Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: 3/i+qYrWs599JtksoU8ivA8kLlZ52s9//1iPLt464lk=
Subject key identifier: B9:9A:93:FB:7A:08:E6:B2:D3:A4:4C:05:15:87:4E:D0:26:64:89:66
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 019F905AA81244A731F3ACFEC9605F768B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 11A7
Signing time: Thu 23 Jul 2026 19:01:28 +0000
Manifest this update: Thu 23 Jul 2026 19:01:28 +0000
Manifest next update: Fri 24 Jul 2026 19:01:28 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: OmOG4k8warTxhRSoAFw90AF/F8DsmQKUoNHXzMmalFM=)
2: ZupcI2nbSj0kv3bOiTJw_7ju_nM.roa (hash: 8lfURhp4+6wvfeyaLwrd59nHvD9zLaiHI+8CWa149w4=)
3: uRzlID_nfuupcIGUXbHpyyUrxts.roa (hash: 5LvqBXGtCHTt2jvIwKxCsctM10tlaiQJ5CWlpcE9cx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:a8:12:44:a7:31:f3:ac:fe:c9:60:5f:76:8b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Jul 23 19:01:28 2026 GMT
Not After : Jul 24 19:01:28 2026 GMT
Subject: CN=b99a93fb7a08e6b2d3a44c0515874ed026648966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:0b:02:5d:ed:a4:19:e3:e5:c9:69:54:5d:
ef:89:a9:51:b1:65:69:02:20:fe:f2:2c:b2:d6:4b:
c1:5b:9d:cf:66:8f:e7:b7:21:1d:46:8e:2f:e3:e9:
89:87:02:c4:6a:1d:82:7e:bf:82:8b:7b:f1:0c:15:
e5:9a:f1:fd:21:55:7b:81:54:5e:84:d9:16:6e:d8:
db:f2:59:5a:26:94:03:a4:85:13:78:33:2e:8a:50:
af:d5:f3:22:c2:cd:2a:aa:84:e7:b8:83:b1:61:e9:
29:d5:fd:f6:b8:e0:ed:1a:34:1d:5b:67:33:f8:07:
73:50:13:45:12:ed:6f:fe:e1:b4:3a:b7:11:7e:6c:
5e:8a:20:47:46:86:db:88:04:ca:5c:34:17:c1:46:
c3:e8:5a:da:33:0b:5a:13:29:fd:68:2f:05:8f:81:
98:b5:61:42:82:22:0b:09:b2:fa:53:39:40:62:c0:
c9:68:7f:75:8a:7a:0b:b6:28:c2:ea:1d:84:c7:7d:
61:62:94:0c:45:aa:4c:b1:42:6d:54:4b:fe:84:b4:
9c:b7:da:d8:7e:45:13:f1:2b:31:8d:2e:72:13:49:
d4:fb:1f:d1:03:3d:de:e8:ca:71:27:e6:9b:71:93:
bd:ff:d6:e9:27:99:65:2b:13:fb:b0:66:ea:fe:c2:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9A:93:FB:7A:08:E6:B2:D3:A4:4C:05:15:87:4E:D0:26:64:89:66
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b0:4c:28:e2:7d:e6:1d:b4:a2:ac:a8:98:5c:c8:db:4b:63:
ef:93:d9:f6:0b:f0:f6:92:ea:33:f3:07:69:db:2b:4b:1c:ee:
1d:6b:98:26:f7:a1:66:1c:0b:4e:26:31:90:f4:d9:b9:ac:c5:
f7:ab:30:ac:0a:34:4a:19:3a:6e:46:f7:7e:13:44:0f:cd:17:
00:57:9d:41:3d:e2:4a:97:71:1d:73:c5:e2:6e:29:9f:7a:99:
d7:49:73:93:f2:d5:86:ea:ab:5e:19:ee:26:cb:cf:68:aa:75:
a5:6b:04:e2:50:e9:f3:58:6c:51:d6:c0:64:60:59:6c:a5:df:
16:26:49:24:22:88:e1:26:d3:a8:68:4d:5b:cc:5d:06:e1:3e:
84:5c:6c:80:26:9f:f0:3c:ca:64:a1:31:89:c4:14:05:9f:fc:
f7:62:5a:53:29:02:97:99:93:b2:38:f2:82:5d:2b:22:eb:bf:
08:eb:74:1d:24:65:eb:fb:1e:35:1b:f6:05:d8:be:93:16:c5:
bb:76:f2:66:ca:f2:88:b8:5e:50:04:9d:2b:11:28:7a:af:e2:
cc:f2:e4:ec:7e:a1:76:37:0a:de:7f:eb:c0:b9:e4:a9:25:ef:
3a:1b:78:91:3c:93:51:e4:f7:d5:90:24:7a:70:4c:00:86:af:
06:a0:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:32 2026 by rpki-client