Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: kdByl1vqDX+0McFbe/WXOFVfs3Orqbg9b5d2S1SED9U=
Subject key identifier: 90:19:D9:88:71:F6:FD:4B:3B:DB:D5:12:34:A9:C7:C0:2F:79:D5:2A
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 019F90C810D9E4500B019150040F1687D44B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 21:00:58 +0000
Manifest this update: Thu 23 Jul 2026 21:00:58 +0000
Manifest next update: Fri 24 Jul 2026 21:00:58 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: eVqv/d4oxsHKfuvU64AgslWnLoe2k55VtohN64bC5VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:10:d9:e4:50:0b:01:91:50:04:0f:16:87:d4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: Jul 23 21:00:58 2026 GMT
Not After : Jul 24 21:00:58 2026 GMT
Subject: CN=9019d98871f6fd4b3bdbd51234a9c7c02f79d52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:52:df:19:0e:b2:16:fc:74:be:51:dd:7b:
b9:54:da:e4:54:95:28:77:dd:4c:8d:29:2b:c2:91:
95:ad:d3:1f:8e:36:67:4a:78:a5:6e:7d:72:aa:f7:
d7:fe:b7:ef:5f:f9:bc:22:3d:68:b9:60:8a:cd:c6:
66:dc:68:8b:b4:8d:69:36:5a:b3:76:c7:b6:7d:2b:
b5:7f:30:ac:76:ff:5c:84:3f:ae:29:dc:46:11:48:
73:8d:42:50:c0:f5:24:0a:1f:53:92:d9:5c:d8:aa:
88:26:75:e7:bc:82:5c:77:04:52:8c:6e:7f:70:3b:
2b:b0:9c:9b:c4:da:f0:2f:7e:c3:7e:26:ea:83:e7:
8d:5f:a8:ca:67:88:b0:9e:ec:67:bf:99:ba:ee:41:
1a:de:ff:8f:c7:62:15:a2:50:ad:16:be:7e:04:ba:
c8:19:5f:e1:8c:82:b8:97:c1:bf:0e:fd:23:36:f6:
c7:d6:da:00:2e:92:fa:5e:40:c0:9c:c9:1e:d2:2c:
86:dc:eb:8f:29:10:da:be:02:e0:5e:19:46:3c:ba:
39:ea:fb:0a:ae:8e:5e:a8:ea:e9:60:25:fc:bc:bc:
d2:2d:a5:3f:bf:ec:fe:8c:88:9b:12:0b:a4:ac:c6:
66:e4:7a:5b:9f:4e:7a:bb:9c:0b:e4:70:a3:a9:1b:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:19:D9:88:71:F6:FD:4B:3B:DB:D5:12:34:A9:C7:C0:2F:79:D5:2A
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:dc:de:1a:0f:54:70:c4:9f:95:1d:47:b2:39:17:a0:9e:4f:
ca:d8:ee:90:3c:e4:e2:11:81:7a:67:9d:a6:bc:cb:9d:67:ba:
39:43:f3:1a:df:f1:3a:44:f9:a9:76:b3:93:35:f1:22:65:aa:
77:0d:b2:ac:7f:b5:23:81:c0:91:a4:90:9e:3a:6b:e9:b7:c5:
92:38:49:79:b7:66:05:ef:20:4a:eb:6a:da:87:6b:b4:ae:7c:
42:f5:24:e9:cb:47:7f:08:2c:d2:6e:8b:f2:30:c1:e4:24:12:
30:a3:d7:c7:84:0b:c2:f5:a5:59:3e:cd:ee:9c:98:9c:40:03:
ef:31:e9:a3:e7:0c:bb:4d:ce:db:a1:f3:9b:64:35:c4:a8:a3:
a6:c7:2e:cf:8f:b1:1a:9a:a6:ce:8d:8e:00:d5:05:57:25:95:
1c:ff:f9:f3:ee:9c:d3:48:bc:8a:be:5f:f9:2f:63:df:3c:b7:
6d:3f:2a:66:c5:26:24:27:f0:00:62:ce:a0:e3:45:0d:fd:53:
43:7b:fb:65:86:c9:9c:a7:a1:29:49:2c:35:d8:5e:d1:55:10:
d2:d1:99:81:cb:7c:d0:61:cd:9f:22:f3:b4:c6:9f:f8:86:68:
af:27:4a:0d:4f:ab:d6:1f:14:d0:66:5e:be:70:cb:66:94:3d:
85:9b:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:50 2026 by rpki-client