Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier: ec495uij1oz+lf2FPfMNWpvNhnDA86wlDBiadhQLYa4=
Subject key identifier: 29:E7:AF:50:63:9C:40:A7:EC:17:C9:5A:FE:E1:CF:9A:08:BC:69:99
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial: 019F905A057BDC9689BAAB69B63ABC4D84D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number: 066E
Signing time: Thu 23 Jul 2026 19:00:46 +0000
Manifest this update: Thu 23 Jul 2026 19:00:46 +0000
Manifest next update: Fri 24 Jul 2026 19:00:46 +0000
Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: aN7/tpPAV5kAU7Xk5B4U59qRYGbE03ppw5ua+oqn8Z4=)
2: GUtmTasoYg9vC_X6TeYo5LqnthI.roa (hash: h4pcOYZGVhmcTnXyyDF08GhSsY9jTxf6Vxsbll0E63Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:05:7b:dc:96:89:ba:ab:69:b6:3a:bc:4d:84:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
Validity
Not Before: Jul 23 19:00:46 2026 GMT
Not After : Jul 24 19:00:46 2026 GMT
Subject: CN=29e7af50639c40a7ec17c95afee1cf9a08bc6999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:10:48:ad:3c:44:a6:fa:51:34:48:8a:cd:
51:fb:61:a9:4e:5d:dd:be:a4:09:30:2a:82:2d:f3:
ba:e5:f8:d2:b2:86:54:77:80:46:59:18:e5:81:fc:
68:5f:d2:20:ed:a4:cf:6c:19:b0:fc:f6:8d:f5:dc:
94:d6:50:ca:af:39:9a:21:43:89:30:69:87:f6:8b:
a6:a6:76:1f:33:c5:0e:c7:5c:4d:19:d6:31:17:6a:
48:f9:5c:38:09:81:0e:34:c6:66:23:13:28:cc:40:
9b:71:4e:e2:e1:d6:17:b4:b5:92:08:50:ea:d1:86:
b1:78:29:35:3d:c9:6f:ee:e8:35:3e:ca:06:97:c4:
cb:f4:f9:09:e1:b4:c8:5a:6b:76:82:76:e2:74:b5:
00:cb:3f:32:02:67:cb:0b:2a:c4:a1:c9:90:aa:62:
65:f6:68:42:bd:98:b5:d1:67:69:67:30:66:88:61:
55:62:b8:a4:47:dc:77:f9:43:06:34:f2:4d:57:db:
ed:b4:9e:94:4c:a1:9b:fe:3f:ad:75:80:f7:99:11:
1f:5b:1e:d4:e2:86:22:63:d8:18:a6:fd:7a:97:c4:
c2:6f:50:63:f1:4f:e8:d8:97:41:4c:0b:70:56:93:
89:93:8c:d2:91:63:f0:0a:6a:7c:de:38:44:48:6d:
c0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E7:AF:50:63:9C:40:A7:EC:17:C9:5A:FE:E1:CF:9A:08:BC:69:99
X509v3 Authority Key Identifier:
keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3f:31:36:89:ba:5f:2f:66:45:88:11:f3:26:de:a3:28:87:
54:a1:80:f1:6e:cb:42:f0:2d:28:0e:a9:90:21:b8:67:40:16:
f7:bc:2a:2a:42:aa:5f:5a:0b:cf:85:c1:4a:97:9a:57:1b:3c:
79:bb:48:f3:a5:72:de:52:06:5f:50:6f:e6:3d:09:e6:23:bf:
4c:52:c8:2a:77:18:d4:9d:52:b4:01:6f:a0:c3:e7:01:50:b7:
da:01:87:a0:e5:26:07:29:b1:a9:f4:5d:b5:50:66:02:53:fe:
93:23:5b:72:d7:22:52:bb:38:ac:b8:e2:e3:8a:80:cf:63:ac:
36:85:04:6c:57:63:cc:d4:23:0e:a8:aa:ed:98:6a:75:dc:a3:
b2:ac:e5:aa:d2:22:f1:a5:d7:f2:c4:35:4d:5a:c2:ba:ab:76:
9b:29:9c:5c:32:2b:05:4d:bd:96:a2:e3:a3:14:a2:cb:fc:67:
bd:a7:2a:72:7f:db:4e:0c:e3:96:8a:b5:95:c5:5f:62:6b:b4:
b5:74:ef:37:5b:fd:68:a3:9d:0b:c2:ee:c2:04:66:68:0a:57:
b1:14:c1:24:46:45:e4:d0:a9:ef:91:4f:5e:27:68:12:5f:5a:
a8:71:2c:c0:e3:2a:39:67:76:cf:11:6b:00:b3:b5:f9:bd:a9:
62:4a:ec:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:20 2026 by rpki-client