Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: 8oys/RCslz0jDq8BreFe+5Y1Lk8khtEf9+SiFnH9Uv4=
Subject key identifier: 20:B0:47:23:0E:32:D6:DD:67:4B:AD:B3:E9:23:00:21:8E:DE:2C:D8
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 019FAB9AC946E6BA0618CDC251B4DFE0A624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 02:01:15 +0000
Manifest this update: Wed 29 Jul 2026 02:01:15 +0000
Manifest next update: Thu 30 Jul 2026 02:01:15 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: itq4JMThpzcEpgF6M8XC4UztrhqWqXpgpxui7tTAeew=)
2: 4Qc85N4EwfShTiGhUnkvPvcjOEs.roa (hash: 5gcG+cc/9htcQzQfIk5Lbs8J3j2mNNeVz49M8qI81nA=)
3: dHkvv2AfkDDcX-uBDSlHxgyE9BM.roa (hash: MkJGi0URj4efKyUrfGEHvlM7u0U0Wn9mOiKm3NgF9Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:c9:46:e6:ba:06:18:cd:c2:51:b4:df:e0:a6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Jul 29 02:01:15 2026 GMT
Not After : Jul 30 02:01:15 2026 GMT
Subject: CN=20b047230e32d6dd674badb3e92300218ede2cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:82:d7:bf:3f:53:10:7b:3d:c9:da:9c:a7:
d3:48:93:cb:1c:4e:3a:fc:b7:57:f9:6c:da:f2:98:
df:78:41:ce:c0:9a:84:ad:17:3a:ac:01:c7:43:c2:
57:f1:25:4d:57:1b:de:ba:4d:ad:61:46:c1:e3:89:
c9:21:46:e2:ff:dc:63:49:16:f9:29:5a:95:92:dc:
f0:ed:d7:c7:64:b5:e1:cd:81:0d:2c:a5:23:f9:02:
8f:d6:5b:af:36:7f:8a:6d:55:b1:d1:20:3a:57:82:
b2:d2:22:af:2e:5a:d1:bb:f5:05:b0:f6:73:cc:62:
f5:7a:53:9e:d5:cb:44:6a:7a:d9:4c:b7:28:78:72:
d2:7f:86:0c:04:db:8f:ba:af:04:18:da:39:e3:64:
a3:bc:5a:7b:5d:68:e2:5c:1b:79:b6:f1:c1:c0:60:
98:b7:da:ff:6b:d2:d7:93:50:dd:5b:5b:97:02:19:
db:6f:07:83:8e:30:8d:6c:c8:ee:76:b1:5b:8c:9e:
ec:a4:d1:8c:9f:13:53:c9:d9:8b:c5:d7:ff:fa:a4:
a8:55:79:4e:44:85:5e:35:65:9a:4b:2c:3e:ad:14:
7c:22:93:30:01:f7:59:61:40:8f:73:7c:7d:26:17:
91:bd:a8:67:3b:5f:36:49:1d:18:32:c4:78:3f:13:
ee:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B0:47:23:0E:32:D6:DD:67:4B:AD:B3:E9:23:00:21:8E:DE:2C:D8
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0a:ce:75:18:b4:e3:ee:3e:64:b0:ca:74:bd:50:da:bd:0f:
8d:bf:a1:a4:73:7e:1d:e4:59:d1:c8:3e:ac:89:0a:36:c3:a2:
82:c3:4f:2e:ec:3d:d1:a8:69:8c:b3:6b:bd:a6:33:e1:92:c9:
fd:e1:c0:67:ba:c3:46:ad:9f:77:6f:6d:0f:29:7e:42:15:67:
05:78:da:43:45:86:1e:c4:47:25:5b:12:a0:cc:cf:bb:2a:cf:
de:20:e9:5b:89:fd:83:3f:f3:49:8e:d9:bb:5a:63:bb:aa:d0:
60:96:a9:40:95:52:2b:e3:a3:c5:8a:21:80:9c:ce:63:e7:52:
dd:39:cb:02:7d:51:03:2c:1b:1c:21:a3:fa:46:50:df:15:4e:
2a:f6:d8:51:2d:3b:32:99:29:31:dc:48:2a:18:96:1e:9e:bc:
46:64:b8:b4:e7:62:79:4b:99:13:aa:54:8f:13:8b:80:62:3f:
6c:55:26:5f:9e:69:75:23:ac:c7:64:ca:c8:24:11:e0:84:cd:
7a:7f:64:83:44:ad:77:72:f8:39:8d:34:1c:08:50:30:ba:1e:
cc:a6:40:a0:c5:68:3d:1c:92:09:4f:e5:9d:e0:04:17:b4:9e:
98:0e:0b:3f:d7:8f:4d:23:4d:79:6a:2d:cb:4b:41:09:5a:f3:
5d:94:4d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:25 2026 by rpki-client