Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: tvE48Aglt4mpG+JTxwjlm/68gGo/tiDQtQeFilnfVoE=
Subject key identifier: 00:78:46:80:93:78:62:A9:40:1A:D9:D4:4E:3A:D1:1C:ED:FE:8B:F1
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 019FAA50AB12C1BDC7A4AB6AB1F09056C4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 20:00:41 +0000
Manifest this update: Tue 28 Jul 2026 20:00:41 +0000
Manifest next update: Wed 29 Jul 2026 20:00:41 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: JnI2SssclJKX/dps6zaLxwEKmDt7hDLYm3bWylxfOGA=)
2: 9unExc-u2klcvykG9A7nqtJ0jEo.roa (hash: fK53zNSLF8dtN9JmssE7wAYgASom2B/ybWqpgUFg/kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:ab:12:c1:bd:c7:a4:ab:6a:b1:f0:90:56:c4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Jul 28 20:00:41 2026 GMT
Not After : Jul 29 20:00:41 2026 GMT
Subject: CN=00784680937862a9401ad9d44e3ad11cedfe8bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:c1:cf:a0:c4:6d:36:20:03:a3:81:ae:03:
d4:24:72:e2:fc:86:45:19:ff:da:25:7d:30:51:bb:
f0:47:81:07:ec:7a:83:6e:b8:fa:03:a6:08:df:eb:
a4:42:a3:c3:01:d9:34:9a:be:ea:70:c6:a8:5d:cb:
a2:ec:0f:81:1a:32:9f:17:8f:38:88:ca:98:b3:72:
87:71:57:aa:28:78:06:c9:bd:7f:93:97:25:50:bc:
03:77:bb:69:04:6a:5c:39:1b:6a:b3:97:d4:03:e5:
ae:48:86:80:9c:06:9f:84:51:71:75:ab:8b:10:9d:
28:2c:d9:27:f6:7c:25:a4:76:04:6c:fe:1e:06:59:
6d:0b:ef:9f:a5:f7:cd:22:13:47:0c:4f:c9:97:8f:
a2:42:b2:86:7f:25:da:d0:e1:9b:80:e1:8f:48:b4:
f5:b0:d3:29:ef:d5:d3:30:58:87:f9:e3:78:ef:c9:
e6:0c:b7:f0:8b:c9:87:fb:d3:61:d9:8c:65:73:77:
67:b2:c4:bf:80:1f:d7:43:b6:5c:8b:34:89:6d:ba:
5e:bc:7d:21:f1:88:9d:2d:ef:c1:06:49:81:4a:1d:
e6:99:14:bd:79:64:eb:47:5b:ce:77:65:d6:25:c2:
08:fb:4c:4e:5e:0d:92:7d:4e:8b:48:bc:c2:db:8c:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:78:46:80:93:78:62:A9:40:1A:D9:D4:4E:3A:D1:1C:ED:FE:8B:F1
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6f:9a:1b:e8:ad:2e:42:b2:0e:06:8e:f1:1c:00:bf:c9:0a:
4b:7d:01:ef:f4:15:30:ca:6c:7a:c3:42:f6:71:12:47:8d:d5:
19:18:09:0a:31:c5:bb:73:dd:e4:2c:7b:9b:9c:88:5b:74:cd:
57:f9:f4:b9:22:83:35:47:d9:39:a0:c9:51:bd:42:67:dc:a3:
a8:ae:fd:53:ad:5a:e1:01:64:e5:4f:fd:8d:6c:3b:da:8b:db:
96:f0:3b:e5:a9:27:85:38:47:17:1e:da:6e:3e:ba:95:5e:4a:
85:af:60:2d:58:5b:ec:a0:88:85:2c:a9:6f:73:d0:16:13:32:
51:92:f6:09:a3:3c:4f:7c:4b:c3:27:a2:05:1c:fd:30:2c:04:
37:98:e9:ec:c6:d4:59:23:8e:1e:78:b5:d9:0f:db:4b:b8:31:
7d:b3:fb:66:f3:1e:d3:37:77:68:80:4f:ad:24:a0:05:0e:4a:
48:cd:08:7c:3f:1f:5f:5b:d3:d5:3c:cb:6e:9d:64:18:f6:7a:
8d:12:8c:eb:8f:f3:28:3f:c7:95:44:40:36:b0:70:c7:aa:02:
fc:0d:94:94:4e:ee:03:76:43:3b:22:3a:22:e8:45:b5:5a:80:
dc:55:00:03:4c:76:8a:e4:bb:99:5d:6c:b4:af:aa:27:0d:cc:
34:ea:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:43 2026 by rpki-client