Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: zzniu04ZrYpWb22zCkyDj4JLfaQksOn66O6qrNoNCNQ=
Subject key identifier: F1:87:50:1A:C4:AF:A9:8A:5F:7E:55:82:17:F4:62:9C:EF:72:69:3A
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 019FAED1E1B8994549695A60F24576C05423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 1519
Signing time: Wed 29 Jul 2026 17:00:18 +0000
Manifest this update: Wed 29 Jul 2026 17:00:18 +0000
Manifest next update: Thu 30 Jul 2026 17:00:18 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: Dts6PZ37f4/6KKpA8+JOHE1V9j7MUcOG0VgN9ssSsSM=)
2: 6TUuFWgBkm98OJlIkhqINWWAoI0.roa (hash: GA9PdoKCJE0Uq5wLiSfj1Mw/gZ339oU3m0s7B3MQNRA=)
3: _qA7-iuYEvTbfVREYl9q7tay4Bk.roa (hash: Z/glgCy5dfzogAACVBlWtKvnqFreHrzxfTJl0PSlZgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:d1:e1:b8:99:45:49:69:5a:60:f2:45:76:c0:54:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Jul 29 17:00:18 2026 GMT
Not After : Jul 30 17:00:18 2026 GMT
Subject: CN=f187501ac4afa98a5f7e558217f4629cef72693a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:72:a9:ec:dd:85:59:19:bb:c2:ab:8c:07:
49:78:dd:09:1f:82:58:98:82:d0:ff:ff:ad:1b:20:
0e:00:0b:07:4b:03:e6:8c:1c:7b:45:af:74:b7:33:
6c:1f:e4:f7:29:f3:28:81:13:16:7c:0e:f6:59:78:
34:df:22:10:63:6e:e2:4b:34:9d:fc:40:ee:64:47:
94:43:a5:db:43:ae:0a:ef:77:4d:90:79:e0:33:e1:
4f:27:43:71:7f:5c:ad:58:4e:f2:a5:4f:2e:3c:57:
86:ff:25:d3:2a:0a:d8:81:31:9c:20:6d:2b:80:bb:
54:05:8b:54:21:bf:8a:b8:6d:00:16:df:85:9c:22:
e7:85:1b:6b:54:a1:29:89:7e:1c:18:5c:17:27:f2:
86:76:fc:87:84:8b:fd:72:56:5f:60:1e:9b:11:66:
82:5a:64:c8:cf:f5:16:71:8f:22:05:10:5c:fc:c4:
5e:92:93:19:97:56:b2:0f:8b:8d:8a:e8:70:1d:e6:
65:06:6a:9b:36:f3:16:71:47:f7:8c:71:52:f2:46:
c1:40:53:15:6b:b7:6f:b8:12:17:ed:56:67:9c:3a:
cd:80:03:75:de:41:00:06:89:e1:e1:df:d6:8d:56:
db:0b:b8:46:29:5a:6e:46:08:86:b0:33:5a:f8:08:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:87:50:1A:C4:AF:A9:8A:5F:7E:55:82:17:F4:62:9C:EF:72:69:3A
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:68:c4:14:19:02:c2:f1:78:98:43:d6:27:df:99:94:36:a1:
28:b5:0a:cc:9c:7d:10:ea:fb:26:87:46:1a:b3:72:0b:bf:66:
8e:77:59:91:0c:69:2b:d3:ab:e5:04:f3:f2:e7:1e:ed:82:bc:
93:a2:6c:60:6b:d4:14:41:d6:bf:52:86:f1:d3:be:6a:74:38:
88:fd:b7:62:18:ba:fa:fd:08:f2:0e:c3:59:a0:6d:c2:91:65:
14:6b:7e:38:1c:28:79:08:14:d8:73:9f:68:ef:f8:85:52:bf:
a6:ec:c3:46:a9:e2:33:46:c6:38:81:ae:44:82:4d:c0:72:31:
53:bf:5c:7f:e0:1e:b4:61:38:b1:4c:4e:24:a5:f5:82:37:d8:
8d:63:ce:35:c7:cd:1c:c3:96:8c:ec:a8:76:13:55:cc:a9:d2:
14:d8:74:cd:40:56:d1:6c:c0:5b:6a:a0:60:44:a8:a1:2f:fc:
ee:99:78:f1:a7:d6:ac:6f:cd:37:f5:66:21:4d:e4:09:d1:a0:
8f:52:a4:f6:c0:54:5a:ea:0f:ba:c5:e3:00:44:ec:f7:3f:9c:
df:04:2f:28:31:1f:65:d0:fd:82:7b:16:01:df:4b:85:aa:d8:
7d:4f:02:c5:93:e2:d3:5e:15:84:1d:c2:93:8e:0a:aa:b4:42:
f5:b8:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:34:28 2026 by rpki-client