Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: 5mPhsRMO7a64CI/Dr3ciwLttoYdGrxBbkCOhhkalVyE=
Subject key identifier: CE:97:6C:C5:06:D3:A7:63:7E:4A:F0:C2:37:9F:2E:CE:D6:F8:C9:23
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 019FA8D00B92ECBD78A078924CDD1C445F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 13:00:34 +0000
Manifest this update: Tue 28 Jul 2026 13:00:34 +0000
Manifest next update: Wed 29 Jul 2026 13:00:34 +0000
Files and hashes: 1: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (hash: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q=)
2: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: 1vnXhgF+HMMb3oy06wBZ8iJhAKur4W77W05tjWjcY0A=)
3: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (hash: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:0b:92:ec:bd:78:a0:78:92:4c:dd:1c:44:5f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Jul 28 13:00:34 2026 GMT
Not After : Jul 29 13:00:34 2026 GMT
Subject: CN=ce976cc506d3a7637e4af0c2379f2eced6f8c923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:d4:04:b1:70:18:bd:55:c7:21:f7:6a:91:
97:9a:77:4f:14:8f:42:e0:f3:63:43:60:57:c0:71:
c6:0a:30:e8:1c:68:2f:dd:23:d4:f2:ff:5e:da:97:
c9:ad:0b:23:6e:01:55:0f:ec:10:e0:06:62:c9:89:
31:64:a2:6f:61:0f:c3:a2:c0:f4:0b:94:1f:ad:2d:
21:44:54:5b:a5:9e:3a:54:4b:1c:56:47:5f:f3:16:
24:17:c1:13:9f:5a:25:b0:2b:fb:ca:58:1c:78:15:
f2:dc:59:0c:91:fd:93:95:28:c5:8a:9b:be:41:af:
72:23:7a:fd:38:e4:1c:8a:4c:73:65:cb:b0:c7:40:
67:7c:fd:ad:e6:78:d6:54:f6:12:a8:de:d9:26:f5:
96:48:2b:10:09:f9:19:98:6b:1b:8c:d7:69:2a:74:
b8:b5:3c:2b:f3:ba:95:a2:7e:bc:34:2a:2a:8c:a4:
bf:c7:49:b3:83:cc:06:d5:f0:15:a9:65:b0:fe:69:
1b:4d:fa:9d:68:7d:cf:e1:f5:6c:25:90:ce:06:88:
26:cc:71:c9:b1:80:5e:06:f2:89:d3:e1:2f:ee:3a:
a0:b5:6f:b1:74:75:08:e4:9c:32:83:ed:de:43:44:
90:13:7f:cb:9f:a4:b7:f3:f5:ca:e9:6f:b5:e9:cf:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:97:6C:C5:06:D3:A7:63:7E:4A:F0:C2:37:9F:2E:CE:D6:F8:C9:23
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c2:b9:f6:13:82:96:69:4a:b1:cf:e4:30:92:3e:58:b0:7b:
78:04:96:b1:ca:ab:37:7c:6f:ba:69:55:47:b0:82:73:a1:8f:
37:b7:24:ee:6b:36:c2:d2:b9:cb:dd:60:47:60:c4:44:67:4a:
3d:2f:63:b4:1e:ca:4a:1e:4f:38:86:cd:ac:68:3c:e8:13:8f:
3d:33:6c:57:f6:dd:60:5c:78:f8:06:da:38:c3:d1:88:e0:97:
b9:80:97:a6:61:68:61:e5:0f:48:70:c7:5c:8d:54:d7:02:ed:
a7:f4:ed:82:be:3a:03:d4:67:2f:8a:4a:f0:ec:af:81:66:eb:
18:9b:3b:63:07:8c:92:be:4a:de:b1:55:ff:80:c9:46:31:60:
64:94:12:6a:b0:d2:16:90:6e:e9:d0:f9:0c:2e:ca:e4:af:64:
a5:05:38:63:2d:f9:8e:29:e0:9c:57:4a:cd:b1:93:17:6c:18:
cc:85:fb:22:b1:c8:72:2c:bf:c5:ab:07:24:16:90:cd:97:be:
ab:5d:e5:06:57:30:52:08:15:6b:c1:60:b4:98:c6:85:63:58:
c0:f3:57:09:75:8e:47:84:b2:33:3b:7e:4c:b8:08:4e:61:9d:
61:aa:35:7f:98:2b:9c:68:71:14:69:cd:8d:6d:4c:6c:b9:00:
4f:2e:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:06:18 2026 by rpki-client