Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: uy4Z6idjFEKAL273FxiEUL0lHVcuntWd0fEaSBPNV1g=
Subject key identifier: 64:3C:D1:9A:DD:38:91:58:EB:8F:3E:73:91:39:F6:3F:26:8E:E8:48
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 019F92EDD57C8FADC420D24B6DAEEF8C694E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 07:01:27 +0000
Manifest this update: Fri 24 Jul 2026 07:01:27 +0000
Manifest next update: Sat 25 Jul 2026 07:01:27 +0000
Files and hashes: 1: 9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa (hash: fz+aHYS4V1XMTw/yqh5CSzgcqzKaI+dTHoaVrbzBaVs=)
2: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: 9KjGMQvcVr0I1NbImZtMcoFEJMYDH0zKoG2EAdaYPCg=)
3: x2_izSBmWmdLTS9fNjX2mfjFlPM.roa (hash: 3ob8odmwEnrugyVikE+TbFdzGSmxmii1yJoYbGejTds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:d5:7c:8f:ad:c4:20:d2:4b:6d:ae:ef:8c:69:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Jul 24 07:01:27 2026 GMT
Not After : Jul 25 07:01:27 2026 GMT
Subject: CN=643cd19add389158eb8f3e739139f63f268ee848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:b8:dd:80:61:b3:10:b8:42:79:fb:6f:df:
de:0c:f3:0a:02:d4:a1:a0:05:99:f4:82:d9:12:df:
d8:0f:2d:bc:cd:e5:98:d4:a8:4f:79:f6:67:6e:ef:
87:05:f5:f3:75:1c:61:25:83:0a:64:57:ca:65:5b:
87:5b:4e:ae:6b:6b:b4:78:c2:31:4d:84:3b:eb:27:
b8:b1:02:d4:b1:d4:77:9c:52:4a:a7:de:bc:02:2c:
60:1a:31:20:1a:67:9f:71:f5:4e:ee:7b:5b:ec:7c:
a0:1b:cd:38:9c:48:0d:54:53:e9:d6:59:24:59:97:
cd:d3:04:60:c1:73:50:9c:d9:cc:00:a7:10:fc:5e:
d9:ca:92:02:45:d9:db:fc:60:60:5e:43:14:bf:98:
a0:98:ca:11:e0:45:6e:86:1c:d8:e1:c5:09:c7:b1:
bf:ef:c9:e5:e7:06:2c:50:fa:d2:78:0c:eb:ff:25:
e2:64:9a:83:02:c9:dc:ac:d0:e7:35:99:f8:52:47:
d4:8f:cb:06:bd:62:84:ea:45:3f:0f:a9:9a:5e:ee:
15:8b:2c:1f:1d:bd:4d:7a:df:89:c3:3c:3d:87:a9:
80:89:d5:87:18:c1:56:1e:02:67:a2:6a:db:87:4f:
0b:c8:ba:98:ca:57:1e:e6:51:58:5b:92:59:bc:bf:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3C:D1:9A:DD:38:91:58:EB:8F:3E:73:91:39:F6:3F:26:8E:E8:48
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ea:36:b8:e7:37:88:d8:c2:66:70:d9:9f:4e:8e:f4:63:65:
91:1b:3c:c4:89:fa:0c:65:a9:c8:0a:97:8b:f3:d7:1f:43:a1:
e6:68:de:96:8c:c7:9c:4f:38:4f:2c:f1:7c:06:c0:31:d6:6b:
de:6f:83:40:b5:78:2c:48:5b:07:26:fd:08:70:22:10:71:a8:
83:ff:5f:28:c0:fb:18:0c:a2:9b:47:96:2c:8d:a9:aa:06:75:
fe:1e:e4:81:e6:31:93:b9:ad:61:38:91:fa:cf:6c:ee:e2:ed:
25:4e:73:67:f1:a3:cd:e4:a1:0c:0b:8e:34:71:d9:cc:73:dd:
e1:6a:07:2f:41:10:13:c8:47:9a:2c:61:04:99:25:7b:b0:76:
6d:96:8a:a4:9f:cf:72:b8:b9:c4:a8:11:52:de:c4:f4:68:ce:
50:6e:9b:5c:c3:83:9c:d0:f0:72:43:d8:40:7f:ae:d4:f1:f2:
76:82:5a:fb:16:49:8c:da:cb:4c:e1:2a:f8:a4:52:81:5d:77:
0c:cd:85:df:d1:9b:1d:2f:6d:be:67:e1:69:cb:42:27:c3:ab:
6b:d9:2a:1d:65:70:10:97:6d:54:76:a2:88:96:e7:02:0b:a1:
8a:d5:f1:7b:13:de:3d:0f:d8:6e:05:2b:86:fe:0f:a2:44:69:
2e:9a:11:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:34:47 2026 by rpki-client