Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
File: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft (raw, json)
Hash identifier: O9YhEmVeOwJBSPSUSCNKWrvWhxAIRjLsCWrIN6aJUoI=
Subject key identifier: B9:B0:96:15:DC:93:1E:39:6D:BE:FD:14:BA:F0:66:DE:2C:82:04:81
Authority key identifier: DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
Certificate issuer: /CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Certificate serial: 019F8FECCD72B8D530CEBB0FCE07963E9857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
Manifest number: 195A
Signing time: Thu 23 Jul 2026 17:01:28 +0000
Manifest this update: Thu 23 Jul 2026 17:01:28 +0000
Manifest next update: Fri 24 Jul 2026 17:01:28 +0000
Files and hashes: 1: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl (hash: YqbXxStX5ar91KRisv+iqfNhu9e8bv1XlrlD79P6Lmw=)
2: otrcKIXq_A9uaKlz_d5wq-4G144.roa (hash: 384/aWNa4g4uNh0J2+RFW9VIMxNrtEwydVkvP0K9KIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:cd:72:b8:d5:30:ce:bb:0f:ce:07:96:3e:98:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Validity
Not Before: Jul 23 17:01:28 2026 GMT
Not After : Jul 24 17:01:28 2026 GMT
Subject: CN=b9b09615dc931e396dbefd14baf066de2c820481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:ea:ab:d4:f5:eb:5e:6a:af:aa:18:e8:ed:
4e:dd:53:e1:88:ff:c7:52:08:f6:86:f2:04:02:10:
80:f9:68:65:38:78:fe:fe:f0:73:71:3b:0e:76:d3:
e8:8a:ab:f4:72:3a:89:8b:7a:9a:2f:5c:5c:c3:c3:
db:95:0b:62:2d:96:6c:03:77:28:3d:79:b4:b5:97:
2d:be:bd:75:80:eb:0e:1b:90:89:04:56:df:20:ae:
fc:ca:f9:54:c8:2d:ed:31:ef:70:e6:05:67:73:4c:
b5:78:ff:d3:56:54:00:07:a8:86:18:c1:20:32:52:
1a:32:40:30:ad:9f:4b:48:57:cb:ca:11:d3:04:6f:
95:d3:97:12:89:3f:4d:bb:4a:1c:b4:74:20:29:66:
8d:97:52:2f:47:67:31:e9:54:c1:03:0e:32:27:ad:
b9:ac:0b:56:bc:63:8e:b4:b0:b1:c8:6b:c6:cb:21:
67:c6:22:63:9c:a9:c3:0a:ac:be:c6:85:ab:a4:2f:
43:f1:ee:be:b9:69:f7:39:8f:ff:83:47:db:8d:9b:
d0:f4:8a:d0:70:95:15:09:32:9a:60:a7:f1:a8:49:
5e:6d:e0:99:b0:d6:9f:06:88:88:2e:e8:4b:99:7a:
49:02:95:f0:41:7c:4d:e6:d7:6f:ff:21:e9:2c:c2:
db:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B0:96:15:DC:93:1E:39:6D:BE:FD:14:BA:F0:66:DE:2C:82:04:81
X509v3 Authority Key Identifier:
keyid:DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:64:13:97:b1:bc:7c:39:22:48:51:f1:af:25:78:e3:c0:5d:
ae:8e:67:5c:63:75:01:b8:fd:e3:f0:12:ea:d8:16:24:3a:6f:
95:9d:78:3f:39:23:d2:52:14:48:e6:11:a0:bd:3a:f2:38:b8:
b3:f1:1a:35:86:27:43:cb:da:e3:c5:67:b5:39:d9:ef:13:f6:
3b:04:76:a2:0c:43:ec:09:c6:15:2a:1e:83:91:7d:53:d0:90:
64:f9:03:33:43:88:b7:bb:32:c1:23:e7:62:c3:77:5f:94:32:
93:33:47:5b:4c:eb:af:23:4b:29:6a:b4:51:db:d1:d4:c5:1d:
bf:54:23:ba:9f:1f:37:a6:72:3c:4a:9d:e5:fc:ce:20:53:e7:
27:b6:dd:ba:f2:e1:30:0c:02:b1:03:34:13:1a:8b:bb:e7:71:
19:c2:fd:0d:43:45:56:0b:e8:28:7c:fd:cc:69:a9:6b:c7:d3:
92:da:00:12:7c:91:14:dd:e3:d2:26:b2:33:1a:19:4b:74:b9:
97:14:0b:47:79:f6:eb:28:ed:a3:37:0f:30:8c:83:c9:a6:07:
78:41:16:c2:47:bb:0e:1c:74:83:44:0f:e5:d7:f7:bc:db:0b:
14:4a:de:29:1b:c4:a5:cb:f4:51:59:94:54:47:b6:11:97:b5:
6f:a7:d3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:04 2026 by rpki-client