Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
File: 3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json)
Hash identifier: U6UJ8k2rVjqIQNOfXPfJmcZ3wVGUMo8AEkFI+F6Rg7g=
Subject key identifier: 66:C0:BA:9F:80:39:26:27:35:1A:8B:D1:BF:F1:68:51:F5:F6:9F:5B
Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a
Certificate serial: 019F91A40D791D59B2A613DD48D3E0994EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
Manifest number: 0E32
Signing time: Fri 24 Jul 2026 01:01:15 +0000
Manifest this update: Fri 24 Jul 2026 01:01:15 +0000
Manifest next update: Sat 25 Jul 2026 01:01:15 +0000
Files and hashes: 1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: /Eoc3mUCNYUKPPskJJPQBkC4C7qH7zDyLI3RNeWSluw=)
2: c52XhO4YGCrU48r6aoFS0wJifx0.roa (hash: 4+paDSnGo7aoDvCfZSAugeN0kcY8+2h3yijdRS9k2EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:0d:79:1d:59:b2:a6:13:dd:48:d3:e0:99:4e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a
Validity
Not Before: Jul 24 01:01:15 2026 GMT
Not After : Jul 25 01:01:15 2026 GMT
Subject: CN=66c0ba9f80392627351a8bd1bff16851f5f69f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:38:c2:23:30:25:1c:c8:df:01:34:e3:ed:b6:
96:e7:65:3b:e7:c1:bb:a6:b8:20:06:b1:46:bd:a2:
9c:28:42:64:85:40:5a:f3:ec:af:07:3f:5b:da:a6:
dc:c5:59:12:da:24:8f:28:06:9a:34:84:00:e7:0d:
12:11:39:ac:09:7a:3a:28:68:09:a4:7d:4c:a9:d0:
b6:3b:e5:ec:66:3c:84:1c:26:0a:72:b3:59:da:4e:
3f:26:80:e9:02:a4:2d:2a:a4:f7:b2:3d:50:24:b7:
cc:b2:bc:74:3b:ea:8d:76:a3:91:1e:b0:70:0d:8b:
89:50:e4:7b:ed:7d:07:b7:b6:91:76:b7:5f:d6:12:
0b:cc:d2:13:94:f6:36:55:3c:50:de:3f:8f:62:a5:
77:1e:ac:fc:2e:43:3e:09:6e:c2:23:8a:dc:b3:00:
24:9c:58:3c:c2:c0:b0:8e:7c:f7:4f:28:32:ec:35:
24:05:d9:4b:c6:fd:14:c4:33:56:c0:f1:82:86:53:
d7:c3:a7:92:fa:11:4f:f7:7e:91:76:e2:d5:94:28:
4d:85:6e:a7:50:e8:8b:42:27:ec:16:36:97:c6:d8:
8c:75:15:9c:4d:84:22:de:5d:38:a2:f5:2a:a1:f8:
54:70:38:77:d0:bb:d4:f1:9b:f8:06:54:42:9d:dd:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C0:BA:9F:80:39:26:27:35:1A:8B:D1:BF:F1:68:51:F5:F6:9F:5B
X509v3 Authority Key Identifier:
keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:46:89:cb:d3:15:85:79:72:cb:4b:4c:21:53:ca:6e:77:55:
9a:c4:3c:a7:71:d0:0b:22:23:3c:4c:34:58:12:10:59:be:d3:
6c:b9:83:fb:96:60:b9:ba:af:df:64:59:d0:18:ce:71:94:cd:
cb:9b:7c:27:5f:52:da:9b:5d:37:c9:ef:b8:0c:36:9c:c3:00:
c9:99:fa:fc:91:ca:8d:76:d0:b5:fc:04:05:8f:d8:02:18:36:
7f:e9:bd:70:72:d2:e9:5a:04:5a:18:95:68:43:81:88:6c:86:
a4:8e:41:62:6d:74:d9:a1:8b:a2:41:b3:5b:ab:c5:19:f4:09:
c1:c4:aa:49:98:d8:51:cc:4f:2b:4b:aa:6e:8e:a1:2f:60:e0:
84:37:87:2f:5a:41:d8:8d:1e:7b:cb:4a:f0:20:da:6a:c7:b7:
ff:de:47:1e:1e:9f:dd:9b:55:ea:b0:8a:ba:eb:9f:78:c4:f2:
82:76:72:5c:51:cb:32:ca:86:93:77:3d:ef:1c:50:6f:28:31:
2f:84:83:a1:1c:11:8e:6d:91:19:32:e3:a9:ac:fa:58:57:29:
42:3e:a9:c9:b2:80:0f:14:ee:ba:48:aa:50:11:b0:a2:a3:06:
18:6e:54:92:1c:06:7c:c0:37:08:25:3e:6d:7a:3b:81:7b:e3:
33:92:f4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:50:04 2026 by rpki-client