Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: aHK+bA4rSQAhnskMasQdboXCDUZWwTpk25DemiO//gU=
Subject key identifier: 22:E4:EE:A3:6E:EC:8E:2A:4E:B6:E5:7E:39:A0:C6:9D:CC:71:FF:64
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 019F92B5EC94FA7DF1F93B274AFFA79CE841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 06:00:23 +0000
Manifest this update: Fri 24 Jul 2026 06:00:23 +0000
Manifest next update: Sat 25 Jul 2026 06:00:23 +0000
Files and hashes: 1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: pc9f3DB4AVh827gnv3/W3clAAMJIWsFJN5NggICL4rE=)
2: q2os6H-xLvk9UkRKuFy2kFXrSyk.roa (hash: PRxebSo24ZxSHOEyZVv7K175GUR0r91e11qM7IDM3bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:ec:94:fa:7d:f1:f9:3b:27:4a:ff:a7:9c:e8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Jul 24 06:00:23 2026 GMT
Not After : Jul 25 06:00:23 2026 GMT
Subject: CN=22e4eea36eec8e2a4eb6e57e39a0c69dcc71ff64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:97:a4:7f:29:de:88:e5:14:34:3c:a6:a3:
7c:24:be:33:d4:7e:cf:79:7b:15:a4:95:28:88:d2:
94:2b:f7:93:39:3c:45:19:55:1a:99:fa:5a:56:63:
42:fd:08:d1:6c:1b:7a:73:bd:e3:86:fe:95:57:2c:
42:f7:8f:fb:9b:a0:44:4c:88:a1:df:eb:fb:ef:05:
3b:40:f3:6d:09:e3:af:b4:ea:5c:d3:5c:34:0c:c4:
35:a4:a7:67:7f:d6:6e:79:62:a1:b7:d4:a1:bd:52:
51:0e:22:4a:ae:6e:a9:89:03:dd:69:80:ad:55:db:
e3:42:79:0f:78:e6:9a:17:7a:ed:ad:b7:93:e2:c1:
97:ba:ad:b4:f8:7a:13:d8:b0:7f:91:0e:11:a0:bb:
9a:50:92:8b:a3:48:bc:87:87:35:e1:2f:9e:e7:f1:
7c:37:f2:e1:64:b6:ee:d3:80:48:b0:07:12:8c:1b:
a7:b5:12:f6:2a:76:b1:56:66:f0:0b:4d:7a:06:db:
89:bb:24:f1:45:b6:27:0a:7a:0a:07:72:6c:3e:72:
a3:28:84:89:65:e8:82:f7:0d:98:a9:0c:4b:3e:cd:
7f:c6:f5:48:db:91:36:7e:60:73:ee:f7:99:c8:c6:
d5:a3:6f:5a:1f:ce:20:58:58:e6:d9:f4:57:95:9a:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E4:EE:A3:6E:EC:8E:2A:4E:B6:E5:7E:39:A0:C6:9D:CC:71:FF:64
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c7:1a:5f:c7:43:3b:92:79:d1:13:07:83:62:63:39:97:31:
12:86:22:5d:f3:07:4a:8b:ee:d1:c1:ac:d8:a5:ac:44:94:26:
79:f8:4b:ba:66:3e:c5:e7:97:ae:8c:8d:85:60:ec:30:f4:a4:
27:3e:32:68:d0:39:80:4c:c9:1d:58:87:93:f0:9d:ae:28:99:
bf:7d:73:2b:b5:4d:06:cd:ba:1a:9a:ed:85:74:18:8b:3c:bb:
e5:83:8b:35:42:6e:4f:f5:1d:61:0f:9b:53:4c:e9:e7:27:a6:
9f:7e:be:7a:84:4b:95:3a:61:49:8a:2e:fa:c8:f2:15:db:fb:
b0:d1:d0:7e:a3:82:35:1f:0f:3c:c4:20:a9:6f:4d:4f:20:26:
12:d5:46:ac:56:33:d1:b9:af:1f:7a:f5:bd:69:a0:fd:29:80:
29:9a:e0:77:a2:20:cb:a6:3a:a1:e1:db:1c:85:ed:2c:76:bb:
17:a1:4a:38:d8:f7:0d:9c:29:3d:ca:de:dd:37:a9:3a:05:9f:
22:01:a1:be:33:7e:f4:52:43:7f:c6:24:cf:97:e4:e5:02:3e:
25:e9:54:4d:ce:f9:82:25:69:f8:5b:3e:8d:8a:03:3d:da:20:
ab:8e:98:21:21:d5:e5:8e:10:7c:d5:e3:0a:35:aa:35:f0:93:
a8:e3:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:02 2026 by rpki-client