Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: okCGCFfVSsfpl+ALA9Is2fqVTpIgByM5S5kxhyn3gmY=
Subject key identifier: 95:5B:90:B8:5E:E1:30:57:85:2C:1D:9E:7B:DD:08:3E:56:88:17:46
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 019F90909F365D7CC075B120B53D769F19C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 19A2
Signing time: Thu 23 Jul 2026 20:00:24 +0000
Manifest this update: Thu 23 Jul 2026 20:00:24 +0000
Manifest next update: Fri 24 Jul 2026 20:00:24 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: j6MaEHaWP3fgMennEnfFXyvpGje+gfzZ6dz3HCxtyCE=)
2: I_klKsqV4Xc27UFkAneEsuB-gHk.roa (hash: AkW1e4Xf71kIFS8tvO/5F4giqlxcvlPyuHSMW67qHI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:9f:36:5d:7c:c0:75:b1:20:b5:3d:76:9f:19:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Jul 23 20:00:24 2026 GMT
Not After : Jul 24 20:00:24 2026 GMT
Subject: CN=955b90b85ee13057852c1d9e7bdd083e56881746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:8e:59:08:1f:82:71:79:a8:d6:88:46:54:
5a:6b:b3:b6:7a:71:0c:b4:1f:a5:bf:7b:00:fe:3b:
14:64:3c:51:80:c2:08:bd:05:b3:dc:8d:a5:1a:cb:
0a:ab:66:b7:1e:71:47:34:b6:7f:ad:ed:6b:5d:cd:
4d:a2:9c:06:59:e8:be:42:f3:56:cf:80:1f:4a:0f:
fe:72:bf:b9:f5:47:8a:f0:cb:4a:3c:03:9f:79:25:
13:68:fe:b4:6c:31:72:57:05:2e:02:aa:5c:23:b8:
98:b6:4e:54:1b:2f:da:08:cd:7a:46:78:64:68:5b:
79:e8:31:99:19:f9:54:58:58:cf:b3:ee:22:70:d5:
7f:42:eb:2e:7e:8e:d4:a5:82:0a:e3:28:b5:0e:67:
f5:c3:9f:ed:fd:07:5d:69:01:bf:e8:ec:bd:b8:d5:
38:6d:3b:3f:8c:16:e3:c0:9c:e2:5e:72:75:de:e2:
87:a1:47:d7:f6:84:6a:71:a7:e8:0c:cf:6d:b6:68:
31:60:c0:22:65:6b:a4:15:c6:73:e4:cb:5a:26:f9:
18:58:00:a0:89:57:f4:83:3d:49:e3:07:19:a1:fb:
a3:e6:97:35:90:12:9d:8e:ee:ae:05:4a:62:d6:6e:
34:fa:cd:bf:f0:b6:85:cb:34:03:53:20:72:77:b1:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5B:90:B8:5E:E1:30:57:85:2C:1D:9E:7B:DD:08:3E:56:88:17:46
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f8:cd:16:df:e0:4b:5f:b6:01:3e:d7:82:2a:8c:18:71:e6:
4d:ee:b8:7a:27:a4:36:e3:6a:c6:93:5c:0a:83:85:3c:f2:b2:
88:e4:df:5a:f5:2a:5e:71:26:86:d8:5c:9c:10:f4:dc:c7:5e:
c2:d3:6e:64:37:4b:74:94:45:1e:39:1b:cf:ff:2f:00:43:46:
9d:e4:c7:ce:6f:6b:76:dc:4a:9d:41:21:0f:37:06:7d:1f:73:
ad:15:2e:53:82:49:93:75:ad:3c:fe:b4:1b:9f:6c:a3:7b:11:
e0:eb:60:1e:96:e1:df:a5:0d:78:f5:30:f8:03:71:90:3c:fd:
d8:d1:a0:51:22:b6:dc:86:76:09:6a:32:ab:08:d4:7e:4f:05:
7f:ef:b0:94:67:67:62:8f:69:70:ef:b0:fc:3e:46:1e:a6:9a:
1b:c8:99:22:88:4d:df:1d:13:df:e9:41:c5:95:c7:2f:83:c9:
05:f0:aa:33:e9:a6:7b:40:b1:96:00:ad:06:e6:ed:2b:21:2c:
f8:d2:0b:44:b7:a0:60:1e:db:b5:99:96:00:2c:86:39:93:1a:
80:8c:04:65:c7:4a:e3:f3:4e:b1:ee:a5:ec:66:5a:d1:9e:6a:
89:53:a0:4b:c5:c0:f3:e3:17:39:f9:86:87:06:e1:fe:1c:23:
84:84:50:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:52 2026 by rpki-client