Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: aZE+2wBoaEePU0UHno/7WtsXqVN03GGKooaMvrYE5ag=
Subject key identifier: 0B:46:E5:C9:83:34:0E:5D:86:5A:BE:F7:53:DF:BC:83:6A:B1:91:53
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 019F9090BF05C2BDC20C0D4B2930501105AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 20:00:32 +0000
Manifest this update: Thu 23 Jul 2026 20:00:32 +0000
Manifest next update: Fri 24 Jul 2026 20:00:32 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: ix7bM1OL4LDn6TMKYdBCRAOp2Tp+s4+7zbRSCBBZVZo=)
2: 4Qc85N4EwfShTiGhUnkvPvcjOEs.roa (hash: 5gcG+cc/9htcQzQfIk5Lbs8J3j2mNNeVz49M8qI81nA=)
3: dHkvv2AfkDDcX-uBDSlHxgyE9BM.roa (hash: MkJGi0URj4efKyUrfGEHvlM7u0U0Wn9mOiKm3NgF9Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:bf:05:c2:bd:c2:0c:0d:4b:29:30:50:11:05:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Jul 23 20:00:32 2026 GMT
Not After : Jul 24 20:00:32 2026 GMT
Subject: CN=0b46e5c983340e5d865abef753dfbc836ab19153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:a5:37:43:03:94:c0:74:90:62:6a:52:61:
24:3e:84:49:7b:94:70:68:60:28:55:48:21:08:91:
7a:6d:af:22:99:6a:58:cd:7d:1f:fd:74:69:12:7c:
c7:81:6d:aa:f0:96:fd:1d:26:ac:44:7c:b3:4f:9a:
7f:46:14:20:42:db:3a:5c:ec:49:a6:04:a1:ea:34:
0b:51:39:cc:b6:fc:70:c8:c5:90:86:06:d1:67:89:
c0:59:b3:55:9c:d3:c4:6d:17:ff:cd:1e:b2:9c:ec:
18:43:46:87:49:56:f3:98:28:af:5d:f3:9b:24:b2:
e7:de:b2:04:9c:9d:81:a9:12:ca:2a:db:9a:d8:54:
d9:d1:7d:f9:d5:30:5a:67:4c:4d:44:6a:12:01:5f:
bc:ba:f7:72:c9:a4:b9:84:a7:4a:c8:30:86:ec:b8:
13:d4:de:59:a7:bd:94:43:f8:6d:78:ac:70:da:7d:
1c:a2:e0:d3:9e:b4:33:49:23:7b:fd:fd:0f:a3:c1:
cc:d5:b1:61:95:bf:28:ea:d9:b2:bf:b5:1a:1f:b7:
eb:0a:9f:d9:ab:ae:e4:86:ce:ea:a3:9f:8b:73:05:
a7:47:fe:6b:0f:4f:50:a7:f9:0a:43:72:dd:85:97:
0d:7f:da:ed:fe:c5:7d:60:f1:98:a7:10:a6:5e:e0:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:46:E5:C9:83:34:0E:5D:86:5A:BE:F7:53:DF:BC:83:6A:B1:91:53
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a9:51:81:e4:bb:9e:00:c2:90:7f:f9:5d:44:9f:51:5c:b9:
18:ff:18:95:a0:fd:30:1a:27:35:34:99:e7:d3:4d:7e:73:d6:
eb:b0:f9:36:7a:da:42:76:b5:5e:ee:7d:6a:61:8f:cf:b0:69:
e3:72:ed:a3:e3:29:af:42:19:c1:fb:ef:84:11:5a:3d:89:05:
69:82:6f:81:76:91:94:e6:62:38:af:d1:f5:f3:f8:da:bb:c5:
2f:b7:1e:7b:bb:3b:9e:3c:a0:f2:a3:80:fc:77:9c:fd:68:5c:
b4:a0:6c:7e:73:fe:b4:1e:e7:0a:39:b7:0c:f4:39:3e:5f:ea:
d3:a7:31:cc:94:4a:e2:0f:26:56:44:16:68:48:52:02:e6:5d:
70:81:5e:12:bc:b3:9a:8c:7a:ee:20:d5:38:44:b5:69:cc:9f:
88:81:51:ad:15:e6:90:99:74:90:f9:67:16:63:b7:a9:ef:91:
01:79:42:14:40:41:3f:33:b8:a1:68:83:7c:b7:c2:53:a2:62:
2e:d3:df:a7:14:45:18:04:cd:25:78:ff:3d:28:d1:e2:10:a9:
33:4d:84:43:7c:79:01:27:ae:da:3f:d4:6a:6e:7c:42:90:19:
41:46:11:8d:c3:2e:67:d9:bd:ad:ba:ff:32:6f:07:e6:3c:2f:
e6:98:71:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:12 2026 by rpki-client