Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier: 3McRNjQ31Dpihw06InAdde9JpYiMFWk3x6mygg3fYLU=
Subject key identifier: 68:A2:1F:E9:2F:3B:F7:E3:8B:95:12:14:AC:C8:FD:87:B2:D6:A3:B2
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 019F9023517AF9253692685272830A8B959D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 18:01:01 +0000
Manifest this update: Thu 23 Jul 2026 18:01:01 +0000
Manifest next update: Fri 24 Jul 2026 18:01:01 +0000
Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: R099Zr4jap8/LKSjtHs1anG29BCNS9pyW76TiJDBCzw=)
2: srQhx9sIjZNbQnm0t4UEW3deG1s.roa (hash: cNnh8705CpKhEx6h/I59Oq+zBrL9F/BeoLhEWIh1/Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:51:7a:f9:25:36:92:68:52:72:83:0a:8b:95:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: Jul 23 18:01:01 2026 GMT
Not After : Jul 24 18:01:01 2026 GMT
Subject: CN=68a21fe92f3bf7e38b951214acc8fd87b2d6a3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:76:a2:3b:04:c3:13:eb:c6:f5:4e:28:a8:
9d:83:3e:b9:6c:fe:ac:7b:e0:4f:bc:06:f8:b9:6a:
c9:68:3f:2b:cd:c4:97:7e:5f:a4:43:cd:a6:e4:b3:
2d:76:8d:ed:8d:f5:d9:5b:0a:63:cb:97:30:80:65:
64:bd:7a:85:45:c1:46:f3:03:c8:6d:4f:c7:04:fa:
01:19:da:3c:c4:6a:31:f0:b8:27:c4:07:2a:6f:6f:
6e:f1:b5:e8:39:ca:f4:1f:5c:da:ee:41:98:a3:4c:
d5:82:fd:f2:06:4d:20:45:37:77:cc:67:9f:e6:89:
d7:8b:d8:35:93:6f:54:8f:c8:63:8a:8a:88:96:bd:
61:ba:d5:26:79:95:ab:a1:04:11:e2:c4:9f:a1:12:
aa:16:57:7d:c9:e4:2d:83:c1:97:6c:bb:ff:41:94:
6e:d9:c8:7d:d3:82:4c:50:93:04:4a:cd:c9:0c:04:
c8:3b:3e:33:31:bf:1b:52:fa:91:b5:f3:e8:ec:e4:
b4:ab:c9:5b:1d:a2:bc:98:b2:dc:b5:a0:19:94:87:
97:be:ac:fa:a9:3b:1d:84:a6:68:9e:e9:e7:ab:e0:
92:d7:ea:9a:3f:8a:fb:31:11:2a:26:d5:ae:a0:fe:
49:94:ec:8f:86:0b:9f:ef:7f:06:85:d4:fc:74:93:
ac:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A2:1F:E9:2F:3B:F7:E3:8B:95:12:14:AC:C8:FD:87:B2:D6:A3:B2
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ec:76:81:88:e1:0b:86:12:45:d0:e5:49:8f:1e:13:91:9a:
1a:35:52:27:96:ae:0d:d1:7f:e3:35:ad:ff:94:30:66:44:1e:
c2:56:57:83:94:66:2a:af:35:a4:ca:be:9c:05:c0:4f:6b:e6:
8e:14:4f:6c:b6:23:16:93:d9:7c:87:c2:66:64:6f:ea:1d:3b:
8e:1d:84:e2:40:fd:88:8f:70:ae:92:4a:6f:bd:cc:03:dc:91:
98:1e:a8:80:b2:dd:4c:1a:e4:10:bf:9f:fb:1c:69:0f:37:46:
76:04:da:cd:36:47:9c:c9:84:67:0d:d2:08:19:a0:8f:81:1e:
bb:85:e6:da:0b:86:70:2a:2f:d7:4e:fb:d0:aa:f6:55:8f:4a:
2d:e1:5f:08:61:17:fe:5a:ca:a9:04:1e:4c:3b:ee:b1:8e:0e:
b6:f3:a0:98:f8:b4:d6:5f:fb:2c:81:1f:d2:8c:4d:f4:5b:12:
be:9b:b4:a7:7a:80:dc:d5:03:74:1a:d9:7b:0f:0c:41:df:b0:
8b:f4:54:4f:f3:8a:cd:2e:61:20:6b:7e:07:ac:ee:dd:fa:c1:
f1:80:46:d0:3f:b7:c7:f3:ce:aa:2d:6b:fc:da:3d:41:f0:b7:
a9:1a:0a:15:71:72:c5:61:b2:40:8c:35:bb:23:35:37:3a:c7:
3b:93:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:48 2026 by rpki-client