Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: PEi62JS607rp1HS7eUmrHQS+OHTG5mT1XzvkezyTOtQ=
Subject key identifier: DE:F3:B6:B9:A5:B5:1F:2C:4C:2A:EA:76:B8:75:7D:91:21:89:CB:17
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 019FA7F4D91B0E42BDD140F553BEB8B90035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 09:01:08 +0000
Manifest this update: Tue 28 Jul 2026 09:01:08 +0000
Manifest next update: Wed 29 Jul 2026 09:01:08 +0000
Files and hashes: 1: 0zAvG8q_rQz542VLQHfI3pwn2hU.roa (hash: EpeZpmHs3b50RgbC9T7I86EOA85BMvieUCH/Qo6Mt6U=)
2: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: 5V6PFkv9yZ8O2W+bWmOOP4H0+1DAUST1MkbejgOkqGs=)
3: gozTMRP9KybW0YQlfst5QWvJTAc.roa (hash: 1fB1QbWdo2Si+L9RD7xiEIKgMl1IQRY1BWEJBSr6TVA=)
4: nCAbVn_gsNs4x4asBKyazyvKXR0.roa (hash: Ir2ZDg7CX0Hx7nK6/8SSzS9hwNZYvwP7LhXhdGV2tlA=)
5: s5RTg8fa0nQHIcIumLzUhuAAt24.roa (hash: cqMD2IDYqFBpxsaJVxm5d2TxnTtqRKRBltHR4geFTsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:d9:1b:0e:42:bd:d1:40:f5:53:be:b8:b9:00:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Jul 28 09:01:08 2026 GMT
Not After : Jul 29 09:01:08 2026 GMT
Subject: CN=def3b6b9a5b51f2c4c2aea76b8757d912189cb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:ce:ac:ec:47:3f:3a:07:22:93:01:f1:66:
5d:65:3a:13:c8:f2:c5:3d:bc:fd:05:be:be:5d:0c:
40:6a:6b:9a:2f:0a:a3:69:a3:83:ae:03:53:cd:f7:
95:99:44:5c:be:c1:d8:a1:27:ba:f8:d5:19:9e:ba:
46:db:cf:6a:f0:24:b6:fc:ef:33:75:b6:d5:db:a8:
5a:03:f1:75:41:d5:a9:12:01:6f:92:69:7d:93:97:
7e:39:d7:3f:f7:29:96:d4:66:be:80:a9:84:a5:90:
61:1e:b6:76:20:47:35:13:25:ed:f4:9e:ad:86:87:
28:aa:94:93:9b:9c:f8:e6:97:0e:9b:be:25:18:df:
3c:8d:d1:d5:25:79:63:5e:f0:7d:46:c3:2b:a9:50:
db:66:0f:03:8d:d4:75:61:d1:23:2f:1e:a3:37:b9:
3c:7e:b7:7d:26:df:6a:77:00:ac:62:3e:ff:6f:eb:
7a:fd:c4:77:e4:d5:7e:7a:ac:1c:85:85:dd:ab:c7:
65:ec:40:3d:f8:a2:ee:9b:b3:8e:f3:17:a8:5b:87:
3b:2f:2e:34:a1:5b:37:cd:24:d1:d6:18:c1:25:ae:
fa:5f:ed:a4:a9:c0:63:d9:13:63:c0:18:2c:ad:db:
91:fa:41:46:40:38:09:66:5e:92:23:29:2b:3a:3b:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F3:B6:B9:A5:B5:1F:2C:4C:2A:EA:76:B8:75:7D:91:21:89:CB:17
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f1:d7:a5:52:eb:28:ae:35:d4:34:e4:af:f1:e5:b1:db:78:
74:12:47:67:33:62:64:da:74:34:6c:aa:c7:c1:2d:84:04:8d:
6b:a0:60:ba:ef:53:2e:5c:2b:05:03:79:4b:f7:50:f5:6c:d5:
f2:c1:d2:95:e5:00:b4:b1:60:5e:c8:13:8d:ae:22:c6:0f:4c:
98:f3:76:7c:c7:1d:5c:a7:37:01:19:e6:8a:ad:79:45:5d:cc:
10:5c:29:e6:40:f5:96:a8:e0:9d:d1:48:2e:23:9b:e2:e6:94:
ea:e7:46:2f:e7:45:1b:a3:e9:9b:62:5f:82:f8:b4:51:21:b0:
94:31:af:9c:33:5e:b7:a9:91:57:28:a3:8b:44:fe:aa:58:b2:
65:4f:5a:55:e9:c9:99:5c:85:b3:82:8f:24:c8:a9:12:70:ea:
b2:43:b4:e6:c7:44:4d:c1:12:f5:09:c3:13:d3:c0:45:93:52:
5a:87:fd:b8:35:3c:12:59:28:a5:1f:59:e0:04:4b:29:5b:b7:
f3:61:b8:ef:bb:fe:bc:b6:50:d9:3c:6c:ab:40:ca:fe:5c:d6:
7a:09:4e:a5:03:c6:ad:b3:7d:77:8f:11:b7:0b:a7:24:9b:b9:
59:7e:4b:83:82:a1:80:6c:f6:43:5e:44:88:cc:50:b4:7c:3f:
20:39:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:06 2026 by rpki-client