Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
File: 3XGhKciwiZWUIZnqbRsigmU1DQs.mft (raw, json)
Hash identifier: 66/kUsoOauoj4gpq9j0jxl7g4BhwqntVwutKz4v+Xtc=
Subject key identifier: 38:54:DD:93:BB:89:A7:28:DE:8A:AD:84:CF:B8:99:25:FD:52:7D:AE
Authority key identifier: DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
Certificate issuer: /CN=dd71a129c8b08995942199ea6d1b228265350d0b
Certificate serial: 019F927F846C2AA3549543CF0C6C62F005F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 05:00:58 +0000
Manifest this update: Fri 24 Jul 2026 05:00:58 +0000
Manifest next update: Sat 25 Jul 2026 05:00:58 +0000
Files and hashes: 1: 3XGhKciwiZWUIZnqbRsigmU1DQs.crl (hash: 8XKoNg5t4+ufPsWzqdeDA9pLA3XP2YZUDbauF37z6AQ=)
2: BVmlLvTO3TnwU-WykyLWkZijiEQ.roa (hash: GjheiEWnUhL3hO3K8TeuKDirKE8ozbAnofhtWixZIn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:84:6c:2a:a3:54:95:43:cf:0c:6c:62:f0:05:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71a129c8b08995942199ea6d1b228265350d0b
Validity
Not Before: Jul 24 05:00:58 2026 GMT
Not After : Jul 25 05:00:58 2026 GMT
Subject: CN=3854dd93bb89a728de8aad84cfb89925fd527dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:c1:a1:41:5a:52:57:5e:f2:77:e5:4d:55:
ea:2a:19:d1:f3:79:55:14:da:59:49:62:ec:06:ce:
76:10:80:d4:91:a5:65:0f:3a:3c:30:21:f9:24:f0:
bb:24:5c:34:49:9b:f6:94:c6:9b:88:b7:6f:1d:3d:
ba:2d:6d:44:3c:03:ba:d9:b7:ef:13:35:ea:65:47:
a4:0d:b8:2e:f7:04:f4:c5:6b:48:a4:77:56:a2:97:
9f:08:d3:e9:ca:e6:fc:a2:a5:6e:f9:55:e0:99:3d:
a5:b9:a7:ea:37:83:c6:78:e8:80:73:f7:13:7b:a9:
aa:e5:42:10:79:ac:9c:ec:7a:98:e5:db:a8:47:dd:
56:50:49:42:17:97:03:6c:7f:bc:c4:2c:66:94:75:
38:66:20:04:19:03:71:e3:78:1f:88:f6:ff:7e:83:
55:e7:c3:44:b4:d7:78:f6:cb:e7:e6:9f:68:ea:fd:
c5:3f:4d:af:2c:da:5c:0e:5e:ae:d5:7d:ec:45:55:
47:8c:c1:73:18:a0:ce:96:d4:dd:72:c2:9f:67:95:
53:e2:8a:d6:fe:9a:75:8b:16:b7:fd:b1:87:4e:0c:
1b:91:37:97:e1:47:10:c4:23:a4:f2:d4:98:12:b0:
e1:23:92:4b:d9:f9:da:bd:fc:1d:11:cf:47:00:d1:
a0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:54:DD:93:BB:89:A7:28:DE:8A:AD:84:CF:B8:99:25:FD:52:7D:AE
X509v3 Authority Key Identifier:
keyid:DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:84:91:a0:ed:b6:17:89:4e:a5:55:97:db:a6:d5:cb:00:fc:
f3:ed:a0:a0:87:c9:f3:13:f6:cd:68:86:09:c1:d0:d3:fa:3b:
4d:94:39:7d:40:a1:49:16:81:b7:98:d9:18:e8:83:3e:69:12:
d0:87:c0:d3:c9:4f:16:cc:2e:8b:c8:65:d8:c8:fc:6c:31:20:
0c:95:bb:0f:e2:32:dd:a3:fd:70:3d:3e:72:c3:69:e3:91:f6:
36:ae:fd:d4:d3:49:f5:d3:e3:8d:89:71:1f:00:a4:c3:9a:c6:
7f:4f:30:0f:a6:2e:be:b9:57:5d:53:61:32:00:23:70:05:07:
86:54:ee:a0:40:3d:e2:f6:ea:a4:64:da:5b:ea:2f:17:0d:40:
5e:af:c3:bc:3f:05:4d:38:37:75:af:5f:c5:be:8d:2e:49:d8:
cc:a2:a3:b7:aa:d8:42:26:f1:89:79:f6:4c:b8:f9:b7:26:1d:
3c:28:c2:b3:9f:a4:6c:6b:54:0f:6f:c2:f1:6c:8f:ba:1c:05:
e6:88:63:f7:de:3c:05:0b:f0:9c:de:d1:52:85:28:2a:e5:71:
4b:ad:16:d6:54:a0:a4:16:9f:5c:c5:17:c9:3b:81:07:73:f2:
22:50:3b:ae:20:03:84:3d:bb:ee:2d:ef:7b:fa:93:b4:dc:19:
40:60:20:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:31 2026 by rpki-client