Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier: bEHN6dMMVIp+T7LYxvd4PzTe32BFVwkPfEPR8PCJh9U=
Subject key identifier: 58:B7:EF:09:BD:99:4F:89:A4:30:F6:41:1D:E4:3F:1F:29:34:F9:F2
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 019FA899F0BFA03D46459BFC1F416827EB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 12:01:28 +0000
Manifest this update: Tue 28 Jul 2026 12:01:28 +0000
Manifest next update: Wed 29 Jul 2026 12:01:28 +0000
Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: ZpiMRHIcwny99sW3Snc5x7hvygTGBf3P3Q/vK/B9rv8=)
2: LmwyPllgT27iDmcYfX7agNvw4rA.roa (hash: kpm3XdXtMEMrfdjcWSVw0huoNKfPlGFqAs8H1ASM9Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:f0:bf:a0:3d:46:45:9b:fc:1f:41:68:27:eb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Jul 28 12:01:28 2026 GMT
Not After : Jul 29 12:01:28 2026 GMT
Subject: CN=58b7ef09bd994f89a430f6411de43f1f2934f9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:de:62:00:67:e6:e2:b7:99:2e:86:c4:28:15:
27:c4:b1:66:12:2e:c9:12:e3:ef:f3:0c:ef:bc:c8:
73:23:dc:c0:6f:2d:9e:c6:eb:00:85:72:37:bd:41:
85:7b:22:10:83:51:a5:09:d1:2d:9a:4e:e4:39:5d:
dc:f9:9e:1c:82:8f:fb:9e:28:34:91:f2:9e:a5:17:
58:55:98:9a:58:c0:fe:7f:ad:7b:0c:5e:d2:c2:a1:
14:f4:b3:d2:92:d5:30:bc:34:42:e4:b3:37:37:6a:
2e:2f:f9:53:3f:90:6b:7d:e4:95:87:03:39:bd:cd:
84:7f:14:66:29:12:db:b9:78:73:ef:d1:09:b8:04:
c5:1f:c4:0c:63:92:0f:ba:4c:99:95:34:fb:e3:c3:
0e:73:3e:78:5e:d9:a9:b4:29:0d:41:2d:09:30:bd:
be:3b:fa:4b:53:37:4b:6e:d0:97:8b:0d:27:8b:ee:
11:0e:97:c2:8d:16:79:b3:68:d6:1c:73:f8:96:97:
bb:b7:91:6d:2e:98:d9:10:84:3b:f6:e6:7a:5a:9a:
cb:4d:f6:56:60:80:3a:ba:20:32:93:85:02:a8:72:
2a:60:2c:db:af:c3:4d:95:ba:92:69:07:ad:c2:d1:
45:f2:fc:6e:25:e3:0c:78:58:c1:4d:dd:04:2f:07:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B7:EF:09:BD:99:4F:89:A4:30:F6:41:1D:E4:3F:1F:29:34:F9:F2
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2f:ae:49:95:03:1a:99:7e:1a:b6:d3:74:03:21:da:fd:49:
e7:7b:af:85:6f:ff:fb:13:d2:d0:20:e9:b9:34:30:2d:7b:4b:
92:2d:90:08:3d:13:4c:34:64:a4:b9:27:69:ac:28:9b:72:0c:
d8:de:b3:1a:96:d4:cc:cd:f9:1e:a1:66:5e:2a:16:5b:66:62:
30:51:23:5d:3a:b8:f2:f0:86:eb:73:6d:56:77:c8:8f:1b:a1:
96:fc:0c:1b:f8:34:b0:85:15:83:33:88:ec:c0:bc:e4:e8:3d:
2b:bf:f3:61:c6:ab:59:55:23:be:ca:5b:10:3c:2b:09:b4:4f:
c4:bb:ac:49:c1:09:fd:be:71:a6:02:21:9f:2a:69:fa:ed:93:
89:8b:ac:e4:3d:b7:5f:eb:0c:f8:f0:d6:79:90:89:30:e4:a5:
db:48:80:8c:35:08:1b:1d:ab:20:b3:0c:5b:a3:dc:ff:eb:3e:
07:50:b2:3d:0e:93:dd:1e:14:6b:39:8c:32:9f:47:5b:7a:d0:
b9:48:e3:92:e7:97:68:ee:8d:a4:0c:94:da:41:e8:e1:45:11:
cf:df:e2:d4:8f:53:75:53:bb:01:0f:81:f5:85:3a:8f:66:2b:
a3:7a:a8:b0:93:df:cc:36:37:0d:4a:0a:66:39:29:ca:af:4f:
ce:a8:6a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:22 2026 by rpki-client