Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: Joj0oIAZgLgndQ8YCgrekxJVrFLtGsPEyCCSgumwVYw=
Subject key identifier: 10:F7:0F:61:8C:D2:1E:EB:4B:61:7D:1F:CD:6B:3A:B3:21:6C:95:FD
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 019F9091207AB58789F68F42F56AB3F63FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 20:00:57 +0000
Manifest this update: Thu 23 Jul 2026 20:00:57 +0000
Manifest next update: Fri 24 Jul 2026 20:00:57 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: BnejdfiNXQyxzDQVi5lTu67nATyFDsMtYPjZ5hB1Ato=)
2: 3zlYESujx6iqyh6hQsCczNEcHfA.roa (hash: giiowx0wopsav1ocUyq7di4cnnYmyvwdPI251v0t4Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:20:7a:b5:87:89:f6:8f:42:f5:6a:b3:f6:3f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Jul 23 20:00:57 2026 GMT
Not After : Jul 24 20:00:57 2026 GMT
Subject: CN=10f70f618cd21eeb4b617d1fcd6b3ab3216c95fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:b1:e2:49:94:4a:6e:d9:60:b2:6b:2c:69:
26:bb:f2:b2:55:1c:10:6f:4f:89:28:10:f7:4f:e5:
99:e3:3b:86:0e:63:c7:73:ee:73:86:fd:fc:24:f8:
ad:57:05:0a:81:20:10:0f:42:34:ac:98:db:d2:9f:
6b:84:1b:b9:75:82:f4:a0:3b:8d:09:4d:5d:26:3d:
a2:af:9d:d7:7d:53:26:af:a5:01:69:df:d2:dd:1a:
78:44:6d:f5:fb:04:45:08:5c:53:ca:3b:f0:db:98:
24:c8:fd:7f:6a:17:b6:12:f9:7e:fe:7c:e2:b3:fa:
46:a7:8e:98:5c:59:8d:91:0b:b9:74:02:84:74:5c:
5b:d8:e0:1d:16:72:e1:91:e3:43:60:d7:dc:e4:5e:
9c:13:30:61:22:b9:d0:92:eb:2e:cc:6f:46:ee:23:
62:de:9f:8d:14:98:26:31:e0:06:aa:5d:c5:c6:45:
fc:f5:84:9d:05:39:0d:4d:11:75:16:0f:23:c8:f6:
95:ae:7a:6f:b0:93:c1:83:6b:32:eb:15:2e:cd:98:
64:d7:e3:dd:88:71:ff:ef:d7:ff:d4:6d:98:9a:9c:
72:8b:65:ff:e1:db:05:70:d7:32:93:0a:0a:60:00:
1d:38:47:0f:0f:63:21:01:60:2f:22:a6:08:91:6d:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F7:0F:61:8C:D2:1E:EB:4B:61:7D:1F:CD:6B:3A:B3:21:6C:95:FD
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6f:08:2c:00:2a:ba:15:39:2d:fd:03:c1:65:44:be:9d:c4:
91:b5:d7:32:a2:16:1d:58:7a:81:fe:bb:da:13:c8:28:39:6e:
2a:35:a8:22:b6:4c:08:21:ab:86:76:d5:93:cf:10:cd:a8:63:
37:aa:91:18:9e:3f:2e:bc:4e:8f:51:7f:21:d7:67:12:cf:6c:
e6:60:86:6a:9c:e1:ec:8b:16:f2:f1:8b:d9:48:62:06:12:32:
e6:03:5f:d3:45:80:af:a7:9c:a3:a8:66:69:aa:24:fa:b9:49:
de:a4:b7:4b:a2:f8:81:94:d6:05:88:8a:37:84:4e:95:3c:85:
81:48:3e:95:c2:18:74:83:54:3b:34:8d:4e:e0:71:5c:ae:cd:
7b:96:b3:79:8e:51:34:e2:10:24:95:81:62:e4:c0:5a:08:1d:
bf:f6:a5:07:62:42:b9:1f:f2:27:22:64:b9:20:93:69:22:5c:
f3:54:bd:5f:d6:98:32:9d:d8:4d:03:03:3f:28:e9:8f:44:9d:
0b:5e:7a:cd:a7:be:78:11:79:ab:ab:4a:83:96:78:e9:cf:e3:
ae:a6:c9:9d:13:b1:a6:e2:a4:d1:34:c4:f1:0e:f1:30:b1:5c:
3f:68:17:08:fc:61:7c:1a:6d:86:8d:c1:df:34:e8:70:b9:7d:
a7:67:c7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:56 2026 by rpki-client