Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: X188pvgDgdybNTLcoFYf4a8BhB9GCJoMUNzS2cQo1Tw=
Subject key identifier: 65:2D:C4:88:7A:F7:8A:FD:B6:48:90:BD:25:B0:25:62:1F:E9:E2:58
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 019FA899F4E874F11CC70275DF0EA71F44DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 1912
Signing time: Tue 28 Jul 2026 12:01:29 +0000
Manifest this update: Tue 28 Jul 2026 12:01:29 +0000
Manifest next update: Wed 29 Jul 2026 12:01:29 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: tsJhWyWeAeNnAcJVIrovGhG+yzTybvqulAojcYdcv8A=)
2: xU2EDS3A1kqxHB5fmWawALQua5w.roa (hash: gy/kCjpuCiDHyb5854bh+q6WsJ4/S+45FLFM/o6soug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:f4:e8:74:f1:1c:c7:02:75:df:0e:a7:1f:44:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Jul 28 12:01:29 2026 GMT
Not After : Jul 29 12:01:29 2026 GMT
Subject: CN=652dc4887af78afdb64890bd25b025621fe9e258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:52:a3:2f:57:7d:63:02:5f:e4:4a:eb:82:
9b:20:1f:a5:67:1b:25:15:a0:9a:f9:84:0e:68:15:
68:a9:86:80:c0:fb:db:7b:46:90:c6:97:cf:1b:0d:
fa:11:9d:e5:11:d0:6a:d5:bb:94:8e:47:1f:2f:40:
81:5d:74:29:98:fa:cc:7c:9f:a1:3c:46:a5:86:10:
33:0e:0a:09:68:a7:a3:ab:90:58:cc:45:af:68:14:
67:c9:0f:15:6e:e7:dd:58:55:7e:e8:d8:1e:28:f0:
e8:1b:ea:cd:04:8d:cc:6b:dc:86:63:65:7e:dc:24:
21:a3:f4:9c:34:d5:e8:65:5c:23:d4:94:91:04:6e:
cd:3a:62:53:0f:03:57:14:a5:eb:d6:56:f1:36:22:
5f:a1:41:6e:12:c3:1e:c9:94:98:7f:30:eb:65:1f:
b1:98:50:6f:fa:b3:b4:6a:b9:4d:20:f4:2c:ba:01:
88:f7:a1:89:1c:a2:f7:eb:5c:68:69:8d:cc:3d:36:
2b:89:3d:0a:5c:d3:7a:31:2a:2d:00:c8:44:79:00:
bf:00:0b:1a:59:d4:17:af:62:f8:7e:94:69:43:fe:
bb:93:17:28:76:51:b2:9d:c1:02:fb:46:30:66:00:
db:68:24:f7:00:1d:f8:13:9c:a5:14:85:df:a4:0e:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2D:C4:88:7A:F7:8A:FD:B6:48:90:BD:25:B0:25:62:1F:E9:E2:58
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:55:f2:dc:35:8c:57:3e:c0:fe:71:f9:00:b9:f9:b9:c7:34:
8a:9a:ab:6c:a0:37:0d:2c:65:f9:76:32:90:b8:a0:2a:49:4d:
00:51:d5:7c:30:16:e2:df:42:a0:d5:d7:ce:bf:ff:aa:50:94:
70:a6:6e:9e:49:d3:fe:8d:f3:38:c8:cf:07:0d:35:06:7e:af:
59:d8:c3:ef:be:9c:d0:5e:1c:19:1a:8a:c6:45:c7:3e:64:ad:
57:6d:ed:de:5a:fd:b4:a3:91:fe:79:9a:0f:75:ad:4b:71:33:
72:3a:f8:5f:ba:77:b5:35:3e:bd:74:60:b1:ec:8f:1a:36:74:
5d:0e:84:a8:eb:ab:1f:3e:ca:98:5f:f2:22:18:50:4d:93:7b:
4d:6a:d0:d9:df:a5:c6:8d:8e:2c:7b:fd:13:10:b2:9e:ee:18:
fd:bd:8e:3f:35:c0:56:6d:ba:35:da:d9:30:07:7f:3b:90:06:
14:31:a6:23:ce:fe:34:b1:66:2a:8f:12:b8:6e:4c:2d:90:4d:
7d:a2:89:9b:89:d2:c6:05:d0:a7:14:3d:a5:8b:12:2e:e3:d4:
c2:6d:94:07:fb:31:17:b4:aa:bd:4c:c1:d7:f9:d7:34:10:21:
a1:12:e7:07:f8:72:40:ee:47:0b:7c:66:c2:3d:18:f6:9a:8b:
5e:5a:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:51:24 2026 by rpki-client