Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
File: 3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft (raw, json)
Hash identifier: 8IRJZtBPGuoW1nqGhu+TyJJvgU3Apxtsu97ZhxAyYEo=
Subject key identifier: 49:1F:B9:E5:F6:F6:02:40:AC:70:8B:E6:B1:F6:0C:B4:13:D5:7C:60
Authority key identifier: DC:75:85:2E:B3:D5:F4:BF:A7:E4:4E:80:EE:A9:88:19:86:40:3C:D4
Certificate issuer: /CN=dc75852eb3d5f4bfa7e44e80eea9881986403cd4
Certificate serial: 019FAA195D8229AA960F589697F9C63ED4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
Manifest number: 10C5
Signing time: Tue 28 Jul 2026 19:00:16 +0000
Manifest this update: Tue 28 Jul 2026 19:00:16 +0000
Manifest next update: Wed 29 Jul 2026 19:00:16 +0000
Files and hashes: 1: 3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl (hash: 9szw8p2tInAVfdLEkYxFCrTZcLxuqguphpEGMDgBMO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:5d:82:29:aa:96:0f:58:96:97:f9:c6:3e:d4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc75852eb3d5f4bfa7e44e80eea9881986403cd4
Validity
Not Before: Jul 28 19:00:16 2026 GMT
Not After : Jul 29 19:00:16 2026 GMT
Subject: CN=491fb9e5f6f60240ac708be6b1f60cb413d57c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5d:51:cb:3c:b2:fe:8a:c3:f8:8f:f4:fd:36:
e8:8d:48:b7:ec:40:93:cb:75:b3:b9:c2:a1:52:a8:
5d:41:7e:97:77:a4:1c:ea:32:a8:56:ab:35:c9:00:
26:9d:b6:c3:27:29:5b:08:0e:e8:f4:3e:9f:71:55:
57:42:b6:c9:82:8a:d3:69:62:0f:70:c8:44:c0:39:
f2:54:a7:e9:b1:3e:ab:3b:21:16:30:f4:1e:b7:39:
4a:c1:41:b8:51:c8:2a:b1:5d:79:ec:47:a5:f4:41:
b7:8c:97:13:d2:bb:bb:19:25:17:99:aa:80:3f:ce:
f3:81:cf:d7:77:78:e8:4c:8c:c5:f1:f8:e1:21:8b:
cb:77:49:c5:e0:d2:9c:4d:48:a1:a8:ca:dc:a6:75:
c9:9d:3a:b0:80:99:66:96:18:43:63:2f:91:d9:76:
85:58:c2:8f:35:8a:7e:86:c6:e7:03:05:2e:97:60:
f8:4d:91:a2:c9:28:e0:27:06:70:36:d6:d5:12:d7:
c8:2a:18:0b:73:6c:cd:d9:12:2f:3b:66:d7:13:5b:
97:48:7b:6a:f4:90:f9:34:fb:ac:18:09:c9:8a:f8:
4c:71:c2:15:20:d2:7c:26:e5:e1:51:0a:1d:d3:dd:
12:82:d2:ac:a3:51:83:78:34:6f:41:c4:0c:66:50:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1F:B9:E5:F6:F6:02:40:AC:70:8B:E6:B1:F6:0C:B4:13:D5:7C:60
X509v3 Authority Key Identifier:
keyid:DC:75:85:2E:B3:D5:F4:BF:A7:E4:4E:80:EE:A9:88:19:86:40:3C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:62:1a:46:6a:02:e5:e4:da:27:18:79:e0:a1:2c:2a:e6:a8:
07:c8:ea:ee:a9:c2:97:cf:e2:64:37:13:e5:33:56:c0:ab:99:
b9:1b:93:bf:7e:c0:b4:d8:97:f7:b5:91:cb:08:24:ab:38:4b:
c2:d1:8b:e1:f3:c3:2f:ef:ca:76:75:bc:99:23:40:0c:02:7e:
e2:60:da:45:3b:f8:f4:fb:7c:9a:8b:41:ce:31:bb:e1:13:4b:
7b:52:f0:23:46:ce:3c:3a:d0:c1:19:7b:79:60:b7:18:31:8f:
f0:8e:08:ee:95:f9:b4:30:a7:74:f1:54:c1:4a:3f:65:ee:01:
34:a4:c2:2d:4c:7c:9e:b6:39:25:f7:06:53:56:f8:35:f4:26:
eb:ab:95:54:50:d3:ab:93:24:fb:a1:fb:ea:fd:d9:62:13:0e:
28:a6:05:77:b1:0c:99:fa:95:0d:df:23:8e:ab:56:5e:8c:5a:
35:d4:27:b8:78:ac:f6:bc:77:50:de:6a:dc:60:1d:8a:85:da:
3c:31:d2:74:74:73:63:d8:5b:50:e1:f4:cb:39:b2:91:b1:a1:
28:5f:30:2f:65:5a:83:60:17:3d:47:6f:6b:f0:60:7d:9c:18:
64:6d:78:be:2f:cd:ea:7a:bf:33:15:c6:fa:d9:e5:2c:88:4d:
63:80:74:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:30 2026 by rpki-client