Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: EAp64lpoDN9ZXO7G3H8XoP6ObR/OXkYgV7K+yz9FWao=
Subject key identifier: DC:3B:DE:3B:53:0E:AB:59:EE:48:35:90:3C:C6:2D:D5:34:12:2F:00
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 019F905A32CDB4376FE01D9D2D40D0630E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 19:00:58 +0000
Manifest this update: Thu 23 Jul 2026 19:00:58 +0000
Manifest next update: Fri 24 Jul 2026 19:00:58 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: 4ZPgr7jq4RkNiz3fS8mXMkQ2TbeTyzLYukhYXOeSzzM=)
2: 6rPz8igkyZRlNFZsutLMqabI34I.roa (hash: Z2BW3rAqZoeVlHqBJzAMivNjITmnHOwFnbfJtV0fFqY=)
3: iC10497tJji-WYhWTVtTKPnCEBA.roa (hash: 6xbmmivHgxTXa78A2SNCDzZGkpnLAKBTJU2rllnxUng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:32:cd:b4:37:6f:e0:1d:9d:2d:40:d0:63:0e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Jul 23 19:00:58 2026 GMT
Not After : Jul 24 19:00:58 2026 GMT
Subject: CN=dc3bde3b530eab59ee4835903cc62dd534122f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:c2:65:6f:1c:c5:45:48:fb:bb:30:88:51:
22:a4:8b:ea:a6:45:bc:d9:11:30:9f:49:c2:93:ad:
40:43:56:b2:e1:76:09:36:63:93:0b:dd:e2:26:26:
a0:cd:e9:fc:c2:bf:bf:ed:95:6e:98:fe:0a:f4:d8:
2a:ae:1a:58:34:ea:50:61:80:a3:6e:0f:c4:df:a7:
da:e1:00:c4:9a:79:5f:0c:01:4d:a6:05:77:06:d2:
11:ed:aa:90:97:22:00:33:5f:6e:72:42:5f:e1:00:
c2:c0:2a:12:06:6e:85:c2:6c:54:7b:7e:b9:e9:59:
3f:c7:c1:6a:0b:55:f7:33:9b:e3:6a:4e:36:2a:50:
e8:48:44:48:cc:9b:da:0b:de:23:93:35:07:de:17:
9b:1c:75:c3:95:5d:78:63:50:cc:d1:21:16:c9:f6:
e0:42:b3:03:85:40:95:4e:6c:d0:fc:d8:22:7a:1a:
d5:85:7e:b9:e4:d1:51:a2:c5:7c:57:33:bf:b9:81:
e4:0a:d7:39:66:d2:89:16:3f:b0:6c:20:47:92:64:
1a:ee:3c:79:a9:f7:5b:e2:3b:64:4b:15:d8:b8:78:
89:de:ea:28:c4:79:ad:c7:2a:97:20:0c:4f:fa:93:
c1:f9:41:c1:2a:bc:1a:97:30:7d:15:93:27:f3:07:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3B:DE:3B:53:0E:AB:59:EE:48:35:90:3C:C6:2D:D5:34:12:2F:00
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5d:79:1e:e8:14:9c:45:9c:69:f6:19:bf:3d:17:bc:f2:cd:
4e:66:df:0d:69:4f:96:4a:4e:e4:65:06:1f:ee:fc:7a:b8:a8:
ae:1a:9a:ad:ae:13:ce:2b:5c:b9:5e:7f:09:7b:8b:77:47:c4:
17:ff:77:f7:db:d9:27:d0:22:ac:a2:02:79:10:f2:79:f0:a8:
1f:cd:2e:de:30:31:a3:6d:89:16:7b:61:1c:9f:c1:0e:6a:16:
e9:97:97:4c:16:0d:cd:e6:b3:5c:71:ae:21:16:95:ac:18:a6:
52:55:e3:98:90:1a:c1:97:9f:89:e4:30:b3:72:53:94:92:fb:
74:f4:77:77:00:6a:f9:79:6c:fd:2c:92:61:85:63:a3:6c:78:
2c:3b:a3:73:d0:b1:ad:e0:b2:ea:89:0e:54:7f:06:0c:55:f6:
11:8b:1c:73:97:fd:fe:b5:b3:d3:f9:a6:ed:86:02:16:a3:a5:
d9:93:59:2a:16:d1:2a:21:b4:98:4a:b2:f9:5e:fa:e4:35:f2:
32:f0:be:93:0f:d0:ae:b7:13:85:bd:c9:ff:77:b9:a5:47:66:
01:88:b6:92:50:c9:84:5e:31:6b:dc:0c:70:ae:70:98:b3:ce:
26:ff:54:6b:a9:6a:95:30:61:7a:99:10:13:40:11:cc:9c:9a:
bb:30:6b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:06 2026 by rpki-client