Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: Xr3tgiTjsN9ASuF17SiYnS3dJsQDWEHjcqF4J8F+120=
Subject key identifier: 6C:DA:09:47:17:6D:9D:28:A2:5F:95:00:76:99:01:88:AD:9A:DE:B8
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 019F90598C9A024107D19A2904CF3AB4A0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 19:00:15 +0000
Manifest this update: Thu 23 Jul 2026 19:00:15 +0000
Manifest next update: Fri 24 Jul 2026 19:00:15 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: pflun3pWG0j46Q/fFIGvjLjMs1NdvMzC8bHdo6gTg/c=)
2: 6jm1c5ao4TIq41DDCm24Gn-cCvM.roa (hash: DHj5HqftZAg5kJDUChpZMa9puMwdu/NpQqmWhiH73fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:8c:9a:02:41:07:d1:9a:29:04:cf:3a:b4:a0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Jul 23 19:00:15 2026 GMT
Not After : Jul 24 19:00:15 2026 GMT
Subject: CN=6cda0947176d9d28a25f950076990188ad9adeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:cc:e5:8e:02:cf:85:c9:a9:68:da:63:11:
86:dc:7c:0a:89:52:8e:86:81:87:59:64:58:48:ba:
e9:65:56:f0:73:9b:ea:37:a2:45:fe:36:7d:1e:6e:
17:ea:cf:6f:30:c6:47:d3:fb:02:41:17:d8:d8:90:
0c:0d:74:73:dc:87:4a:62:da:29:25:6a:cb:2e:60:
d9:a0:b5:68:55:ca:fa:d1:bd:64:e9:03:3d:a4:92:
83:d7:d8:ba:8f:a9:e2:8f:54:db:f3:2f:bb:a2:76:
c9:0d:cd:2e:88:38:91:80:6d:3c:af:8d:0e:95:0f:
c1:d8:be:a6:a3:0e:c4:4b:67:a0:5d:00:62:54:b3:
df:5c:03:4d:8d:6b:5d:5c:f1:17:06:58:18:1b:6a:
93:58:31:a2:c7:11:0e:9e:27:14:0d:36:ae:e2:e1:
72:9c:64:20:70:16:d6:fc:2c:59:2a:72:fe:41:e2:
ba:b9:19:3b:28:8e:84:c0:4f:00:67:05:7a:2a:91:
ec:54:02:d1:96:2d:00:51:0f:4b:43:97:7b:94:f7:
de:71:7a:e9:7d:cb:c9:46:cc:77:44:3e:f3:12:8b:
0b:08:69:18:23:3f:26:a0:56:f2:0a:ec:ce:f9:02:
a4:38:df:91:69:36:46:1e:2f:ba:a5:fa:54:a8:36:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DA:09:47:17:6D:9D:28:A2:5F:95:00:76:99:01:88:AD:9A:DE:B8
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5a:21:c9:55:d7:9c:63:79:c5:b4:3e:d8:a0:d2:b8:08:ca:
a1:e3:67:05:bc:3a:cd:39:3b:54:c1:9f:90:91:99:7d:15:a2:
b3:86:57:a7:d2:af:8b:e7:92:9d:32:04:49:32:c2:b2:5d:d9:
8a:4c:26:d7:d7:0e:b4:71:a1:02:c0:73:2c:35:69:46:54:a1:
3c:d4:34:52:1a:34:2f:13:d0:77:e9:1f:fc:21:e6:67:ca:98:
b0:3a:67:47:3c:aa:45:00:c7:d3:12:c2:42:34:76:6b:ca:e0:
3a:d4:1c:f9:90:8b:60:8d:5d:c6:ea:73:b6:98:1e:4e:6d:2d:
27:27:b4:0f:96:74:27:6f:78:12:63:57:b2:84:1d:6a:8b:32:
7f:3f:53:af:1f:87:11:52:4d:49:74:82:b9:a8:04:98:c4:f7:
48:9a:c6:6b:31:8d:da:53:b8:fd:39:1a:a6:65:f4:b4:b8:9f:
ed:ab:07:f3:77:cd:4d:85:59:02:4a:6b:24:a8:a5:9c:03:29:
52:2e:c4:d8:60:c6:fd:6f:81:8e:a7:a0:5b:10:4d:7f:91:1a:
61:7e:90:c5:6d:61:dc:c4:7f:58:a4:4f:81:26:0a:4d:e7:26:
4c:5c:87:e4:34:71:8d:42:36:46:16:a2:d0:30:52:80:2f:59:
8e:e6:77:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:49 2026 by rpki-client