Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
File: 3hL5ZansM-LC6HthYb7vuL4obKM.mft (raw, json)
Hash identifier: lWNEWvcNK4WPqHOCjYSnMdxqrgQsXX0XnX/VH2UOleI=
Subject key identifier: A5:65:D7:60:3D:56:32:BC:7B:55:3D:C7:5E:EF:9A:D8:71:C3:5D:0C
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 019F90C7B54F2FDC14EB704AA48CA876802E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
Manifest number: 17EA
Signing time: Thu 23 Jul 2026 21:00:34 +0000
Manifest this update: Thu 23 Jul 2026 21:00:34 +0000
Manifest next update: Fri 24 Jul 2026 21:00:34 +0000
Files and hashes: 1: 3hL5ZansM-LC6HthYb7vuL4obKM.crl (hash: sz+ZOuEhi2WA3ROKmGyGJg1Czlc01KW7nTSGLUpAlGM=)
2: dQKWrb4274MA9TnUoPK0iLguRN8.roa (hash: iabYGi8dw6jC4+Zg8izYgwpn552JIuXwr1GRxu62hag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b5:4f:2f:dc:14:eb:70:4a:a4:8c:a8:76:80:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: Jul 23 21:00:34 2026 GMT
Not After : Jul 24 21:00:34 2026 GMT
Subject: CN=a565d7603d5632bc7b553dc75eef9ad871c35d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:fb:7b:ef:30:51:7f:58:ff:1d:38:7b:23:
8f:eb:0b:ef:fe:68:65:8b:c3:08:b5:3e:e3:d9:cb:
df:63:7f:9a:a8:28:ea:92:c6:10:35:6e:1f:be:15:
28:ed:d6:e9:c7:63:15:c9:b3:a8:b8:d6:21:fa:ce:
b5:75:b9:96:47:e2:5b:99:92:be:68:62:78:cf:eb:
55:97:57:c4:c3:00:e5:7b:f7:59:1a:2a:9f:89:67:
c0:76:f2:99:66:58:ea:bd:fc:79:03:19:60:ca:35:
a3:a3:08:d9:b4:db:31:7c:e6:0f:44:e8:f7:ce:a3:
6c:a8:65:de:48:bb:be:bf:df:f2:5f:45:cf:b8:74:
4e:23:5e:23:ea:22:4c:25:be:d6:06:0e:20:96:ac:
1b:21:68:1a:7a:e7:b8:3e:86:2a:2f:a4:b4:56:e0:
04:2f:db:e5:05:40:54:69:d7:01:32:1c:bb:fd:88:
b8:21:0d:ad:e3:66:23:3f:ea:10:60:35:3e:81:3b:
a5:ee:fa:27:5f:cf:c7:c6:8e:f9:d9:29:c2:ad:79:
45:2c:9f:a2:82:40:00:78:91:0c:77:99:d3:e8:c9:
96:ec:4a:69:c1:a9:a4:63:2b:9b:12:19:cf:9a:7e:
c4:34:1c:d7:5b:a4:94:83:b7:4c:a8:20:97:02:b1:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:65:D7:60:3D:56:32:BC:7B:55:3D:C7:5E:EF:9A:D8:71:C3:5D:0C
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:04:95:e4:05:f6:8f:f4:e0:2a:4a:5d:1d:eb:57:f1:24:e0:
a4:26:df:6e:a4:f6:5e:bc:ad:03:66:c5:f9:a5:bb:88:f6:ef:
71:50:94:d3:59:cf:a6:6d:12:03:91:27:8f:bb:e4:a3:6d:5c:
82:02:19:cc:f3:84:5e:24:5c:7f:69:63:ef:d8:5b:7f:0d:3a:
20:24:bc:1d:7c:a5:70:2b:ba:e0:1a:1d:e3:53:88:cd:0f:24:
e3:f5:b5:17:27:ab:5d:a6:0a:4d:cd:76:9e:80:bc:4a:8d:1d:
56:b3:2b:e7:de:f9:0c:d0:be:5b:cd:19:c6:b6:8d:cf:1f:88:
6d:31:ad:43:0a:a3:92:83:7e:b7:1b:df:d5:3b:69:71:5e:2d:
50:14:e8:5d:06:ce:20:8a:dc:e7:14:13:c7:28:cc:84:2d:74:
66:29:a8:fb:61:36:66:6c:c4:c6:47:9b:5d:f1:9b:c5:1d:fb:
fa:b0:45:56:26:68:c8:36:75:ba:42:9a:96:87:44:5b:c0:5d:
16:da:a9:35:5e:8b:12:31:8e:6e:33:dc:45:6e:69:30:35:93:
3e:fb:3a:9f:db:1e:c0:ed:2d:13:72:e9:77:d1:82:b5:e7:99:
ae:ed:1f:70:ae:83:bd:39:ff:83:38:57:49:d1:03:ca:d5:4d:
cd:d2:e5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:14 2026 by rpki-client