Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: +8OcriIohz6Qp7OgfPA/qUtE0clAE6GPlkaXfj/b56g=
Subject key identifier: 74:EE:82:D0:1C:7B:AE:72:1D:E9:AF:50:2A:9F:55:47:1C:CE:0A:9E
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 019F90C7C6F0FC9EB0094DD04239DF12F482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 21:00:39 +0000
Manifest this update: Thu 23 Jul 2026 21:00:39 +0000
Manifest next update: Fri 24 Jul 2026 21:00:39 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: 3a9o9mvX0FlJVa+XXDMgxTL7Jwf90HpbUoShNLfBsyw=)
2: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (hash: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:c6:f0:fc:9e:b0:09:4d:d0:42:39:df:12:f4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Jul 23 21:00:39 2026 GMT
Not After : Jul 24 21:00:39 2026 GMT
Subject: CN=74ee82d01c7bae721de9af502a9f55471cce0a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:ef:b1:72:1b:34:03:93:2a:fc:41:fe:6b:
9d:e4:2a:7c:f0:1c:d2:f8:7f:db:d5:87:f8:9b:eb:
aa:b6:58:8e:82:0e:90:7e:60:b2:bb:4d:78:ab:97:
ca:0f:de:3e:90:2e:82:72:8e:4f:4d:8a:30:40:45:
ff:2f:f7:67:d6:66:fb:31:11:75:fa:0f:b2:99:cc:
0b:c2:7f:dd:53:7b:68:28:26:ac:b0:b1:45:cb:e5:
50:14:25:74:59:04:ff:86:7f:5a:04:f8:3c:d1:c2:
55:e1:c9:d8:c8:09:18:1d:0d:a0:f1:ef:19:20:f2:
a2:04:2e:63:13:7b:d0:78:59:81:a2:ef:18:9b:32:
03:81:1a:c9:27:31:77:34:f4:64:8c:6a:47:c7:14:
85:46:42:97:be:a8:84:09:4f:33:3e:f6:20:e1:8f:
55:d9:ad:33:20:4f:81:03:66:72:14:c0:41:08:96:
e5:d3:d4:92:ab:f4:da:c4:fe:60:f6:73:77:60:c4:
ef:7c:65:0c:ab:40:30:44:18:3c:ca:0c:70:4a:e5:
03:83:b6:81:2a:d4:e4:b7:dd:ea:20:64:4a:53:0f:
7b:bf:97:3b:82:16:3a:ce:3e:55:5b:aa:20:33:75:
c7:6c:d8:4d:22:8b:aa:d3:6e:1b:8f:94:b3:3f:eb:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EE:82:D0:1C:7B:AE:72:1D:E9:AF:50:2A:9F:55:47:1C:CE:0A:9E
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3a:88:3e:c2:54:98:f8:f8:82:f2:5b:07:40:8f:6e:9d:fc:
be:c8:8b:78:81:bc:7f:29:46:13:8f:6e:2a:8e:18:ee:aa:aa:
bf:c0:cb:db:34:23:39:09:83:83:2a:dd:46:99:0f:85:f4:0d:
9e:75:db:94:59:41:c3:59:fc:5e:4a:b9:3e:dd:d5:1f:b1:54:
55:cb:55:f1:b0:f0:8e:39:b8:2d:ef:47:ef:f4:cf:fd:81:4e:
25:63:96:4d:69:57:48:e1:4b:c4:db:e2:69:23:0a:cb:d3:87:
bd:3e:b5:ef:46:44:4d:01:8c:d4:19:df:08:4f:69:0e:25:f6:
e7:2b:6b:82:a3:da:81:9a:d3:65:71:75:a5:34:02:24:08:6e:
84:13:e3:0a:32:a9:5c:02:f5:55:e4:a7:96:35:87:8d:c0:e6:
9d:45:a1:19:a1:82:7a:46:9d:41:ac:0c:59:87:0f:85:41:c6:
53:52:ab:0a:60:7c:36:b8:92:a8:59:c9:ea:c3:b2:15:e0:bf:
40:5f:1d:37:bc:84:66:36:85:ec:0c:dc:2a:3d:12:00:e3:da:
28:ff:bb:c6:17:8b:41:d0:f5:bd:35:8c:1c:50:43:a7:b4:8a:
96:54:56:fc:28:77:03:45:34:4c:d6:e3:23:11:06:e4:64:b9:
98:48:49:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:26 2026 by rpki-client