Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: tMJL4KWXV+cpCFlxedtZzyF2qMgULnTgB//9vh6843U=
Subject key identifier: E5:FE:80:4C:7A:52:06:18:F5:EF:AB:90:C0:68:D8:5D:D8:EA:ED:68
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 019FA861F6320D70FE00EA0D72CB1D771291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 161B
Signing time: Tue 28 Jul 2026 11:00:20 +0000
Manifest this update: Tue 28 Jul 2026 11:00:20 +0000
Manifest next update: Wed 29 Jul 2026 11:00:20 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: INVNbT3eer/QiT11Dw1vpM+9IaeQQOWpvpFyiHGJgPw=)
2: WpRWO2EVlSv_D7W5fcevKIcX17g.roa (hash: dwm8si4Ivv7QjBLEYqxtuHlmWwLaHZym07JUqJNzM8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:61:f6:32:0d:70:fe:00:ea:0d:72:cb:1d:77:12:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: Jul 28 11:00:20 2026 GMT
Not After : Jul 29 11:00:20 2026 GMT
Subject: CN=e5fe804c7a520618f5efab90c068d85dd8eaed68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:09:36:7d:15:95:7c:5e:f4:ee:4e:64:b7:
43:71:f9:16:97:4a:cc:c7:b3:03:c9:e5:6b:42:41:
73:f8:b5:6f:0c:2d:83:77:13:22:a6:a0:5a:22:e5:
67:2d:83:87:f1:b1:69:e0:7b:db:00:31:4a:cd:76:
ea:29:91:5b:92:79:f0:33:5f:85:ea:1c:6c:bc:54:
25:87:9b:c2:d2:17:2e:9e:2e:62:2e:b1:c9:ac:09:
1e:c5:25:b4:97:c3:97:f7:88:14:d0:63:ef:bc:ba:
56:fd:7e:a0:41:67:70:39:bf:f4:e1:67:7b:f8:51:
af:e0:e5:1d:cd:fa:58:79:52:17:c2:ff:3c:c7:e4:
c3:d1:31:fe:70:22:d4:a1:28:93:2d:8e:73:13:c8:
61:ab:b0:f0:2c:32:51:53:d3:4e:0a:84:22:10:27:
9f:a1:e7:38:9a:59:74:f8:b9:8c:b4:83:95:29:d3:
16:f0:91:5e:ca:d0:23:7f:0e:00:29:c4:be:08:0e:
66:6a:e5:a3:aa:72:15:0d:29:1b:ed:4f:f3:4d:e7:
a2:4c:51:7c:6c:e1:6f:f0:f1:49:1a:aa:ce:0e:85:
09:ea:ae:62:c9:d6:2c:af:5d:53:20:52:f3:c7:47:
06:fb:5c:66:62:33:31:6b:4d:7a:29:a4:2e:cc:2a:
c6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FE:80:4C:7A:52:06:18:F5:EF:AB:90:C0:68:D8:5D:D8:EA:ED:68
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e1:bf:c3:4d:f6:4c:f4:c5:e3:14:98:6e:04:fc:a1:03:a4:
9b:3a:ba:54:2b:78:df:2b:89:2b:25:2f:f8:b6:f2:bb:05:e1:
4b:49:af:a7:6f:7f:05:d7:6d:0b:38:bb:ce:7e:99:1a:c9:90:
76:b9:20:21:d6:64:b2:0b:fe:48:d9:8f:5f:30:78:00:43:d3:
97:ac:8b:17:9d:75:90:d4:85:db:23:af:f5:1b:cc:4f:fa:ff:
5d:7f:d1:d5:35:f8:21:45:ce:f9:0f:cd:eb:51:5d:87:ad:b0:
35:3b:90:c4:31:b5:99:84:89:10:b3:26:a1:28:53:0f:bc:67:
a2:82:ab:19:6f:03:41:22:52:b5:1b:8b:85:08:e9:7a:1a:d6:
4c:33:60:93:14:e4:d0:b7:19:c9:3b:b2:31:34:20:e0:08:97:
4d:0e:21:87:5c:5a:47:d7:61:db:e4:7c:02:dc:3d:d1:a4:44:
cb:74:ad:3b:d7:95:b2:19:95:12:d0:0e:bd:e7:79:8b:54:54:
23:cb:17:0e:a6:c2:35:30:67:23:00:bb:ce:1e:df:2f:53:18:
3d:f3:56:bf:72:d9:be:e4:ea:c3:46:97:98:c4:00:2d:a2:69:
66:ff:d6:87:33:09:74:e5:fa:e2:28:2a:b1:11:8d:db:83:18:
e5:30:4f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:08 2026 by rpki-client