Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: edYE4g0tQU8o6C8Q2YBOBatLrhioeR8DmAZma8lB6oA=
Subject key identifier: CE:66:D5:BE:B7:8A:5F:A1:81:B6:FF:1D:D9:64:FD:A9:42:6A:D3:00
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 019FA8D014124B4202FB8489E7F6DDC8D46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 13:00:36 +0000
Manifest this update: Tue 28 Jul 2026 13:00:36 +0000
Manifest next update: Wed 29 Jul 2026 13:00:36 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: fwHsG64tQKoz0XC25FSp05270gJUkiIc33AARw3H1QQ=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:14:12:4b:42:02:fb:84:89:e7:f6:dd:c8:d4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Jul 28 13:00:36 2026 GMT
Not After : Jul 29 13:00:36 2026 GMT
Subject: CN=ce66d5beb78a5fa181b6ff1dd964fda9426ad300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:73:60:e7:15:9c:87:41:dc:0f:27:19:18:
87:da:33:e7:16:95:7d:6f:dc:89:2a:49:0a:74:d1:
1e:2d:e7:83:b9:db:b8:6a:59:b8:c0:80:7e:e3:02:
e1:7d:8e:a2:8e:fa:0d:db:ed:12:47:e3:22:80:73:
41:b2:d4:d7:08:5d:af:43:61:4f:99:18:47:17:bc:
c9:36:5c:1d:9d:45:20:05:d4:3c:ee:2f:60:00:43:
ef:69:58:6b:11:e7:6d:88:68:a8:e3:1f:cc:17:4e:
c4:74:7f:db:cd:c9:e5:4d:6c:44:3e:b8:28:51:58:
73:fd:45:ec:7a:c2:06:0f:37:30:25:1a:c5:82:22:
a5:d3:97:a6:31:3c:d8:47:6a:76:f8:4d:7d:ee:aa:
8d:e1:5d:a8:43:df:bd:6e:19:0c:eb:87:93:6b:dc:
cc:6b:23:c3:21:5d:9a:62:2c:95:f5:7f:44:b1:e3:
1b:3a:45:ba:44:1d:ff:d5:4b:24:31:9c:9f:14:3f:
86:35:e3:b6:84:72:df:08:df:92:77:e7:1a:c5:1c:
77:a7:4b:68:50:e0:fd:e1:f0:5f:7f:1a:d0:d3:85:
53:ae:7c:3d:d5:b5:03:9a:26:32:3a:6b:47:e4:a5:
bb:36:ce:71:7f:d6:b2:61:09:76:02:e4:aa:a9:d1:
13:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:66:D5:BE:B7:8A:5F:A1:81:B6:FF:1D:D9:64:FD:A9:42:6A:D3:00
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:95:11:ef:b2:d4:b6:35:1b:cb:32:94:41:2a:59:84:76:ba:
9e:bd:ff:bb:b6:f8:40:c6:1a:dd:ec:68:76:d5:70:ed:cf:5a:
5e:f8:e5:c1:54:a5:ce:eb:29:fd:14:a0:8b:fd:85:dc:6c:65:
86:d9:db:56:92:4e:b5:e4:89:d8:24:f6:f8:59:9b:f4:0c:28:
ad:8f:15:5f:0a:de:be:31:4b:d3:7a:2c:ca:3b:02:f4:a1:b5:
f1:82:05:3b:c8:cc:af:7b:27:69:e5:c0:9b:af:c9:7e:43:31:
bc:be:f6:f2:16:93:45:07:a0:15:e4:d0:79:12:4c:f4:72:27:
a1:dd:d6:35:e4:9d:2c:63:89:15:96:51:31:28:61:66:ad:76:
97:80:d6:a1:b0:9f:f9:b8:32:9e:52:49:0c:4c:33:f1:5b:69:
f7:a3:e3:68:da:62:61:0e:04:92:6d:7a:b5:e9:10:db:17:80:
64:d8:a2:63:a5:40:e5:44:7f:b0:be:39:ea:72:a6:48:bc:ef:
e7:dd:12:64:40:a7:13:de:68:9d:8e:60:fc:1d:c1:b3:e1:de:
db:a4:c7:9c:00:54:15:f1:ac:ea:a5:f8:ee:35:98:34:9c:92:
42:b2:d4:c3:bb:50:43:c9:b5:a2:ec:b6:33:5a:d7:a2:ee:c0:
b0:0c:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:24 2026 by rpki-client