Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: PTWnx4HIL5Znsn3NnV/8NE43MEQrdnhFm4D8M9ShIHI=
Subject key identifier: 8C:4D:80:FB:B9:BB:8B:70:78:F1:25:77:B0:3F:79:AC:1B:F2:A8:34
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 019F9211A4ECA4491B78EE9A11BC8F1545F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 03:00:57 +0000
Manifest this update: Fri 24 Jul 2026 03:00:57 +0000
Manifest next update: Sat 25 Jul 2026 03:00:57 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: O3r31YUWstanX/RRJbcNkdsy3ihSUwmQwDcqlSV9yAU=)
2: KNINNJg3cCwRIkadz_iFDjzCAZo.roa (hash: uyBgZTWuxKjfgaFUXeyVL4F1AHNOmaLe474fWdCTqys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:a4:ec:a4:49:1b:78:ee:9a:11:bc:8f:15:45:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Jul 24 03:00:57 2026 GMT
Not After : Jul 25 03:00:57 2026 GMT
Subject: CN=8c4d80fbb9bb8b7078f12577b03f79ac1bf2a834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:f3:47:d3:0c:1c:3e:1c:af:15:5d:0c:af:
92:45:9a:46:52:04:f9:61:4f:ee:90:c6:94:3f:a0:
91:11:2e:7e:bf:5d:21:a2:6a:b4:2d:b2:cf:34:9f:
57:6f:f6:d2:b9:4c:4a:1c:09:6e:04:68:4b:01:10:
e1:45:d1:ad:8a:9f:fe:66:06:b3:f7:67:47:f1:31:
5a:5d:c8:bd:ed:c9:04:9a:23:65:56:e2:74:a0:04:
59:a4:2a:6a:9e:7f:2e:6c:77:c7:ca:da:c4:78:bf:
34:34:ba:cf:c1:0c:07:c8:49:75:dc:de:17:b5:11:
84:73:7d:a3:38:57:96:60:da:c0:9f:0e:8e:88:ec:
30:72:79:f9:2e:97:4d:3d:78:26:fd:16:01:95:61:
fd:fc:00:6b:c3:d6:11:92:ba:99:f3:11:79:47:f0:
64:f5:b8:7d:68:b3:84:04:ad:71:4a:c3:74:b2:91:
84:bc:82:41:5a:3f:7f:fc:36:6c:a4:6c:52:5b:e6:
76:76:f1:c3:44:1b:03:b1:35:0a:f8:8f:ef:81:28:
52:87:80:bf:a5:3e:37:cf:d6:06:a0:54:15:f9:e6:
52:a3:6d:f9:ba:08:12:99:1e:89:2f:6e:79:c1:c6:
97:20:23:c8:e1:1f:90:b0:d0:d3:8c:8d:de:71:c7:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4D:80:FB:B9:BB:8B:70:78:F1:25:77:B0:3F:79:AC:1B:F2:A8:34
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2c:f9:7b:72:21:b3:2e:69:67:90:2c:0c:68:ec:d1:a8:51:
c7:1e:8f:b1:bc:f3:86:1a:c0:d0:99:21:35:f9:75:65:7a:55:
d9:3c:38:6f:35:83:b2:01:f1:9e:59:1c:b2:5a:5d:04:85:b0:
95:e2:9a:7d:d3:a2:8f:d3:7e:29:a2:20:8c:96:25:44:7d:d6:
2b:7c:82:3d:9a:ef:be:b1:f9:af:5d:ec:7b:25:76:cb:83:c8:
31:b2:28:10:31:81:f0:3a:c6:df:ff:83:ae:cc:01:04:2d:86:
56:23:29:eb:d6:e8:e3:14:0f:7c:13:00:03:c5:e1:71:72:dd:
08:00:e6:f9:68:71:13:4e:25:50:a9:e2:bd:7c:20:43:4c:a2:
27:cf:3d:24:29:ef:8d:1b:e9:23:76:13:29:67:18:b7:ed:f6:
37:e8:c8:73:58:e1:9b:f6:ba:28:af:83:4b:14:19:c4:8c:25:
1c:4f:08:22:60:a0:77:51:c7:8a:69:ba:54:10:6b:26:26:1c:
6f:58:a9:1b:d8:68:35:14:f1:92:da:8b:4c:a7:bf:17:97:8a:
46:2a:b0:6d:15:00:c7:fd:44:24:af:92:f1:e5:6f:72:d9:5f:
92:c1:18:b3:e4:88:b3:0b:80:e9:b1:e3:ed:42:fb:72:f5:d9:
5a:9e:2b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:23:10 2026 by rpki-client