Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier: ANpNy3xO6ZfPTjcjY5m5I86ZxKcTkVPFkCammDPhIjU=
Subject key identifier: 51:FC:1B:97:CA:C2:16:0E:90:90:44:18:BC:C9:2B:5F:94:A1:0C:B4
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial: 019FA974921E803EF35B28E3A52E73536005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number: 067B
Signing time: Tue 28 Jul 2026 16:00:16 +0000
Manifest this update: Tue 28 Jul 2026 16:00:16 +0000
Manifest next update: Wed 29 Jul 2026 16:00:16 +0000
Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: yp5vtUDps71CCnb42xX36XUTctY69zYAOdt20JW17Hg=)
2: GUtmTasoYg9vC_X6TeYo5LqnthI.roa (hash: h4pcOYZGVhmcTnXyyDF08GhSsY9jTxf6Vxsbll0E63Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:92:1e:80:3e:f3:5b:28:e3:a5:2e:73:53:60:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
Validity
Not Before: Jul 28 16:00:16 2026 GMT
Not After : Jul 29 16:00:16 2026 GMT
Subject: CN=51fc1b97cac2160e90904418bcc92b5f94a10cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:53:49:dd:6f:0e:be:a7:07:55:09:58:66:
87:92:94:93:f8:cb:0d:ba:45:b4:55:36:2f:3b:14:
39:17:76:83:05:56:c7:1f:f6:4e:05:1a:d6:24:13:
a7:f3:18:ab:0f:75:4d:24:ae:a4:96:81:6a:97:d0:
d5:cc:a7:61:ef:95:eb:53:36:a9:01:a7:20:eb:66:
39:6b:b5:9e:1f:3f:53:d6:89:0a:71:65:58:7b:57:
ca:c6:de:f4:3d:28:a2:eb:79:38:49:61:e0:d7:68:
06:e7:28:b8:26:73:76:48:b6:6d:36:f2:51:07:62:
8d:81:51:f4:f3:be:b7:5f:ca:52:5a:d3:0c:fb:15:
4e:23:2c:12:ee:4b:20:6e:97:6a:db:1a:3e:e9:11:
31:78:a3:03:a5:39:0d:eb:c1:0d:fa:15:4e:bc:21:
fa:7a:c8:84:6f:f8:57:ba:55:aa:44:08:02:86:f2:
c0:0d:19:5e:0a:23:d3:07:cb:36:5d:30:91:4c:7d:
3d:c8:cf:0e:89:1d:a5:e1:c3:11:5e:80:45:c2:a8:
89:08:aa:ad:2a:a0:91:75:db:ff:c3:bd:da:d2:59:
40:22:a8:d2:8b:91:d9:0f:24:67:83:0a:78:cf:91:
0e:56:94:af:2c:a0:65:6e:cc:40:ac:04:9b:3f:48:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FC:1B:97:CA:C2:16:0E:90:90:44:18:BC:C9:2B:5F:94:A1:0C:B4
X509v3 Authority Key Identifier:
keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d7:bf:0e:08:50:4e:b2:30:51:2b:68:f1:ba:cb:2c:9e:cf:
d8:4f:e2:42:d2:b1:e9:3c:92:71:ad:c8:f8:34:8f:bc:c2:88:
2f:69:d0:82:59:3a:d2:40:d6:92:23:7d:ec:1f:f0:4d:2d:23:
94:f1:a8:d0:70:97:e9:9f:62:04:eb:97:14:fb:7f:59:8e:93:
fa:5a:e9:1d:65:e2:f4:2c:ed:06:78:40:e4:52:fd:0d:0c:8a:
3d:d5:70:ce:ac:8e:4c:85:f2:0f:e6:fb:00:41:aa:82:1a:37:
56:8d:5d:26:a8:0a:7d:70:32:1b:c2:6f:9f:5d:e0:93:fb:a9:
02:e4:12:96:1e:f4:03:4c:62:57:b4:f5:9d:87:e8:be:dc:16:
47:8e:f1:25:bb:a2:34:18:66:ab:48:cd:e1:bd:b6:4b:5c:fa:
b4:fc:30:19:3e:12:0b:9b:61:ff:04:cf:88:b1:46:c4:6d:02:
6e:e4:23:e1:e6:63:b8:0a:d2:bc:71:5f:f9:bd:98:2f:66:d5:
b7:00:fa:83:20:04:ef:fc:cf:6d:05:ad:9c:7a:ce:1c:89:69:
16:c7:e7:2a:8e:37:f0:f9:08:01:ad:62:1c:4e:67:e0:ca:e7:
78:67:0c:33:23:aa:47:2a:62:3c:8b:6f:7d:cb:d9:af:93:17:
89:a5:78:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:43:52 2026 by rpki-client