Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
File: 3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json)
Hash identifier: J1Tdu6B/WjsT3vybLER6vaWc7KkcW6uBsZu93lpBqug=
Subject key identifier: DB:60:A0:CA:18:F0:9A:93:BA:CE:E2:5B:49:86:F9:50:69:B2:58:71
Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a
Certificate serial: 019FA8D088F347B90A12839A700E3513C3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
Manifest number: 0E3E
Signing time: Tue 28 Jul 2026 13:01:06 +0000
Manifest this update: Tue 28 Jul 2026 13:01:06 +0000
Manifest next update: Wed 29 Jul 2026 13:01:06 +0000
Files and hashes: 1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: ZM373bNGF+W8AAFrv/iBtfY2fT1hlDdHu9LYU0v3X5E=)
2: c52XhO4YGCrU48r6aoFS0wJifx0.roa (hash: 4+paDSnGo7aoDvCfZSAugeN0kcY8+2h3yijdRS9k2EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:88:f3:47:b9:0a:12:83:9a:70:0e:35:13:c3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a
Validity
Not Before: Jul 28 13:01:06 2026 GMT
Not After : Jul 29 13:01:06 2026 GMT
Subject: CN=db60a0ca18f09a93bacee25b4986f95069b25871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e3:16:b5:a4:61:b6:c7:30:25:e4:56:77:b8:
d6:dd:aa:96:23:9c:6f:cd:bc:83:39:60:00:6b:a1:
18:ae:f1:e5:85:3d:6d:a2:d0:47:3b:3a:b3:3b:3a:
b5:40:e4:82:7b:45:20:5a:3c:31:03:7e:db:8c:f5:
da:77:45:b7:ea:f1:a1:92:6c:18:2a:ef:fb:02:2c:
81:60:58:d1:ac:05:74:b7:76:ec:fe:f7:32:c7:26:
10:9b:e7:24:cb:fb:81:cd:f5:12:59:49:31:3a:42:
da:4b:10:89:de:94:e0:7d:1b:21:a1:3c:b7:1d:c9:
18:37:db:e8:58:85:9e:e0:fb:23:0f:40:17:2d:78:
fc:46:6c:1e:5e:60:99:ab:15:fb:c8:ec:4c:e5:a3:
1e:e1:cc:ba:54:9e:d0:b2:e8:90:4e:9f:89:4c:66:
dc:82:fd:a3:cc:0c:bf:70:5c:11:6f:62:fc:b7:9a:
d3:33:06:0a:90:c2:bc:de:98:6f:06:af:b0:e2:30:
51:31:f7:66:d0:d5:9a:26:38:cf:92:02:d6:4f:59:
98:3b:41:97:c1:06:a1:03:76:d3:28:06:d4:05:63:
cf:4e:e8:88:2b:cc:d8:eb:f3:5c:74:99:c0:72:71:
ba:e1:08:43:4d:c3:c2:57:85:e2:c4:43:a5:93:0f:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:60:A0:CA:18:F0:9A:93:BA:CE:E2:5B:49:86:F9:50:69:B2:58:71
X509v3 Authority Key Identifier:
keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d1:e1:9a:e9:f6:89:aa:26:78:a4:56:d2:02:ef:14:1f:08:
99:8b:d0:e8:b9:3a:66:f1:23:47:6c:33:a4:c7:68:96:c2:9d:
fd:01:d6:f4:51:f7:87:fe:0d:63:7d:9e:5a:10:35:2b:14:d1:
1e:6f:68:dc:89:17:9d:cd:49:a9:05:1b:e7:7a:e8:8d:1a:f8:
3e:4a:cd:91:74:a4:73:cb:5e:ec:b8:d3:48:19:8c:40:2b:8d:
1c:34:dc:37:e5:1a:1f:1f:92:ae:a5:74:35:a2:53:64:81:9d:
d9:a3:00:64:27:b3:c2:10:7b:84:81:ba:f5:01:3d:94:57:db:
ac:7a:ca:54:f4:2a:72:92:19:57:7d:50:3b:80:70:c2:2a:9f:
59:50:b7:fd:35:f1:61:4b:08:31:74:e7:a1:d8:bf:87:57:87:
67:4c:8a:58:7b:ae:c9:3d:f3:c2:d7:34:34:91:ea:57:0a:6e:
1d:33:d9:44:5e:8c:09:bb:40:3b:21:cf:db:9f:c5:c8:71:c1:
e3:00:8a:21:4e:18:f4:c8:79:3e:5f:15:8a:2d:a1:0a:ed:5c:
2e:90:70:6e:f3:9d:9e:39:4c:44:a4:4c:9d:04:8c:7c:09:f7:
43:d8:91:fd:b9:80:d4:36:05:d5:8f:ff:33:da:a9:13:ad:1d:
90:a2:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:51:36 2026 by rpki-client