Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: kDE/xVXXoPoeSCZxmDOGvjDlrO3mWCvFmBe7DwbQiA4=
Subject key identifier: EB:09:59:3F:B2:33:E1:54:D3:73:9C:4C:5D:5C:13:2C:B9:6F:90:AE
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 019FA9E2CEEB5356F1A897A97829128584EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 18:00:41 +0000
Manifest this update: Tue 28 Jul 2026 18:00:41 +0000
Manifest next update: Wed 29 Jul 2026 18:00:41 +0000
Files and hashes: 1: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: ipLQWlX8Qj8JjM3QlKD+mb0QvJ/7ebvv5JSln9BTWDc=)
2: 7DFhLxfNsNdBG7misMM2Gd6pq98.roa (hash: 91BxkeL//UY4lGamLg4LH3uIYXXl6dNvyu0iOuqwroo=)
3: kOLGFIQ68N0t89GXfLW_l-tuaZs.roa (hash: JEbR7GHzj1yo7N6pB32D4eZu3GhxlqvfkdXGhcPXMmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ce:eb:53:56:f1:a8:97:a9:78:29:12:85:84:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Jul 28 18:00:41 2026 GMT
Not After : Jul 29 18:00:41 2026 GMT
Subject: CN=eb09593fb233e154d3739c4c5d5c132cb96f90ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:43:63:9f:d2:d2:61:46:5f:da:78:89:68:
69:76:14:9c:fc:d3:40:eb:13:43:04:9f:a0:6e:07:
98:56:95:be:02:55:6a:6c:98:03:75:3a:b1:cd:f8:
2a:e4:99:8a:5a:9d:44:6e:17:e1:58:52:77:dc:ae:
42:1d:f8:d2:9c:a5:08:44:4d:46:7c:b9:ab:43:ee:
67:4f:b0:6e:e4:54:d0:9c:e4:21:3e:17:30:be:61:
98:0d:37:5f:ce:3e:76:23:9d:4c:ac:54:9d:c5:ed:
d3:6f:e3:2b:91:34:0e:b6:52:6a:c8:65:bb:c6:ac:
d8:bd:df:fb:e1:b5:c8:d0:3f:2a:2d:bd:ce:fb:9d:
5d:0d:2b:37:78:41:50:0c:38:07:6e:d5:6a:e9:71:
81:c3:fc:c5:eb:de:5e:b8:c2:9d:d0:58:3f:01:69:
53:a4:48:1c:e7:ec:ab:61:ff:bd:38:46:b0:08:f7:
99:4c:9a:c4:32:50:8f:d7:67:8d:3e:96:4f:35:f9:
8f:40:91:37:ad:ae:db:59:a5:30:b3:74:11:33:64:
9d:e7:ea:d7:51:96:19:b6:1b:c9:de:cd:49:47:4b:
75:8a:5e:4f:13:ec:55:90:a9:8c:43:0b:1d:a9:76:
d6:80:ea:63:98:59:37:d0:02:83:77:11:80:ab:f1:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:09:59:3F:B2:33:E1:54:D3:73:9C:4C:5D:5C:13:2C:B9:6F:90:AE
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b1:bb:5b:94:5e:97:d2:fe:33:35:cc:e1:34:ab:b9:8f:73:
0f:0e:82:7f:54:de:54:24:3a:6f:2c:78:8e:eb:9a:ae:a2:24:
c5:38:d9:0c:b3:06:ca:c1:8d:01:47:b9:62:20:57:bf:3d:24:
e4:da:cb:ba:b0:fc:3a:2f:bd:f7:d5:d7:25:c0:44:a6:b0:2c:
44:27:b4:6a:2d:ac:49:59:ac:b4:0b:20:8e:70:f5:22:6e:4f:
10:07:53:78:83:f1:f2:65:f3:f0:41:91:b1:3e:0c:c0:1a:b9:
7f:90:a4:55:0f:3c:25:b4:0a:85:fb:53:ec:d5:a1:df:98:7d:
d9:d6:30:27:c8:8e:b5:ff:66:55:14:f8:12:0a:90:39:4a:14:
1b:9e:0b:42:ca:05:2b:60:60:44:48:c4:40:63:2c:5b:57:ee:
a1:ed:96:2c:99:37:d2:fe:90:9a:fc:39:1a:e0:f8:25:24:a2:
33:4e:49:d7:14:b5:3a:b2:c5:b1:be:83:30:88:31:a9:23:fe:
7c:6b:78:8e:87:14:f7:17:9a:f2:65:c4:fe:39:79:51:cc:ba:
c8:ea:61:84:3d:95:29:40:42:24:de:d3:dd:fb:b9:17:c2:cc:
91:7a:62:d3:16:56:ed:ec:e8:4b:05:f9:ae:8c:a6:64:7a:c5:
a6:02:f5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:45:01 2026 by rpki-client