Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: f19TxcWOWu2qtXGjDm4BVd1FNHzxDIsoO/SPYC+eXSo=
Subject key identifier: 69:B5:ED:EC:77:50:A7:41:2A:9F:26:73:22:BB:7B:2A:0F:05:B0:66
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 019F90910154D433FD9E7686B064BEF8A18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 20:00:49 +0000
Manifest this update: Thu 23 Jul 2026 20:00:49 +0000
Manifest next update: Fri 24 Jul 2026 20:00:49 +0000
Files and hashes: 1: QXMTv56aBNAUruAXJC7IVsSmMG8.roa (hash: jId8pBbIUwFi+HQiN7AbLv5/eBeeSyed+4bqRVzluB0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: oYmIt6Gc8o2aoziD0HYGWjYGWT1e7540hKk2jg4PEFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:01:54:d4:33:fd:9e:76:86:b0:64:be:f8:a1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Jul 23 20:00:49 2026 GMT
Not After : Jul 24 20:00:49 2026 GMT
Subject: CN=69b5edec7750a7412a9f267322bb7b2a0f05b066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:00:00:d5:6f:45:3a:d2:ca:0b:36:fe:9e:
c5:e9:88:98:21:dd:cc:12:2b:dc:ac:e5:54:63:3d:
42:71:1a:81:37:4b:19:85:66:90:e3:b3:6a:6d:f4:
46:ac:75:a5:27:2c:81:3a:8b:1f:f1:ea:b3:d8:6c:
31:d6:58:6b:90:28:d1:75:72:73:86:fe:41:eb:24:
d5:77:48:64:32:70:7d:60:76:dd:11:ab:a4:e5:6c:
9f:11:f9:6b:74:23:50:e6:94:cc:ba:27:22:67:21:
dd:13:86:0c:46:9f:0b:45:d9:79:20:24:bf:0d:22:
14:54:10:e9:cd:73:17:80:64:92:ef:60:26:b6:96:
cb:69:9d:7f:b5:a9:d1:f3:9b:34:5f:cc:92:3a:f4:
b3:6d:3a:54:da:99:fa:7d:41:19:0e:f9:c9:17:32:
77:11:33:50:6f:55:5f:29:ad:84:1a:8c:d5:47:6d:
80:68:4d:cc:a2:b2:06:c7:b8:3f:43:19:c3:54:33:
d0:57:39:4d:18:ea:a6:fa:a6:c3:aa:cd:30:32:f3:
cc:ea:0b:7e:d6:08:7f:d0:4b:92:ed:74:6c:f9:c7:
3c:1f:44:8b:40:60:20:b7:fb:87:bf:66:b1:26:49:
95:07:69:47:2c:17:1d:f9:1a:77:ca:13:e9:95:cf:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B5:ED:EC:77:50:A7:41:2A:9F:26:73:22:BB:7B:2A:0F:05:B0:66
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:26:1f:94:78:b2:1c:8c:e8:a0:8f:cd:db:18:d6:b4:fb:e9:
59:36:3e:2b:49:f6:4b:52:9f:3c:2b:78:02:22:35:a8:22:55:
a0:3d:a6:63:e1:e8:ff:78:a6:b3:6c:9f:fb:dd:34:85:6e:d9:
65:f1:17:af:26:2d:af:80:76:31:7c:9a:04:91:4a:07:12:a8:
14:13:f5:cb:33:44:66:d6:e1:b5:b1:c7:5e:c3:37:70:6c:f4:
f8:94:61:92:4b:38:52:6a:c5:8d:b3:3f:e1:e2:bb:d6:83:84:
06:61:6b:0b:95:b9:f9:d2:03:cf:81:d2:03:d9:09:4b:7b:55:
c6:0a:24:c0:1a:26:28:1a:e6:24:ec:34:9d:c3:03:71:98:ba:
fe:67:07:15:88:37:6d:a0:e1:92:e5:d8:fb:34:2b:0d:7f:9a:
99:9a:f8:1d:77:91:d0:d8:4f:43:48:6e:fe:43:92:00:ce:b6:
8a:4c:71:96:29:f3:56:e9:6c:5e:f8:61:6d:b1:c5:d6:39:d8:
39:98:0a:72:5d:f4:a7:5d:02:64:01:54:c2:2f:d3:cf:13:bb:
0c:d1:2e:cc:e5:ed:3b:5a:3c:be:d7:ae:b6:e6:9a:7e:b5:95:
27:8d:69:1c:7a:48:06:61:47:8d:1b:f3:ce:ee:fd:f3:f8:92:
cd:9b:b1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:20 2026 by rpki-client