Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: cFwakT5k90mAFNq3om17g3kn77mqQoQ/he7fE00xiMg=
Subject key identifier: 5C:D3:EC:15:E3:26:7D:80:2C:1C:6C:CD:93:8D:C6:47:28:27:1D:BD
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 019F8FB4D4E08FCFE7D5BF2BB31B5B3FE456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 16:00:20 +0000
Manifest this update: Thu 23 Jul 2026 16:00:20 +0000
Manifest next update: Fri 24 Jul 2026 16:00:20 +0000
Files and hashes: 1: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (hash: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q=)
2: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: VvPVhGStVCpoXqIXXcppp1vGw8aIwiMTwE2pHBJ8jUE=)
3: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (hash: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:d4:e0:8f:cf:e7:d5:bf:2b:b3:1b:5b:3f:e4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Jul 23 16:00:20 2026 GMT
Not After : Jul 24 16:00:20 2026 GMT
Subject: CN=5cd3ec15e3267d802c1c6ccd938dc64728271dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4c:6f:cd:42:77:fe:3a:95:2d:3e:5a:dd:87:
f9:06:d1:9f:f4:63:e3:18:51:e5:1c:ed:a1:f8:50:
b1:bf:51:a1:b1:65:d1:4f:09:51:44:40:f6:29:df:
28:87:d8:e3:a6:d7:21:8f:75:40:cc:7f:30:4e:1c:
db:15:fa:9c:fe:f1:e4:4c:f0:7d:d9:4a:b9:49:c9:
0f:90:ed:24:02:49:43:1c:b0:28:50:9f:6e:1a:c3:
a0:bb:af:da:fd:bc:2a:93:43:c5:c0:f2:f6:7a:50:
ba:64:a0:78:f4:b1:63:54:af:86:c7:3e:d3:a9:80:
ab:a9:4c:ac:12:8e:78:ab:b6:cf:4b:e1:6f:f3:c5:
e5:2b:df:8a:e3:4b:1f:01:cd:d2:36:a6:00:23:f5:
48:c9:37:a9:23:ce:01:f4:33:f9:d5:5d:e5:32:7c:
4e:a4:cd:7f:62:9e:e9:e9:f1:89:ff:50:2f:83:e2:
03:0c:d2:14:76:90:b9:b9:fc:c8:7c:12:98:76:8a:
db:1d:50:d2:40:92:e5:13:f9:52:68:31:e4:5d:8c:
08:73:70:60:b1:6f:13:3b:f1:b6:57:d7:16:eb:13:
39:70:43:5f:09:e0:4b:99:2e:bb:79:15:1c:ab:a8:
54:ae:c6:19:5a:89:b0:07:0a:c6:29:1e:32:f8:87:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D3:EC:15:E3:26:7D:80:2C:1C:6C:CD:93:8D:C6:47:28:27:1D:BD
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:41:bf:56:2e:16:82:4c:7a:a7:03:17:53:c9:07:21:ea:60:
8d:4a:52:b1:9d:2d:83:8a:0d:ea:4e:9c:e5:ee:e6:65:d0:22:
25:da:7e:a4:cc:46:fa:48:c6:f9:fb:31:7e:77:e5:a0:1c:c8:
ec:23:12:08:3c:06:5e:cd:0f:71:c3:9c:63:d6:4c:83:ab:1b:
16:4e:5f:d8:3d:fa:0e:42:69:6f:29:b2:a5:bf:b8:90:b6:54:
25:c8:4a:0b:12:24:2e:9a:0c:ed:e3:0d:8a:c6:be:34:c2:4a:
56:d0:25:6c:04:b1:a0:0a:0c:5b:f0:12:ae:98:47:bd:7b:3a:
a1:25:cf:28:93:5b:93:61:45:16:9b:22:fb:eb:0a:27:1d:73:
0f:3f:99:ae:82:9f:5c:5d:02:1a:62:41:9f:de:b0:d1:d1:31:
90:ab:83:9b:be:95:32:e0:d0:b1:3b:88:52:53:65:d3:c9:1b:
86:a2:71:76:24:8c:05:b0:2e:ed:23:85:5a:99:40:d4:70:e6:
d4:bd:77:4c:25:9a:b9:c9:86:08:2e:f9:da:dc:73:f6:4a:2c:
e8:7c:2c:7c:f7:73:9b:15:03:0a:49:8a:3d:56:4e:82:73:41:
fb:6e:53:f2:82:2c:c9:65:5a:3d:3f:45:a4:8a:39:20:a0:ba:
e2:6e:31:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:34 2026 by rpki-client