Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: jkKH0U7hCtJp3NhJ7A1pou32Eq4lDi9g8G9HU18h6rQ=
Subject key identifier: C0:45:CB:E3:2B:96:A3:DF:91:1D:74:93:F2:A6:69:09:C6:3E:9F:79
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 019F8F473F70ECB239074909F223ED9F7F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 14:00:38 +0000
Manifest this update: Thu 23 Jul 2026 14:00:38 +0000
Manifest next update: Fri 24 Jul 2026 14:00:38 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: 2U68w6tdiWZV9o8lKCuptQ8zGnD3UiGAd+MGpU4APoI=)
2: 9unExc-u2klcvykG9A7nqtJ0jEo.roa (hash: fK53zNSLF8dtN9JmssE7wAYgASom2B/ybWqpgUFg/kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:3f:70:ec:b2:39:07:49:09:f2:23:ed:9f:7f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Jul 23 14:00:38 2026 GMT
Not After : Jul 24 14:00:38 2026 GMT
Subject: CN=c045cbe32b96a3df911d7493f2a66909c63e9f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:94:2f:a5:e1:6a:6a:07:91:1c:1c:8d:15:
89:2d:a7:11:ed:97:b5:bb:04:e6:57:a0:e2:d3:fd:
9e:8b:19:92:5e:c5:71:fb:b4:a5:f3:90:3d:d2:dc:
68:d2:1d:d3:22:bc:fb:d4:47:ed:df:11:b9:18:51:
ec:f7:2d:ef:c1:88:dc:34:d9:58:2e:ca:a5:fe:1d:
9d:82:c0:07:5f:26:4f:6c:20:5c:49:01:f5:97:f5:
51:cf:eb:42:b2:ca:c9:83:dc:7e:97:ff:45:8c:76:
f7:44:e1:b7:49:6a:60:f3:c5:42:e8:9e:b7:8a:c2:
b8:0d:12:34:13:e8:a0:6e:a9:e0:36:8f:b9:95:a3:
34:3a:88:33:0a:29:36:9a:59:fa:af:95:ab:0e:04:
81:c5:f8:7f:a2:ca:82:75:b5:c2:3a:15:b2:19:a3:
84:0f:ac:08:b4:9c:57:ca:d5:a2:80:da:cc:ec:93:
25:e4:19:10:3c:7e:b4:51:f9:0f:71:61:1a:67:fa:
6e:0e:cf:6d:4f:7b:2b:8f:f5:fd:f0:88:04:b4:a4:
88:93:8c:c1:f7:01:56:47:2d:f8:ab:0e:f6:75:23:
17:d7:37:67:d8:04:84:67:29:d8:3c:bf:23:e8:17:
ae:5a:b3:8d:69:ac:a8:31:85:99:cb:30:59:67:ad:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:45:CB:E3:2B:96:A3:DF:91:1D:74:93:F2:A6:69:09:C6:3E:9F:79
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:14:ed:51:a3:5d:88:7d:04:8e:2c:f8:a2:09:6b:f1:85:e1:
e0:08:c8:7b:73:43:88:be:8e:9f:14:14:d0:e0:10:f8:ec:b5:
6f:29:d7:fe:c4:25:ba:a5:c7:13:4f:c4:c8:4f:98:c9:13:4d:
21:84:a4:8f:70:6c:11:e5:b6:9c:9d:20:92:92:eb:1b:75:6d:
b7:5e:67:12:91:d3:be:75:44:33:a6:af:39:e5:ae:6a:74:f4:
64:57:a4:92:72:7e:bc:f7:29:5b:ae:50:b1:53:a5:b4:99:23:
1f:79:19:04:d9:99:ab:e8:9e:20:11:cb:b0:8f:35:5d:76:31:
51:b4:73:e7:9c:d8:e9:fd:c3:60:79:7b:cc:f1:e6:f0:39:50:
ff:85:91:b7:d2:db:60:7f:ce:7a:a4:82:30:0d:5d:d9:2d:d4:
5b:b0:48:2a:ae:53:9c:14:5d:22:a6:29:12:a2:9e:b8:3b:6e:
36:be:df:05:2c:f3:68:28:d3:12:1c:fd:ef:06:83:3d:03:f7:
94:7a:71:a7:aa:6d:40:c2:1d:59:90:b7:69:6f:d6:97:7d:08:
b8:0f:f2:4a:4b:54:1e:4c:3c:94:53:95:5b:20:21:ff:01:70:
11:9e:bc:5e:2e:b9:fb:a4:e1:83:38:db:ce:df:f9:31:a6:92:
9c:96:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:03 2026 by rpki-client