Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json)
Hash identifier: XEObCgSkXty788FMyXkmrVcInifwDX796wc4jWOOoJA=
Subject key identifier: C4:78:9B:2F:75:B5:7F:8E:C8:48:3A:4D:35:26:5C:0D:7B:DA:CB:75
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 019FA82BA815153BE1CC6233958C6E0FECFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 10:01:01 +0000
Manifest this update: Tue 28 Jul 2026 10:01:01 +0000
Manifest next update: Wed 29 Jul 2026 10:01:01 +0000
Files and hashes: 1: 3JCprLbCd_JV3m7EK4otwaRJ6FI.asa (hash: C7m74US1J4rnzhzyN9c9AXYlLYYU1lK9Uvvic8/k1+0=)
2: 5EKQPrPNwyvCBR3SFmiV77L19bE.roa (hash: 7kjfjqomqFD/efQnWdT+7ek8PZzhOejx7JJd6FEa/kA=)
3: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: E3cx96kTU/s8AdOTczUWYec9zfYaIy8j8f4iWk06XV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:a8:15:15:3b:e1:cc:62:33:95:8c:6e:0f:ec:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Jul 28 10:01:01 2026 GMT
Not After : Jul 29 10:01:01 2026 GMT
Subject: CN=c4789b2f75b57f8ec8483a4d35265c0d7bdacb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:3d:17:73:d7:1e:b2:4e:35:1b:d3:ce:a2:
d8:8c:f7:dd:88:be:9e:cf:9f:c5:46:82:04:09:bb:
70:90:dd:2d:1a:89:6f:42:25:7b:6f:63:87:d1:2b:
68:5e:fd:a1:90:1b:c3:81:96:b0:0f:dc:77:6f:2d:
99:83:11:f6:f8:b8:db:83:e8:8b:12:b5:2c:c0:ab:
34:4d:0f:ac:3a:cb:9e:0a:3f:8b:3e:7b:a7:64:27:
2b:10:1f:dc:2a:e2:65:f6:b8:44:59:98:82:f7:58:
3d:00:b3:c4:21:04:53:a8:79:d9:03:37:fa:47:6d:
cb:a3:eb:9a:5f:66:ed:af:82:b0:0b:15:c4:07:d3:
b2:2e:5e:14:a3:a7:58:0c:4a:68:3a:63:9f:e8:e4:
53:0b:3b:be:73:41:27:64:f8:af:0a:f3:4d:35:5d:
57:80:14:5f:fc:b3:63:1c:ed:ca:cf:31:00:5d:40:
3f:0d:09:f5:3c:11:b1:b5:32:a8:75:75:4a:12:f2:
cd:a5:ac:46:a3:3e:8e:35:4e:1d:dd:02:d9:ba:e8:
a6:df:4e:d7:e4:5b:5b:c2:a1:4e:88:cf:a5:b3:04:
4b:b0:2f:2e:34:56:c8:b8:c9:66:a7:88:8f:ee:c6:
59:6d:1e:9b:94:1e:d5:f7:37:9a:43:b0:a1:f7:4b:
cc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:78:9B:2F:75:B5:7F:8E:C8:48:3A:4D:35:26:5C:0D:7B:DA:CB:75
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:88:56:50:83:b0:7a:b8:4d:02:33:23:b5:a3:f3:25:fd:0a:
b1:7e:33:1d:01:6c:dd:bc:d8:a3:ab:c8:03:8f:8a:1d:8e:10:
a7:ce:86:e9:6d:f0:54:7d:25:a2:02:29:de:74:a1:6e:cf:01:
0d:d6:c0:45:8d:08:df:8c:75:71:e0:89:93:da:66:16:f8:6c:
ad:57:fc:e3:e2:70:60:38:88:50:13:12:f0:9b:44:c3:62:64:
be:6d:07:a8:6f:ab:e4:d2:de:d7:bf:c4:f9:ae:4a:50:3f:ab:
e3:cf:28:ca:a0:3c:78:eb:15:fa:a6:91:bd:2f:06:36:4d:5d:
e7:7e:38:dc:36:85:c2:72:52:5b:b2:ce:5d:d6:30:f8:83:67:
f6:68:7a:9a:04:53:1d:35:34:0c:c9:c5:d5:35:c3:18:ff:ac:
d5:1e:c3:4b:aa:70:0a:87:06:97:bd:17:d3:09:70:61:ad:d3:
1d:7e:3c:e1:f7:0d:86:aa:d5:96:0c:a1:79:05:44:a1:98:a0:
e1:c6:1c:f8:61:0f:5d:3e:98:45:01:3a:43:c3:5a:83:ed:e7:
93:dc:da:c8:82:60:cb:39:a6:94:5d:6c:88:8a:4f:0a:e8:ac:
41:81:be:20:3b:e7:b1:c0:b6:24:79:e8:cf:9e:2e:60:47:e9:
97:5a:ba:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:14:26 2026 by rpki-client