Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json)
Hash identifier: iNWA6DvvfBBkQyFXsHH18egdOp0ZuLcn3Sih4R5NOz8=
Subject key identifier: C6:17:D2:53:CB:D9:7A:78:F3:B9:3F:7A:C6:39:E8:0C:AC:57:3C:45
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 019F8F10D75B95F746031D36C0BA94018201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 13:01:13 +0000
Manifest this update: Thu 23 Jul 2026 13:01:13 +0000
Manifest next update: Fri 24 Jul 2026 13:01:13 +0000
Files and hashes: 1: 3JCprLbCd_JV3m7EK4otwaRJ6FI.asa (hash: C7m74US1J4rnzhzyN9c9AXYlLYYU1lK9Uvvic8/k1+0=)
2: 5EKQPrPNwyvCBR3SFmiV77L19bE.roa (hash: 7kjfjqomqFD/efQnWdT+7ek8PZzhOejx7JJd6FEa/kA=)
3: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: kmR3HvhJVdQQULhkrjQP/Waiqp68dzjS0gvZL4bsSdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:d7:5b:95:f7:46:03:1d:36:c0:ba:94:01:82:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Jul 23 13:01:13 2026 GMT
Not After : Jul 24 13:01:13 2026 GMT
Subject: CN=c617d253cbd97a78f3b93f7ac639e80cac573c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:dc:a8:43:d3:92:48:3a:ad:57:2b:8e:de:
51:19:a9:e8:ce:70:65:8a:a2:94:a5:c3:07:55:aa:
94:39:94:ea:07:7f:1a:1e:d4:d2:2a:7a:a6:b2:a1:
34:ef:dd:35:ab:7c:e3:2e:2e:a0:8a:a2:e2:06:65:
c7:41:fb:83:8e:c3:05:12:bc:3b:bd:a8:6b:da:4c:
b7:55:53:a4:a1:29:06:44:b3:82:13:70:c3:e8:22:
1e:3a:1f:e3:45:59:8e:29:c0:bb:ae:f7:11:3f:5f:
23:4c:06:e6:51:92:de:76:8e:2b:c2:ef:ae:9a:7a:
7f:45:b3:dc:13:88:c0:a2:38:45:30:67:2f:8c:c8:
85:7c:58:17:9b:0f:40:c6:5a:bc:77:15:f3:e7:61:
e1:2c:bd:12:36:02:ac:1f:7f:38:ae:1e:2b:e9:65:
a4:65:0f:f2:ff:a7:ab:d4:ea:7d:6a:6d:2b:59:11:
ec:b3:6e:29:3d:04:8b:db:5b:0d:3d:ee:5b:d5:88:
81:83:85:50:69:01:2d:0c:6d:b9:a1:a7:80:7e:6e:
a2:fd:66:05:cc:ed:54:93:26:15:59:98:56:b1:51:
34:c3:36:d2:a0:99:f7:45:0e:b0:13:45:e4:74:8a:
b3:5d:74:8a:fb:7d:ca:33:ee:1c:82:67:b4:1c:8f:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:17:D2:53:CB:D9:7A:78:F3:B9:3F:7A:C6:39:E8:0C:AC:57:3C:45
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a3:cf:0a:cd:02:b0:89:45:d5:c0:26:95:10:a6:20:7d:38:
e7:ec:b9:9f:4e:fe:99:52:ed:c5:24:ed:b3:7f:b1:12:0a:c6:
a2:72:ea:b0:e2:a6:71:1f:2d:e2:e1:23:89:a5:45:af:fa:e5:
f0:4c:33:e6:ee:2e:68:f7:f0:3a:f6:92:94:fd:ec:87:03:26:
b3:1b:32:d4:dc:b6:3f:bf:ef:64:af:59:f5:fc:01:7d:fb:47:
af:4b:aa:7d:9c:92:1f:62:cc:9e:f0:f0:f1:34:17:7a:ab:9d:
39:b7:11:9c:76:26:dc:de:e7:70:0e:18:93:2d:29:06:b8:a7:
d0:fd:07:ca:a5:c5:e6:38:d1:cb:56:b2:c9:ed:e4:de:2d:c7:
25:b1:75:9b:8d:5d:47:75:d3:a1:a0:8e:8b:e2:98:c2:de:27:
36:49:36:8d:35:8e:49:1c:81:f6:14:04:04:ac:a1:01:f0:1a:
7f:69:b2:d3:b8:0c:ff:3a:65:d5:9a:dc:e6:6c:4d:15:19:41:
a9:bc:f5:6a:87:da:ce:2a:27:53:10:06:e7:55:25:ec:57:e4:
0e:32:c2:82:70:10:8a:fc:55:f9:63:4e:d2:24:c6:7d:ad:a8:
a3:1f:7d:36:00:57:ad:f5:5c:9f:6f:79:09:1d:c8:31:7c:e0:
68:f3:ff:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:07:56 2026 by rpki-client