Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: AqCSypmIRSDT+Yf4nH4JN6y/nvRyPIM5ByuWjxdnr3w=
Subject key identifier: 85:56:AF:60:6A:C3:A4:4F:E6:70:DC:9A:FB:B4:7D:4E:7B:2F:56:73
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 019FABD1614DF5B19B027F7C846889EEC68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 03:00:53 +0000
Manifest this update: Wed 29 Jul 2026 03:00:53 +0000
Manifest next update: Thu 30 Jul 2026 03:00:53 +0000
Files and hashes: 1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: RlEK1CmByvXiFolk3l/hBOi4dR1Jkyl0yQ2wbvHW2JM=)
2: q2os6H-xLvk9UkRKuFy2kFXrSyk.roa (hash: PRxebSo24ZxSHOEyZVv7K175GUR0r91e11qM7IDM3bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:61:4d:f5:b1:9b:02:7f:7c:84:68:89:ee:c6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Jul 29 03:00:53 2026 GMT
Not After : Jul 30 03:00:53 2026 GMT
Subject: CN=8556af606ac3a44fe670dc9afbb47d4e7b2f5673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:03:39:68:85:d1:80:d6:91:ff:ff:4a:23:
fc:fa:4d:55:48:ef:e6:33:54:c6:f3:e9:65:69:61:
23:15:ef:c4:28:b2:9c:b5:62:15:02:7f:a4:69:dd:
5e:6f:79:e0:82:eb:d3:16:d2:34:f5:5e:ae:65:89:
4b:b5:a4:e8:69:ae:45:38:90:03:ff:84:41:aa:95:
37:cb:0a:88:30:04:95:f2:4f:61:e5:1f:35:bd:2c:
7b:e6:cf:20:ee:07:86:59:f6:42:12:72:1e:70:32:
0c:43:6c:48:44:57:e9:20:d8:fc:87:ca:9f:2f:cf:
fa:b3:05:71:9d:57:a2:ec:55:80:e6:1e:33:b9:68:
17:ad:fb:4b:00:27:62:d4:59:a5:18:09:29:14:74:
d9:20:63:41:88:d5:0f:24:a6:c1:b8:99:4c:65:b9:
97:22:ca:1c:38:d5:d1:3e:5b:3d:8e:45:ce:5c:8d:
54:32:75:94:5d:a6:bb:a3:db:9d:74:82:ed:ec:b1:
d5:83:86:41:2d:4f:8e:24:d7:a3:ef:47:27:25:d1:
ef:90:63:ff:de:75:c2:ba:b3:51:18:c0:dd:39:02:
a5:d4:f4:38:91:f9:17:37:af:d1:d1:ab:1a:ae:81:
99:4c:53:96:d5:05:a0:3b:ad:1e:20:90:af:48:e3:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:56:AF:60:6A:C3:A4:4F:E6:70:DC:9A:FB:B4:7D:4E:7B:2F:56:73
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9b:41:e4:91:70:fa:34:6e:ca:1e:69:e4:54:1f:de:71:73:
65:e1:ad:60:c1:68:b0:eb:11:a0:f2:e6:89:f9:61:fd:7a:e5:
d5:90:e8:91:17:ce:52:bf:e0:e3:4a:35:2d:67:4c:78:41:2c:
32:2c:84:3e:c8:02:74:9c:36:e5:cc:43:d7:18:3d:fb:c9:82:
4b:cc:71:00:1b:ea:14:40:ee:43:7c:40:f3:89:59:50:e1:72:
f0:4e:7e:9b:f0:5d:7a:5d:51:9b:b7:cc:01:10:5e:6e:5f:74:
c2:e7:a7:74:e0:e0:7a:20:3f:b8:bc:8d:a2:af:12:81:8f:6d:
be:f5:17:d0:5b:a7:65:df:da:9a:24:b6:a6:9c:9b:3e:e1:67:
a0:8e:d9:6b:6b:96:a1:97:72:d8:73:a4:af:ca:63:d5:aa:56:
a8:b8:2f:32:57:41:05:10:c6:49:7d:72:d8:4e:28:15:ea:73:
33:59:21:d5:43:26:1f:f7:8e:18:79:aa:4c:5f:b5:78:98:62:
87:96:bc:2d:d4:ac:ac:61:e9:93:52:63:96:5d:eb:7b:54:37:
e1:de:b6:e6:89:cc:8a:c8:86:9c:0a:41:23:bd:77:4a:50:73:
26:1f:dd:e8:b5:0f:25:17:ff:00:ab:c1:9e:83:2f:58:68:3e:
60:2e:13:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:29 2026 by rpki-client