Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: Wq0T6yo9F5FwxtfzJeIpllSOWE0IIvx2lvpwTy84uSg=
Subject key identifier: 17:43:1E:69:16:00:76:16:CD:1F:13:D2:11:7B:77:FC:49:57:9D:BC
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 019FA9ABA7BF39735AEB1E659A01D194FE27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 17:00:26 +0000
Manifest this update: Tue 28 Jul 2026 17:00:26 +0000
Manifest next update: Wed 29 Jul 2026 17:00:26 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: zsXZn5EZ/c9UBsYorMPFHFQyEtWOSmtu2TumLG75Eaw=)
2: iKwLG1q1sDs9tvR7rIxpNbBHq4g.roa (hash: 5Al8Pm91tYMp0+j7fJGmguSqWX96C92TH8gJMDHEyyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:a7:bf:39:73:5a:eb:1e:65:9a:01:d1:94:fe:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Jul 28 17:00:26 2026 GMT
Not After : Jul 29 17:00:26 2026 GMT
Subject: CN=17431e6916007616cd1f13d2117b77fc49579dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:ab:6d:2d:83:ef:3c:15:a1:d3:a1:4d:23:
6a:0c:a0:22:78:0b:62:a1:f0:9e:4f:68:c7:65:33:
ff:1e:60:03:2d:08:e4:a4:61:f0:bf:fa:16:a9:b6:
12:2c:37:b7:56:90:50:b6:a3:b5:1e:2b:2d:a6:0a:
5b:83:d6:e8:0e:12:c9:bb:37:10:09:77:c0:30:ba:
cb:5b:42:61:e5:48:64:67:61:e9:fd:7e:b3:98:1e:
98:c0:e4:8c:7d:70:3b:c6:05:40:cb:c0:13:cb:92:
02:17:46:c0:67:f2:88:91:4c:38:c6:02:3e:d6:5b:
ee:75:64:f4:f8:e4:b9:e6:3a:9e:4a:ef:92:a5:3f:
22:a4:f1:36:a0:7f:7a:7b:f0:d1:3d:6d:ee:55:14:
8d:63:92:cf:d2:a3:b3:39:b3:62:5b:3c:bd:61:c4:
ba:35:88:aa:da:cf:84:02:c4:1e:05:d9:f1:a3:82:
c5:d1:3b:92:28:10:73:69:88:cf:e6:95:dd:ac:ba:
2f:3c:18:d2:40:47:2c:44:f8:46:a5:ff:cb:06:35:
07:b5:ef:4f:5e:a4:e9:0e:ee:f1:5b:26:b8:b4:c9:
0f:ce:7a:46:8e:a0:52:82:10:0d:e9:3e:ef:77:34:
26:5d:58:04:31:ed:75:ac:05:bc:ee:6d:0a:de:bf:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:43:1E:69:16:00:76:16:CD:1F:13:D2:11:7B:77:FC:49:57:9D:BC
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a4:7e:1b:a2:54:f4:21:30:66:f5:45:13:8f:bc:9e:30:d7:
9a:4a:82:75:b9:7c:42:77:17:ef:47:aa:2f:2c:fb:1f:40:20:
18:8e:1b:a6:72:d2:81:64:73:c3:0c:bf:29:c8:aa:1e:bf:44:
6d:5b:a5:5d:dc:3d:78:b8:75:9e:a7:5f:52:1e:7c:b2:66:69:
b1:f8:4a:98:16:f2:63:1c:d2:2e:3d:60:64:d7:1d:25:37:cc:
59:72:c2:08:b6:35:49:fe:2f:df:50:56:ca:25:80:5b:bd:3c:
0a:28:9b:e3:82:97:9a:4e:a6:31:de:45:b7:8d:15:29:08:b4:
30:48:e6:39:3c:ef:2f:8b:cc:3e:bb:5a:d9:2b:2a:20:9c:52:
bf:86:fc:ac:1e:c1:b6:60:b3:7d:06:a4:4c:a0:2b:d8:f7:62:
45:45:76:5b:29:e7:cb:b8:f4:ea:a3:2d:50:44:9f:1a:5e:f7:
ee:47:fb:d4:aa:d3:d3:bf:a2:a2:80:d0:11:44:f9:f5:f6:3d:
74:b9:33:e8:0f:1d:1b:e1:13:90:95:18:11:77:0f:ee:d4:3a:
3e:94:5d:d1:14:0a:c0:3a:b4:eb:f7:8a:d2:58:dc:25:55:7e:
2c:a8:90:b8:3a:84:ef:8c:b4:0b:29:00:8a:3e:38:d2:a3:f2:
84:d0:98:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:55:53 2026 by rpki-client