Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File: 3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier: nCTnvkfsXQULmBIzuwc3cvUBx6MUT8aqHCix4DKuSV8=
Subject key identifier: 9A:E3:79:4A:1C:6A:5D:2E:4F:6C:95:05:A4:AA:6D:B8:C9:37:65:24
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial: 019F90909BF9BD1B26301244173AE7A59678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 20:00:23 +0000
Manifest this update: Thu 23 Jul 2026 20:00:23 +0000
Manifest next update: Fri 24 Jul 2026 20:00:23 +0000
Files and hashes: 1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: ZXXnsosQtzZrDyvsbdg/j5OiKRKfiUD52Y7VStopJrk=)
2: 5eF8s6L4dxVdQ8kG6JSRKH5Z-p4.roa (hash: W/wS7TiCIbBG/r7K+DfX8KMRxtkECp8i1kkTUjuuZaI=)
3: 5tcCkCr9HL184Lf-stMsZLwXzY8.asa (hash: W+8BBuc5L8FD4aYBcumTsMn0Sc7cRyfKyOoBOmnm+hw=)
4: Lt-JS9jFkT4UgaNicX0rbzX6mAk.asa (hash: xwZnxqjyxoKeHqIztJC/xo2eZabCtc46qjY8fPIJBWM=)
5: QfmBtp8KP7z9Jf5dlAT_B8Tard0.roa (hash: uRY0F8qxF9a6vSVsKTRXDUbGyb6OveIKtipgP1G7Ly0=)
6: V4te01z2mPYByn_WDoLME3CzX-0.roa (hash: gfJ/GwODtNT85oPrPT0DpykGNXUPo2/It/pR8L+5MmI=)
7: rtn1yFDMEF3uOmDML8IMWwUHHk8.roa (hash: z0koHkmAbR2uxvEhOZByMFluLfmEdIOonXQa6YxqrIY=)
8: ue-Y0ctMxDRIaXof8C95hwV8dOQ.roa (hash: FlHy0MeZzzmzPGhIk531V6sP1Eub2bevIcHJmxYMIHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:9b:f9:bd:1b:26:30:12:44:17:3a:e7:a5:96:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Validity
Not Before: Jul 23 20:00:23 2026 GMT
Not After : Jul 24 20:00:23 2026 GMT
Subject: CN=9ae3794a1c6a5d2e4f6c9505a4aa6db8c9376524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:be:1b:e2:48:7f:3a:33:4e:37:12:73:53:
85:58:d9:7c:16:61:49:b4:3e:87:24:6f:a9:4e:22:
d1:55:7c:39:65:4a:88:78:a2:6d:a9:0e:ef:df:4b:
07:84:ae:95:ea:d7:c2:cf:3d:fa:23:fb:c6:f4:9d:
ca:67:d1:83:62:08:1a:c7:1e:b1:eb:e3:11:2e:7a:
cc:cf:24:5b:c1:cc:3d:95:b2:85:7e:12:90:cb:af:
93:a1:f9:29:68:2c:b2:bc:f2:6e:e8:4c:6c:c3:3a:
76:b1:e5:23:41:cb:82:64:9e:b6:8f:fd:40:61:21:
83:44:6a:7f:92:e2:6f:a2:f5:3e:4f:cf:f4:52:8a:
d2:86:e2:6a:b0:27:a7:7d:85:4b:ce:23:02:10:21:
f9:3f:74:c6:de:20:2e:0f:b3:29:e7:b3:a2:55:60:
84:67:b6:7c:8a:55:ff:a9:c8:6b:35:73:d7:37:42:
4d:c4:d3:12:92:17:66:10:42:1c:06:ef:9e:58:6e:
28:84:6d:25:47:65:3f:1d:68:9d:d8:d2:98:40:c0:
18:be:4b:ec:fc:50:5d:bb:b7:d8:7d:72:6d:07:b5:
d2:0f:31:44:5d:c0:e9:50:13:69:39:f7:6b:5f:58:
7d:53:44:b0:65:98:ef:dd:f7:76:b8:99:f9:6a:e2:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E3:79:4A:1C:6A:5D:2E:4F:6C:95:05:A4:AA:6D:B8:C9:37:65:24
X509v3 Authority Key Identifier:
keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bc:77:93:cf:9b:32:95:84:3b:62:12:ba:28:9f:80:ea:e5:
e1:23:2d:78:e8:f7:a2:63:7a:20:13:d9:21:e2:65:c9:a6:4d:
10:b5:0e:f4:8b:e0:e4:a9:66:d8:a0:07:bd:0c:e8:7a:8d:76:
63:e7:2e:05:e8:83:c5:79:f0:28:e8:70:3b:fe:99:de:c8:cf:
cc:e7:7f:5c:07:95:14:d7:3c:c5:c9:bd:c6:50:71:1a:78:29:
62:37:dd:3d:13:69:28:f1:a0:36:ed:25:9e:0e:f8:a2:42:21:
9b:a9:0d:9e:e3:92:7f:2e:30:9c:a9:f9:44:a9:45:25:57:a6:
0c:64:20:2c:7d:95:0c:d8:78:c3:12:13:da:ee:a3:5d:da:39:
c4:a8:b3:e0:13:2e:7c:b3:46:b4:6b:73:21:70:02:80:3a:8e:
28:81:d0:67:1c:2d:c7:9f:a1:54:59:d4:96:00:d1:38:da:d5:
bc:01:23:88:67:1c:2a:5f:08:6f:21:8c:37:cf:6f:b6:34:82:
7c:6a:cc:80:74:94:f8:38:e5:2a:4b:d8:6c:0a:6a:7e:bb:7e:
7e:41:d8:f3:37:fa:28:b0:23:eb:5e:3d:33:56:cf:c8:34:09:
54:50:06:8b:a8:d9:7b:3e:35:0b:80:73:03:0b:de:4d:a5:74:
b3:30:10:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:48 2026 by rpki-client