
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: jwAlX1fMxlPQV/bbr92aZQ1qzNjHlSVYP4yJ2XDquHg=
Subject key identifier: 36:93:EF:21:E3:84:1B:1F:A2:EB:F5:F9:2B:88:CD:CC:57:72:D7:29
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 019F90C7D43369770EA3EF067CA5332C846A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 21:00:42 +0000
Manifest this update: Thu 23 Jul 2026 21:00:42 +0000
Manifest next update: Fri 24 Jul 2026 21:00:42 +0000
Files and hashes: 1: 0zAvG8q_rQz542VLQHfI3pwn2hU.roa (hash: EpeZpmHs3b50RgbC9T7I86EOA85BMvieUCH/Qo6Mt6U=)
2: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: 196VFeZD+nXFvlSTPZKgMbN9SmfMbsM2bZ/WFKmOqfE=)
3: gozTMRP9KybW0YQlfst5QWvJTAc.roa (hash: 1fB1QbWdo2Si+L9RD7xiEIKgMl1IQRY1BWEJBSr6TVA=)
4: nCAbVn_gsNs4x4asBKyazyvKXR0.roa (hash: Ir2ZDg7CX0Hx7nK6/8SSzS9hwNZYvwP7LhXhdGV2tlA=)
5: s5RTg8fa0nQHIcIumLzUhuAAt24.roa (hash: cqMD2IDYqFBpxsaJVxm5d2TxnTtqRKRBltHR4geFTsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:d4:33:69:77:0e:a3:ef:06:7c:a5:33:2c:84:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Jul 23 21:00:42 2026 GMT
Not After : Jul 24 21:00:42 2026 GMT
Subject: CN=3693ef21e3841b1fa2ebf5f92b88cdcc5772d729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:5a:85:83:7d:3a:b2:60:a9:81:cf:7a:62:
4a:1c:fc:97:00:49:5f:54:d0:b1:db:da:2c:8a:6d:
4d:46:57:03:5d:d5:2d:39:48:a7:a0:78:80:a8:4a:
7d:31:5f:da:89:47:0e:c7:2c:c0:8e:5b:b8:a7:1c:
48:23:43:c6:a2:6e:af:8e:95:1c:6e:17:3c:c0:25:
11:18:54:09:43:c9:21:00:46:4b:ed:fb:2a:69:b7:
cc:91:7f:5a:f1:b8:29:b8:d6:26:cf:f4:d1:1b:d0:
9a:7e:4d:a1:cf:c5:eb:23:e4:05:2a:b1:0b:55:ad:
2a:ab:d6:f6:a7:99:12:0f:19:d2:38:4c:ec:65:d5:
3a:c6:34:d9:82:f6:31:e0:d0:d4:27:df:10:5b:78:
0d:e1:3c:63:64:fd:b3:aa:f6:3c:d5:1a:28:d5:c6:
86:28:86:3e:6f:7a:7c:da:05:99:26:5f:40:42:c3:
c2:01:3e:e5:2d:8d:35:48:51:72:84:c3:7a:92:28:
73:2a:24:2b:c4:4b:06:08:fe:8f:d8:a2:cb:14:6e:
1d:b1:5e:14:ca:d4:67:b8:cf:88:c1:b6:ec:40:60:
c5:9e:f5:5e:31:63:77:17:c2:b8:0f:63:b5:e0:d3:
7b:ef:89:ec:b4:a6:aa:fb:dc:22:93:ef:2a:f0:af:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:93:EF:21:E3:84:1B:1F:A2:EB:F5:F9:2B:88:CD:CC:57:72:D7:29
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:18:36:e9:a7:0f:84:14:83:52:cb:73:3e:64:55:f0:56:79:
e1:e8:24:07:5b:0e:77:53:39:34:2a:b2:3c:c5:e8:23:d9:1f:
fd:3d:00:53:e3:32:1f:22:04:74:f0:43:d6:c2:f8:46:6a:54:
de:eb:70:9e:32:a7:cf:c7:0f:64:11:f3:61:a7:0d:d2:46:68:
1f:c5:03:97:1e:47:90:68:b1:37:33:f8:1b:72:c1:d0:c6:d0:
b1:5b:2a:11:b4:c8:03:a5:1f:d2:db:bc:e5:d1:4a:6f:4e:60:
16:f7:79:6a:51:8f:50:1d:74:5f:5a:79:20:bb:f8:b8:27:81:
20:d6:8c:9d:5a:33:58:1a:24:6b:61:b7:6c:fd:87:31:bf:b4:
47:5a:87:9d:6f:0c:a5:46:c0:7c:74:ed:cb:73:98:d5:6d:c9:
d3:c1:ff:02:d1:7c:9c:5e:68:4b:64:ca:1f:28:fd:26:b5:1b:
bc:98:84:e1:87:c2:bb:76:f6:c2:15:23:56:5e:53:d4:e8:c4:
9e:9c:de:e2:a7:1b:3a:9b:a1:3a:c3:49:15:c1:81:e2:4e:30:
7a:fb:ae:58:f9:3c:30:04:43:af:31:b7:f5:74:a8:49:c0:90:
a5:8e:26:b6:d6:39:ce:c0:c7:30:41:c0:8c:d9:af:1c:7d:06:
0e:c9:f6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:44 2026 by rpki-client