not After : Jul 24 16:00:57 2026 GMT
Subject: CN=a7a73f171753fea311dce05ee35b9a0f18b288ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:4c:92:ce:16:09:7f:80:65:30:6c:d6:7a:
63:24:ab:74:20:c7:d0:0c:ad:d5:16:fc:1b:ab:20:
1c:5f:cd:90:43:97:50:e0:5f:0d:cc:a2:4a:d2:56:
26:34:d9:dc:c0:da:b3:99:46:20:3c:c8:35:56:54:
63:a4:e7:e1:c9:2f:9c:63:92:e3:ec:1f:f1:0f:08:
e8:29:29:a0:4b:97:24:94:67:01:cc:9c:1e:59:c9:
90:fa:c5:8e:c7:c7:29:c0:fa:9e:91:f2:aa:bd:38:
5f:1b:1b:e0:43:59:d6:36:59:a7:96:19:9e:9a:7e:
10:94:c5:db:78:70:98:06:02:a8:50:5a:32:79:0f:
21:af:24:5c:34:c7:a0:14:b5:8f:a0:fa:1f:32:b7:
95:33:f9:3e:67:f3:d3:45:e4:83:07:00:eb:0d:c4:
4c:2a:02:56:8b:25:c9:4b:31:cf:af:03:2a:14:12:
13:b0:8f:26:1d:e9:7f:1c:91:20:80:7d:0d:c1:b8:
46:e0:47:ea:d1:9a:db:94:b4:90:eb:df:09:c1:97:
07:f4:1e:2e:f8:8f:5f:42:77:d8:1a:c5:2c:24:a8:
f7:ca:c6:ce:84:cd:76:63:d0:3d:0f:0f:80:48:78:
b7:19:eb:25:21:03:34:6f:c6:13:ae:21:44:1e:ed:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A7:3F:17:17:53:FE:A3:11:DC:E0:5E:E3:5B:9A:0F:18:B2:88:AE
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:75:17:84:ca:f6:0b:4c:0b:4c:e3:75:a1:d7:0e:4b:88:18:
7e:52:6f:23:c7:e7:e3:1f:e6:d1:8b:e3:61:c6:17:54:52:44:
1b:84:83:5a:cb:e7:db:9e:4c:70:8e:d4:f9:71:09:a7:b9:22:
8c:94:1d:f0:3c:fa:a5:d7:d6:50:a4:f7:76:a6:fd:b1:2e:84:
bd:fa:39:80:79:f3:8b:ea:18:22:3c:64:65:24:c3:48:91:94:
8f:fc:0a:8e:68:58:a6:7b:b1:c5:2f:17:29:28:bd:f0:21:88:
c3:cd:5f:b0:eb:fb:3d:97:24:f8:6c:8e:31:42:9a:76:be:58:
f5:3e:ce:19:4d:0a:3a:63:0f:ec:40:6c:6d:54:40:62:fc:30:
e9:9f:25:ae:6c:ab:d6:d6:cd:4c:bb:36:2f:54:3a:14:b2:d7:
7d:53:dc:47:46:b2:85:d5:8f:0c:6c:48:10:88:7c:a6:7c:b5:
80:d1:66:4b:09:3a:37:56:03:79:64:ec:c9:99:39:93:d4:b8:
8d:ce:c5:8d:ec:55:43:26:b0:47:56:bc:53:6e:b3:b7:3c:c4:
1f:94:e7:e0:ce:aa:f2:26:9d:84:b0:e3:f7:eb:84:14:56:5e:
00:8a:72:ae:0e:84:05:38:ae:4e:0b:e1:34:cd:11:e2:9c:e5:
e1:03:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:08 2026 by rpki-client