Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: R33hysncxotXaYFPzu9N6t1Io5ABfXdQHyvf5bbNpJQ=
Subject key identifier: DB:F7:B0:89:BD:CF:F0:9C:F8:AE:0C:C0:C7:B5:D9:10:E0:A8:95:E8
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 019FA9E28AAC366500AC504667C88246CC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 18:00:23 +0000
Manifest this update: Tue 28 Jul 2026 18:00:23 +0000
Manifest next update: Wed 29 Jul 2026 18:00:23 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: gktAaFbXlPxTSa8vhX9Q/YB4BCrlA3IbHBqL0SnSf80=)
2: 9yUNTQu4D8dEJY0vZu2yaAiRefU.roa (hash: lrso5MYVylYk+QUiDaPruFaOoSE7UzGRAVXufFOfA74=)
3: jnbS6eM3y8l2eIAi24P02_6sYnE.roa (hash: oehLYvqq0N9O64TqK28Nu+Air9RUEnLzPzRmB5KAv7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:8a:ac:36:65:00:ac:50:46:67:c8:82:46:cc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Jul 28 18:00:23 2026 GMT
Not After : Jul 29 18:00:23 2026 GMT
Subject: CN=dbf7b089bdcff09cf8ae0cc0c7b5d910e0a895e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:e9:34:1a:62:fc:2e:06:82:a3:7b:e4:bd:
c5:36:f8:38:62:1b:e9:08:e9:8e:a4:b9:37:2a:d5:
92:2a:03:ff:8f:39:af:36:33:1c:8c:2e:86:3f:9a:
6c:fc:27:bc:d5:f6:d1:35:46:e9:8a:c7:99:b0:80:
3f:da:ef:b0:f4:02:f8:c2:9a:b1:33:d5:08:da:5a:
a7:5a:92:0b:d4:40:67:fb:6e:92:fd:bc:b1:93:14:
fa:00:87:80:b5:12:f5:cc:4c:c5:30:c8:95:a3:19:
94:2f:a5:13:60:11:63:60:69:0b:ce:54:c2:4b:0f:
d1:9b:fb:99:24:de:0b:f7:7b:31:33:2b:6b:fb:16:
13:57:f8:28:ed:4a:a0:7d:ca:b1:45:2a:0e:70:e8:
0f:20:d1:98:83:a2:b1:5c:7c:d8:e6:f9:d5:6f:e1:
d2:fa:61:ec:db:86:9f:2f:40:1f:02:db:cd:3e:52:
67:84:76:10:64:9c:90:05:59:77:1d:9b:98:64:c3:
c6:bc:ce:d3:e1:30:dc:51:6c:5b:33:14:5c:7a:2c:
d0:0a:8e:3b:f6:4e:89:54:7c:1a:d2:d8:14:4a:48:
95:cc:6f:31:d7:56:60:47:74:ea:19:87:61:f8:b0:
65:b0:f3:ef:66:68:27:95:7d:49:91:e4:c1:b9:64:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F7:B0:89:BD:CF:F0:9C:F8:AE:0C:C0:C7:B5:D9:10:E0:A8:95:E8
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:98:2d:4b:ed:41:5f:72:31:4a:25:0b:14:d6:af:e7:b7:5e:
6d:56:67:0f:c1:1a:6f:85:d5:13:a2:82:ca:f5:50:6f:78:bf:
c5:95:cd:c9:55:d7:ec:d0:26:1b:f1:a5:16:1d:6a:75:82:c0:
e7:a4:25:55:98:b2:3c:4a:ca:45:8d:40:e3:db:ab:b8:3d:cb:
0e:07:d9:e3:4b:02:dd:0e:b9:89:f3:65:39:e7:4f:b2:0e:c3:
4f:36:7d:68:82:40:3e:d5:8f:16:fa:a9:0c:69:36:4e:7b:3e:
dc:67:29:f4:53:72:1c:43:a1:a4:9c:a1:2e:47:73:27:6d:91:
47:4b:0d:08:4a:10:2c:18:9f:06:18:9f:10:74:be:f1:ec:4e:
1c:27:ad:c5:80:be:57:e3:c2:16:3c:0d:14:16:9e:bb:2f:48:
2c:c5:ca:d1:e0:98:eb:3d:88:24:74:6d:67:eb:63:02:0a:e4:
f7:d5:c1:78:c2:e5:78:f1:1c:20:99:28:7a:3f:67:e9:33:29:
8a:f5:4d:43:27:dd:59:4a:a5:d4:e3:62:59:17:a9:eb:f5:6b:
86:20:85:ba:3f:8f:4f:5f:c1:c7:c0:63:05:91:f9:2c:da:15:
2f:73:37:39:c2:76:b9:1c:06:6d:53:1b:93:b6:d8:2f:79:e8:
07:4e:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:53:55 2026 by rpki-client