Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: Bif10oInVgpC1szwqVP0nsXE5XcR+H9AGG0S0/VCuuE=
Subject key identifier: B4:70:08:49:BD:BC:E1:83:A0:97:A0:DC:F8:6F:D9:45:48:20:43:ED
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 019F905A56A35D79A5A24D36DFDDB324C2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 19:01:07 +0000
Manifest this update: Thu 23 Jul 2026 19:01:07 +0000
Manifest next update: Fri 24 Jul 2026 19:01:07 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: oNfu6PjYRhSNw2aeRsbxzKkbHd1fC26M6q5TIHEpxQc=)
2: SIrHAW8-wlZDKzvy2I8a6ATw1Os.roa (hash: J87HrMwqHtHS9Z8HI1NmmjUGTf0po2q7EzVGTEZtP5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:56:a3:5d:79:a5:a2:4d:36:df:dd:b3:24:c2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Jul 23 19:01:07 2026 GMT
Not After : Jul 24 19:01:07 2026 GMT
Subject: CN=b4700849bdbce183a097a0dcf86fd945482043ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:82:4c:b9:93:d3:96:80:b5:79:07:99:44:
56:11:a1:1b:b5:0a:a8:43:52:e5:5b:ee:4e:d8:94:
1e:f3:b0:0d:04:b9:f0:51:00:5f:cc:5a:8e:f3:4d:
3f:8d:c9:2c:ef:e8:f5:66:b4:79:f5:01:56:5f:e1:
dd:59:82:da:93:fe:b6:e9:01:ff:cd:de:38:e4:94:
ad:18:70:75:58:6b:af:fb:bb:e7:10:df:be:b1:c5:
a1:ee:03:e4:85:52:fd:d0:dd:51:83:19:5f:82:c8:
4e:4b:86:ac:b8:ee:50:2c:58:e5:72:59:ec:76:f0:
77:09:b3:ce:55:cd:d9:88:38:a3:0f:11:89:6b:5e:
73:e0:ce:23:99:90:11:b7:13:fe:72:af:c1:e7:b5:
08:94:6f:02:2b:08:d6:57:d6:02:57:cc:fa:77:71:
38:c9:a1:76:d0:62:4b:9f:d3:0d:49:ab:88:23:7d:
c1:ca:da:1f:7e:be:bd:13:ef:0a:d6:1f:9a:d7:3a:
b0:51:65:90:c5:ba:85:e8:fc:ef:8f:9a:21:fc:21:
33:0a:3f:85:1c:30:42:66:33:a6:02:27:9e:e9:a3:
e0:4f:92:6d:5d:d8:33:c3:10:8f:9c:b2:2e:4f:b4:
dd:23:6f:2c:96:55:2c:3c:fc:b2:32:3f:95:d5:e9:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:70:08:49:BD:BC:E1:83:A0:97:A0:DC:F8:6F:D9:45:48:20:43:ED
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a6:22:3b:03:50:53:3e:2a:4d:8b:49:0b:b5:10:85:d0:09:
e9:2b:81:7a:fb:10:19:80:75:9b:4d:d6:ad:5f:30:07:14:83:
29:2e:bd:7d:96:c2:05:56:06:5d:02:5a:63:7c:01:43:2f:28:
9c:1a:7a:78:27:de:ea:03:db:b9:2a:cb:14:a7:0d:22:3a:c9:
d1:5f:2f:cc:8b:b8:75:8b:fb:35:6b:b1:99:5d:b8:c1:a1:66:
8b:e4:f2:fa:50:62:81:e5:34:97:91:d4:73:6b:d0:5f:01:e7:
c9:8a:97:16:39:d0:f3:42:4d:84:33:7c:14:ee:b3:e7:86:08:
4a:cb:f4:ab:00:8a:c7:c1:c4:ad:8b:be:86:4a:5c:c7:37:e7:
05:90:15:9a:b2:a2:4a:96:ea:26:74:ae:08:d0:02:89:b0:0e:
fe:09:da:42:ae:b7:72:ed:77:9d:af:03:52:50:64:3e:b4:e7:
8a:24:1f:c5:6d:80:9e:5d:8e:e7:02:8f:ae:13:63:60:11:22:
6f:ed:6a:77:6c:5b:5b:96:b9:1d:12:3c:88:0f:d9:a4:eb:a7:
e0:97:a4:0e:65:43:0b:82:f7:56:fd:09:7d:3b:a1:53:85:54:
57:96:f2:7f:54:6f:b8:8b:79:41:99:ef:02:d9:f6:00:03:4a:
a2:ec:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:48 2026 by rpki-client