Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: P/m2uciPDWqsQoPw9KPsgrQj52odmxwPWVb3qfuhy3Q=
Subject key identifier: FB:7A:36:B3:6E:7C:F0:C5:63:36:5C:F8:8F:39:4E:86:F8:02:3F:96
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 019F8F1089A773C1982CC0292FB61CC7CF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 13:00:53 +0000
Manifest this update: Thu 23 Jul 2026 13:00:53 +0000
Manifest next update: Fri 24 Jul 2026 13:00:53 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: B5I7NINxe4A2+BwxW33yKituCdFpzMBG89N8zTzgxqc=)
2: 8J_-hWHGPWEYN0vjZgr-eCklQg4.roa (hash: qBQWLHkgusN1QQCqlJvTYnenuo1KralG8LLl2synFhs=)
3: elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa (hash: 8uKk6fr9oWkQeVcBDQrXHD0Zpv9/C37D7zWtE6D01OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:89:a7:73:c1:98:2c:c0:29:2f:b6:1c:c7:cf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Jul 23 13:00:53 2026 GMT
Not After : Jul 24 13:00:53 2026 GMT
Subject: CN=fb7a36b36e7cf0c563365cf88f394e86f8023f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:ef:fc:0a:c7:71:ac:af:26:4e:d0:87:36:
6b:d7:9e:31:75:59:12:0c:98:05:9f:0e:5c:89:a3:
55:41:91:53:e6:7d:52:a1:98:2b:48:2e:ab:9f:0f:
01:43:b7:61:18:5b:4c:1a:a3:b5:58:28:cd:da:43:
fc:17:46:68:3b:b7:bd:72:bc:e6:bf:7e:43:52:bc:
72:19:b4:c4:ab:48:fe:00:56:38:5e:63:99:4a:f2:
e4:1b:ce:30:20:dc:01:9e:e3:91:70:df:ef:a2:3e:
0e:d2:01:b7:b9:10:38:46:8a:01:24:b1:fc:99:f2:
34:15:80:87:47:5a:d4:dc:45:18:55:df:a8:56:70:
66:de:9d:bb:be:2f:56:91:29:1d:60:77:1b:5f:a6:
ae:00:9b:d8:e6:a4:d7:6f:55:3e:f9:ff:0c:76:01:
cd:ee:0f:4f:9c:44:6d:0d:77:17:5b:53:47:77:af:
fd:23:a5:1d:3d:9b:e6:70:12:c4:15:76:cd:56:05:
2f:d3:e9:58:a9:64:be:63:78:12:8b:88:2f:92:12:
1a:41:66:6b:b8:cc:9d:f8:b5:85:e7:0b:d9:99:1c:
02:63:24:01:fe:74:11:41:68:8d:2f:ba:e6:b9:49:
89:84:e4:0e:e8:de:15:52:72:7b:2d:73:09:f7:ec:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7A:36:B3:6E:7C:F0:C5:63:36:5C:F8:8F:39:4E:86:F8:02:3F:96
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a5:1f:b6:69:f9:40:89:48:47:61:17:95:73:72:3d:ca:3e:
d0:fd:ff:62:a6:e7:74:e1:f0:25:28:3b:14:19:05:6b:46:19:
72:5b:a9:49:1b:16:e9:f4:8f:f0:d9:6f:97:29:cc:90:62:fe:
dc:dd:34:34:fc:40:73:ff:52:8f:cd:6f:92:ce:90:07:d7:aa:
f8:cf:53:30:92:5c:22:e1:ff:98:99:9f:3b:a6:96:87:3e:62:
1a:c7:97:c7:3d:4b:36:2b:4c:b5:55:bd:61:70:f9:1b:83:c4:
ae:3d:2a:37:8b:ec:35:a1:e4:ab:1f:2d:31:4d:5f:1d:4e:13:
cc:22:55:a9:fb:a3:6b:bb:31:56:43:2b:49:40:3c:a5:59:ce:
e4:76:15:1d:bb:45:90:02:00:22:70:d1:24:20:69:08:2e:d4:
4e:4a:16:43:8c:0b:e5:f4:c4:bf:2e:c5:95:17:37:5d:1a:60:
38:6c:0a:56:8e:53:d1:c0:96:c7:20:68:7e:d0:3d:28:48:a1:
e9:43:a9:35:8c:0b:8b:38:ec:6c:58:66:44:ec:d3:5a:dd:e0:
a9:69:d3:35:c1:8c:7e:d4:cd:9d:e2:3b:65:a5:40:5f:27:43:
79:8b:6b:a5:d9:89:b4:61:ce:51:df:42:57:9f:8b:4d:ba:cf:
35:06:8f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:39 2026 by rpki-client