Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
File: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft (raw, json)
Hash identifier: R+EwC8wJ3R3noQfFD/1ywJvc88zQlnRjZRS3eoxfSUI=
Subject key identifier: 46:CE:40:69:64:EF:2C:70:EE:DF:F3:A9:A0:26:D8:21:91:74:5E:8D
Authority key identifier: DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
Certificate issuer: /CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Certificate serial: 019F8F7F0D20FAE943FE1FA8AF002FA14264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
Manifest number: 19C1
Signing time: Thu 23 Jul 2026 15:01:36 +0000
Manifest this update: Thu 23 Jul 2026 15:01:36 +0000
Manifest next update: Fri 24 Jul 2026 15:01:36 +0000
Files and hashes: 1: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl (hash: 8gIusqgzriFjLQ+Yeq4iAsd32ytpDcViyvU9IrTw/HY=)
2: QAWM0Lol009j6uKq6lsWaoRBKH0.roa (hash: lK/TjxV7zjq43eORaaonfTSL2oVI9tSkgfqFQO6a0ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:0d:20:fa:e9:43:fe:1f:a8:af:00:2f:a1:42:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Validity
Not Before: Jul 23 15:01:36 2026 GMT
Not After : Jul 24 15:01:36 2026 GMT
Subject: CN=46ce406964ef2c70eedff3a9a026d82191745e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:35:75:4e:df:c6:a5:c0:75:19:d4:87:16:
2e:59:e5:a7:5b:bb:52:45:72:ab:20:14:e2:f4:4f:
f3:ed:40:40:9f:18:77:2e:c7:fa:e9:f6:98:e9:c6:
97:7f:c9:37:11:7f:80:52:6e:17:5a:91:b6:03:ff:
2e:58:f0:2b:f8:e6:01:cc:fa:b6:bc:9d:a0:51:54:
16:5b:69:55:4b:d3:4b:bf:5a:44:6b:c2:60:e1:20:
33:ac:9b:51:e5:82:d8:85:a7:86:f7:ac:90:70:8c:
92:8a:4d:2a:83:16:7e:ca:c0:65:5c:8f:c9:b6:6c:
3f:0b:66:e9:ed:12:50:d3:ad:5d:63:c1:34:d6:79:
07:4a:1d:89:cd:6e:a5:be:1c:42:da:05:e7:cf:e8:
3b:18:c5:57:5c:ee:25:c1:6a:5a:f7:45:18:02:09:
7a:9d:35:ee:97:ab:40:fe:0b:50:14:17:bf:56:98:
e1:b1:e0:5b:e0:0e:b3:89:76:6b:e8:cb:d4:d1:09:
18:70:31:0e:8b:15:b8:d2:93:12:f5:8d:71:35:4b:
f3:e6:83:e4:4b:2b:9f:e9:09:af:bf:c2:fa:89:87:
d7:bd:2a:42:0f:c0:26:45:5a:16:0d:5e:13:5d:8d:
0c:64:6a:a6:d8:27:31:78:87:29:38:26:d9:60:12:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CE:40:69:64:EF:2C:70:EE:DF:F3:A9:A0:26:D8:21:91:74:5E:8D
X509v3 Authority Key Identifier:
keyid:DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:08:bd:e6:1a:79:b0:a5:c0:66:49:ce:99:8d:6b:0b:8d:79:
13:14:61:43:50:77:fe:12:ad:c9:47:02:90:aa:3a:92:ec:86:
07:79:84:5b:aa:a7:2c:c4:bb:f4:ed:91:03:1f:c3:5c:05:0b:
c1:34:4e:e4:f4:62:ef:f8:42:22:3b:fc:57:98:8c:5e:71:62:
c1:d9:e4:81:e7:32:06:75:c0:3e:fc:00:b5:ea:7d:3b:15:ca:
4c:0e:b7:10:7f:d5:71:e2:b7:3a:79:40:26:64:9d:9b:10:c4:
12:ac:87:8d:43:a6:bb:3e:7b:5f:b7:7f:bf:ae:82:83:0e:8f:
1c:25:56:eb:d2:4a:ea:d0:f0:d0:b6:45:4a:f4:69:24:6e:16:
df:77:6b:e8:17:03:6e:d2:1a:d5:b2:aa:84:66:69:c2:7c:b1:
93:6e:8f:94:6b:66:a4:99:82:a1:60:67:f2:41:32:d0:72:a9:
f7:a2:f0:13:d9:0f:f6:41:9a:d9:47:1c:0a:e0:67:ce:80:67:
bf:12:d2:37:66:7b:54:9d:47:4d:08:4a:9a:7d:9e:c8:6d:ef:
e2:40:d2:b8:ce:a2:18:22:7b:5c:e1:4d:12:e8:6d:2a:f6:5d:
0c:4f:55:fb:26:6f:52:7b:e8:58:1e:8c:2f:12:49:c2:17:9a:
73:88:b5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:01 2026 by rpki-client