Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.mft
File: 3kQm9Aw8glD2z8QeHuCfTxHwmmU.mft (raw, json)
Hash identifier: 9JHiWp7ikBst+WERpI8Ch/sToRHbXu5OQAeroVAY54I=
Subject key identifier: 11:8A:9D:52:7D:6C:30:DE:08:E8:2D:43:93:E5:3C:2C:80:C2:49:F5
Authority key identifier: DE:44:26:F4:0C:3C:82:50:F6:CF:C4:1E:1E:E0:9F:4F:11:F0:9A:65
Certificate issuer: /CN=de4426f40c3c8250f6cfc41e1ee09f4f11f09a65
Certificate serial: 019F8F7E4DC0F02EBB981F4723BB397119EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kQm9Aw8glD2z8QeHuCfTxHwmmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:46 +0000
Manifest this update: Thu 23 Jul 2026 15:00:46 +0000
Manifest next update: Fri 24 Jul 2026 15:00:46 +0000
Files and hashes: 1: 2xBsiBaML_prQgrfILUaFOXDCC8.roa (hash: mcBwRAYJwP60OWfO2Vpf/nJ1l9kJ5Z50goum/596W9s=)
2: 3kQm9Aw8glD2z8QeHuCfTxHwmmU.crl (hash: HQx6u3lBYawKOLNWF59h14D5J8jZZDaXdbdIxTrgsWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kQm9Aw8glD2z8QeHuCfTxHwmmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:4d:c0:f0:2e:bb:98:1f:47:23:bb:39:71:19:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4426f40c3c8250f6cfc41e1ee09f4f11f09a65
Validity
Not Before: Jul 23 15:00:46 2026 GMT
Not After : Jul 24 15:00:46 2026 GMT
Subject: CN=118a9d527d6c30de08e82d4393e53c2c80c249f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:9e:8e:1d:4d:b8:88:c3:b8:7c:e2:59:0a:
26:41:22:0e:3d:1e:8c:3b:56:ad:e9:78:de:ba:78:
01:e7:da:62:9c:5f:e0:eb:2a:f4:52:54:84:5b:9a:
e6:3c:7a:dc:d0:9f:cc:9a:72:b0:8f:6b:75:e2:ee:
dd:a9:96:f9:ec:35:29:20:4f:e8:c3:da:d3:8e:63:
9d:5a:55:79:f9:f5:3a:80:74:35:59:58:5e:d8:e9:
e0:0e:33:69:57:23:cc:3d:65:ca:69:d0:22:af:f9:
d0:4c:0f:8c:a8:03:ca:c7:b1:6c:c0:99:17:b5:fb:
7c:49:e0:fe:49:49:ba:3d:73:e7:02:19:d1:8c:ff:
fe:12:c4:20:51:71:99:60:28:66:5c:0f:64:c0:d8:
75:77:e0:9a:b6:e9:3a:7c:59:bb:c9:b1:e1:23:35:
e5:90:ee:d5:9b:5b:cc:96:2b:bc:80:96:a8:77:f8:
2b:1d:d8:7b:b9:a5:bc:65:8f:62:73:ac:97:3f:8f:
95:d3:1d:de:fc:3e:9b:67:4f:2f:1d:53:e5:91:ad:
70:38:df:1b:bf:77:fc:82:72:8e:8e:b6:9e:e8:6e:
eb:b2:ba:0c:d3:61:7c:b0:79:1c:41:47:9c:2f:f0:
06:23:9f:f7:fe:59:43:36:b6:e3:07:08:3d:27:73:
79:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8A:9D:52:7D:6C:30:DE:08:E8:2D:43:93:E5:3C:2C:80:C2:49:F5
X509v3 Authority Key Identifier:
keyid:DE:44:26:F4:0C:3C:82:50:F6:CF:C4:1E:1E:E0:9F:4F:11:F0:9A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kQm9Aw8glD2z8QeHuCfTxHwmmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5b:ce:1e:5c:a1:2e:7b:05:c4:3d:77:59:9a:a5:69:24:91:
e4:1f:fa:ba:d8:f4:b5:1c:40:9f:a7:b1:d4:14:2f:d3:cb:b3:
14:dd:a4:6a:ba:38:88:ab:4b:f4:24:c6:f6:88:9a:55:1d:1c:
76:6b:20:a1:e8:66:66:6d:54:71:94:f5:84:0a:35:fb:cc:d0:
3e:53:4a:16:82:65:a2:60:fe:cb:7b:48:d4:5e:b2:99:0b:38:
de:66:91:54:e0:a5:d1:94:51:c2:d5:f3:8d:a8:c9:51:51:52:
12:b5:ae:db:b7:18:f6:0a:f3:da:e5:ff:dc:c1:8f:32:4a:db:
0c:aa:c7:2f:59:30:e2:8f:86:14:1a:b6:02:24:07:c6:cc:f8:
69:31:2c:28:55:9a:37:ff:7f:f6:d8:9f:23:2e:7c:d4:fd:86:
16:0a:c3:f8:ce:b3:1a:ef:64:eb:06:13:a5:fb:46:cd:03:b6:
c6:ed:5d:db:e6:ef:44:4a:90:2e:8e:f9:38:fe:d2:21:90:c5:
1e:6b:e1:02:6e:bd:49:17:9d:89:1b:fb:8d:0c:6e:30:0c:9e:
eb:a6:96:70:d9:c7:5d:da:72:86:fa:8f:81:45:93:b8:f3:cc:
81:8a:f2:32:e9:94:db:34:91:5d:1c:88:68:a2:75:c8:d9:c1:
85:d4:d1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:52 2026 by rpki-client