Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: tZr8j+Z7ed8s/6asHmaMEZvNsSCmTmAliIDrbxqYJs0=
Subject key identifier: 84:B7:95:FF:21:6E:63:AD:46:74:E7:5D:42:18:AF:64:34:86:87:07
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 019F90C7957375688CEC5C609BBD4BD2C6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 21:00:26 +0000
Manifest this update: Thu 23 Jul 2026 21:00:26 +0000
Manifest next update: Fri 24 Jul 2026 21:00:26 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: 25HNDqc+UfZ8/8PBS9GVrBMC/Dii6WW9+JChaSZpcUE=)
2: 9yUNTQu4D8dEJY0vZu2yaAiRefU.roa (hash: lrso5MYVylYk+QUiDaPruFaOoSE7UzGRAVXufFOfA74=)
3: jnbS6eM3y8l2eIAi24P02_6sYnE.roa (hash: oehLYvqq0N9O64TqK28Nu+Air9RUEnLzPzRmB5KAv7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:95:73:75:68:8c:ec:5c:60:9b:bd:4b:d2:c6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Jul 23 21:00:26 2026 GMT
Not After : Jul 24 21:00:26 2026 GMT
Subject: CN=84b795ff216e63ad4674e75d4218af6434868707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:94:f1:3b:a0:e5:0f:79:47:e6:f3:dd:4a:
64:ff:5c:4c:c2:2a:f2:14:f4:bd:c9:e8:cd:fd:02:
ec:97:37:5a:93:eb:19:9a:d3:0f:7d:63:a6:e1:f2:
7d:6f:7b:bc:f0:c5:b4:c9:aa:08:fa:a5:1e:c8:3e:
e1:cf:99:04:06:99:08:e5:59:85:65:4b:5b:c2:fd:
8d:af:f9:2b:b6:68:eb:82:a9:73:61:fa:1c:30:e7:
fa:89:1a:7c:f3:d6:89:82:5c:7c:5c:a0:7c:06:47:
c7:8d:5a:b9:4b:12:c5:3e:12:76:29:18:08:e5:ac:
4e:c2:df:9d:7d:e0:87:9b:49:0a:59:2a:3d:70:25:
25:ce:7e:57:97:97:33:62:01:42:70:6a:90:1e:86:
5f:3f:c4:dd:b0:53:ee:9c:6e:e0:6e:a7:a4:36:df:
19:e3:93:d4:4c:00:d4:0f:a3:46:03:51:44:b3:96:
1b:28:6d:ac:fb:ef:25:95:87:6d:4b:81:8d:63:b0:
32:a9:37:31:8f:45:90:f6:ff:74:e9:9f:9e:e4:52:
ee:af:42:44:8a:17:c0:2a:60:0c:2c:18:9e:c6:d0:
70:3b:ab:5d:6b:bc:42:27:9f:82:13:fa:29:11:8c:
a7:74:d0:b8:39:6f:83:7c:79:08:07:6c:2b:b3:db:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B7:95:FF:21:6E:63:AD:46:74:E7:5D:42:18:AF:64:34:86:87:07
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:49:dd:3f:eb:6d:8a:d4:82:66:d9:3e:bd:16:31:c9:6b:c7:
95:a1:89:4d:c8:ea:74:2b:7a:02:5a:09:83:78:31:da:6b:27:
9a:b9:15:8c:2c:e6:52:ae:c3:35:76:c4:1a:c9:82:c2:43:7f:
92:02:95:22:9e:e5:40:62:eb:77:dc:4a:0b:f9:8b:fd:9a:e0:
19:37:b6:81:13:aa:82:20:e3:dd:2e:6c:33:64:e1:c1:7f:7a:
42:7a:fa:88:9a:d5:ac:5b:90:b2:9d:08:3b:a3:b3:8c:6e:1e:
1e:ea:17:7c:43:27:c7:a3:16:8d:2e:69:9a:c4:f7:ff:f6:a5:
2b:93:27:b5:41:84:38:2d:4a:b5:85:8b:ec:91:99:dd:06:c3:
52:c3:5a:17:6b:f8:36:86:75:29:0b:66:25:f3:e8:c9:84:97:
05:6a:bb:65:ad:fe:66:5d:72:23:1c:55:9b:59:37:2d:41:d4:
87:f9:9f:fa:00:e1:b6:5b:f5:5d:50:6b:d4:76:9f:79:ef:15:
aa:41:33:32:2b:ac:10:0e:e9:29:f1:70:6f:71:09:15:dc:86:
ed:c1:b8:e4:60:02:e5:75:94:27:ae:18:ec:43:0d:23:42:a8:
4d:33:07:4c:0a:47:cd:0a:3e:dd:11:d0:8b:fc:df:be:b4:76:
fd:d7:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:46 2026 by rpki-client