Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: UYehrEpx6TpRorJ9+sF9tnE3fPi78ufbJkS550J36Gw=
Subject key identifier: 12:1B:E3:5E:67:B7:E9:78:1A:75:81:C6:88:AA:12:14:B2:E8:25:B7
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019F8FB5BF9BF2ED31F4DC41367A4930B91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 16:01:20 +0000
Manifest this update: Thu 23 Jul 2026 16:01:20 +0000
Manifest next update: Fri 24 Jul 2026 16:01:20 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: ZleJjKq++7wk2Au7I5eEUThl0ezRvx/pXCGVQIUD9IY=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:bf:9b:f2:ed:31:f4:dc:41:36:7a:49:30:b9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Jul 23 16:01:20 2026 GMT
Not After : Jul 24 16:01:20 2026 GMT
Subject: CN=121be35e67b7e9781a7581c688aa1214b2e825b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:85:92:bd:c5:7a:fc:74:db:5f:b7:2f:de:a3:
88:c8:43:92:02:af:67:04:ab:c6:b9:be:b8:8f:05:
82:e2:fe:db:81:bc:83:80:45:9f:2e:a9:43:8c:9c:
9f:fd:d2:06:15:bc:80:4e:99:00:a8:fb:35:ce:13:
3e:f3:61:6f:0c:af:f5:1a:4c:7a:5a:06:c1:34:d8:
09:71:c2:56:51:a9:47:47:5e:c1:31:cc:4e:d2:8f:
d5:3b:f7:a7:b0:97:8f:df:cd:2d:e4:ea:2c:32:71:
14:f8:f8:db:3f:ca:4a:ac:6a:66:85:08:bc:fc:b5:
cc:d7:f9:28:37:f2:86:dc:0b:db:8e:99:1a:48:10:
ae:c0:15:2b:2c:79:1d:6c:e7:9a:ea:28:31:f0:3c:
f7:ef:77:68:e1:00:33:66:51:d0:6b:ee:70:df:b2:
ea:8d:d9:38:c7:67:16:85:cd:d4:f8:ac:df:cd:a7:
34:56:ce:67:44:b7:4b:29:4d:2d:9e:62:4d:2b:6d:
3e:9f:d5:f7:9c:ae:04:92:9d:63:34:18:26:1e:1c:
58:77:4a:85:a0:0f:6f:f0:5a:c5:11:9f:a0:46:7c:
21:da:3c:d0:35:04:ad:ca:84:a9:93:99:63:c4:48:
da:06:16:ec:0a:4a:a3:86:fa:08:21:aa:5e:29:86:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1B:E3:5E:67:B7:E9:78:1A:75:81:C6:88:AA:12:14:B2:E8:25:B7
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:09:0e:ee:34:62:96:48:5e:78:0a:96:4f:7a:75:cb:0e:2c:
0d:00:a8:82:8b:eb:ea:e7:01:e6:e4:17:99:52:24:a0:42:bf:
35:54:ec:32:ca:a0:01:64:de:b8:c0:08:cb:a0:52:a8:06:fb:
5d:93:62:81:f7:a3:59:f5:b7:d4:1c:bf:e9:22:db:1c:01:ad:
b4:5c:b8:6f:04:1a:31:b6:10:66:af:33:cd:71:63:89:e2:b3:
10:b2:07:4c:bb:a4:ec:7c:25:92:b2:c8:6b:f4:ea:e3:b5:b4:
af:bb:2c:8a:72:82:19:42:3a:54:5f:bf:83:50:44:e6:67:4d:
72:44:eb:47:31:e3:26:64:ee:eb:74:bc:95:dd:19:cd:0b:24:
a4:a5:01:38:32:e0:f8:de:0e:16:88:c5:8c:30:fd:1e:24:73:
9c:76:fe:a2:0c:2e:71:d6:dd:d9:ff:9b:c4:fc:bc:73:4c:08:
98:a0:5b:37:2f:a1:6c:89:5c:d9:58:c9:a9:7e:43:86:27:1a:
c7:20:52:b6:ca:98:f6:65:1c:61:44:12:a3:bd:87:a7:b0:05:
c2:f3:b8:7d:c3:19:9f:0a:cf:8c:d5:35:a7:cc:dd:9e:5e:24:
1e:aa:26:6f:87:78:21:4b:fe:7c:70:37:a7:bd:85:9d:3f:0f:
93:cd:1a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:34:13 2026 by rpki-client