Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: 6xLxUaEFvJ1YW61kyOzYdgBuEGA3/c8ehNLeFBvQ5O0=
Subject key identifier: D6:5D:84:2F:FA:29:A4:38:51:3F:DA:CF:44:18:E1:42:EB:A5:6B:A2
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 019FA9E2ACDFE15E2BFC9E9D93DCCFB1DCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 18:00:32 +0000
Manifest this update: Tue 28 Jul 2026 18:00:32 +0000
Manifest next update: Wed 29 Jul 2026 18:00:32 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: H79Ge7ON7XzR/YgprndlLWmk7el9cZry0ytbhDOSwlc=)
2: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (hash: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I=)
3: qsdjnJflN-hqMusJ8mRO3QvIelE.roa (hash: SE6UiCw/dJG6vG+istEe6e9u75qYp7RLjIy5NUM722g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ac:df:e1:5e:2b:fc:9e:9d:93:dc:cf:b1:dc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Jul 28 18:00:32 2026 GMT
Not After : Jul 29 18:00:32 2026 GMT
Subject: CN=d65d842ffa29a438513fdacf4418e142eba56ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:b7:42:32:4a:29:1b:9a:73:be:48:1d:8b:
bf:07:39:eb:9e:45:f7:16:b5:d8:1b:86:b6:9b:9b:
c2:ea:68:d7:2c:62:c6:51:c3:16:16:be:97:6b:f6:
2d:9c:b2:6d:c0:4e:8a:a6:c0:d8:ea:d2:d4:1a:52:
3d:4b:3c:97:ce:20:1c:fc:88:68:77:89:dc:1d:46:
94:c7:98:f6:20:79:18:7a:ee:91:fa:5b:ab:4c:d4:
30:78:f9:11:c4:e3:fd:c2:6c:a2:6f:79:df:1f:eb:
b4:e6:34:e4:f1:53:ef:ea:f3:e4:58:e0:84:d8:8c:
ce:77:41:95:97:db:6c:a2:db:a8:a7:46:a2:81:ae:
73:9a:bf:c8:53:56:50:d1:e4:54:38:80:84:7e:fa:
b7:e8:1b:1e:91:d7:0c:03:71:d4:c8:15:60:b0:3e:
0b:25:21:00:da:fa:a6:8a:f5:f7:98:4c:5e:50:d1:
9e:6d:35:d9:77:9d:3c:85:16:97:7c:36:63:2c:3b:
8e:16:bd:f2:c9:6e:8e:52:26:1f:0f:9f:e5:68:72:
22:af:93:e6:35:79:9e:77:a2:8f:1a:de:cf:a0:b9:
00:df:99:d1:62:4a:f8:46:87:a4:f0:ed:9b:88:0f:
9a:69:e3:ea:67:e7:2d:d4:82:95:62:08:7e:a1:58:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5D:84:2F:FA:29:A4:38:51:3F:DA:CF:44:18:E1:42:EB:A5:6B:A2
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:19:d3:cf:15:25:fa:fc:8f:a5:fd:e8:3c:a1:3f:e8:95:ac:
96:cc:6c:fa:d3:16:b3:42:e2:b3:54:12:ae:9b:11:f1:d4:57:
3f:61:e1:84:3f:16:59:7a:2a:e5:a5:ec:48:1c:7a:9e:5c:c3:
32:9c:56:57:c9:7f:64:e8:e1:ad:56:5b:bc:f7:6e:07:8a:79:
8c:82:1a:0a:5b:3c:1a:b6:9f:ae:ed:07:7c:84:30:da:60:ee:
da:62:f3:54:a0:02:30:4e:8c:c7:6c:33:67:2f:58:1f:b2:44:
d8:f3:ce:55:d4:5b:6e:42:4c:0b:fc:21:71:8a:b4:78:a5:7d:
b0:1e:35:a4:ed:c9:63:22:99:e6:67:19:d6:eb:d4:82:75:91:
d8:bd:0b:ef:83:a2:72:d8:46:31:c9:bc:91:b1:ef:0a:e0:ff:
c8:19:cc:16:3b:6d:c1:6b:36:09:d4:ab:e6:7e:25:86:f0:1b:
c2:16:04:94:e9:4f:8d:14:70:29:74:87:e9:a3:4d:38:b4:92:
ac:13:55:bc:17:9d:37:49:cd:54:e0:83:46:af:a5:18:c7:5b:
68:79:70:ec:86:e8:d1:c4:d2:ef:74:df:84:50:6d:54:63:56:
07:ff:a1:2f:72:97:6a:58:27:9a:10:99:2c:72:3f:73:80:4c:
86:97:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:27 2026 by rpki-client