Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: Pt/VO/0ODPop/oQWfIp8iA5EnfAjbYOW67Zitefr+mQ=
Subject key identifier: B4:10:82:B9:A8:1D:72:9E:83:F4:1A:3C:4D:F6:FC:B3:8A:94:E9:8F
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 019FA9AB86D293EC8020A70A1590A79839B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 17:00:18 +0000
Manifest this update: Tue 28 Jul 2026 17:00:18 +0000
Manifest next update: Wed 29 Jul 2026 17:00:18 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: PTBrTpTPo7iMo0SJbAxz8JWDK1xBXEzXVSgC+E6xXG8=)
2: 3zlYESujx6iqyh6hQsCczNEcHfA.roa (hash: giiowx0wopsav1ocUyq7di4cnnYmyvwdPI251v0t4Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:86:d2:93:ec:80:20:a7:0a:15:90:a7:98:39:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Jul 28 17:00:18 2026 GMT
Not After : Jul 29 17:00:18 2026 GMT
Subject: CN=b41082b9a81d729e83f41a3c4df6fcb38a94e98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:ad:db:f9:0f:62:c6:dc:ba:c1:35:03:fc:
48:6c:09:0d:a5:0c:48:de:98:64:26:92:cd:2c:8f:
bf:43:41:71:5a:6f:b1:21:8d:da:d2:c4:d9:61:63:
4c:7a:b4:09:d8:49:e3:b1:9b:3a:26:31:5a:29:2b:
63:4c:f6:76:64:1b:2d:fd:1d:63:ab:50:8d:1e:2b:
04:30:74:e1:b7:0f:3f:6e:dc:da:7d:61:71:73:66:
22:36:1c:b6:18:e1:99:ee:46:b2:9f:44:a5:67:c8:
71:fb:90:3e:9e:65:0e:0e:01:ef:6b:6e:39:a5:83:
07:fa:1e:8c:e1:b7:f8:69:35:11:0b:aa:c6:f7:09:
0a:6c:4f:9a:6c:9a:04:88:dc:25:84:73:f3:d5:c1:
23:8e:33:00:c4:e8:8e:7e:e9:c2:ef:d5:d8:50:d2:
32:ec:7c:0b:ca:80:06:01:77:e1:00:63:24:da:27:
1d:12:63:ac:69:35:46:f8:19:b8:bb:a9:f6:ab:ce:
54:7e:60:8f:8a:7e:18:c7:2e:6e:84:f3:36:a8:af:
59:42:a4:30:27:32:a3:9c:16:b6:23:06:f8:5d:20:
af:c5:9c:18:36:41:24:0c:1e:18:da:06:21:3c:5a:
19:ff:29:c6:dc:7a:cd:eb:c8:d7:d8:4c:1c:37:c8:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:10:82:B9:A8:1D:72:9E:83:F4:1A:3C:4D:F6:FC:B3:8A:94:E9:8F
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:36:53:8b:b4:40:48:9f:2b:be:24:40:d2:f1:e7:5e:15:8d:
f9:4c:a9:22:8d:ba:d4:5c:d2:fe:5e:96:8f:04:d8:38:f4:07:
a5:43:ff:db:e3:0d:56:41:56:12:a6:e3:7f:74:bc:64:b6:4f:
1c:b5:f6:cb:76:62:51:18:3a:57:16:50:a1:af:c5:ee:ef:7a:
9e:0f:00:14:34:d4:11:e3:a9:25:0e:a2:be:cf:c4:30:fc:cf:
24:fa:7e:da:37:4f:0e:49:a8:f3:d7:ee:f9:bd:44:16:c6:98:
da:b9:f6:4c:2d:8b:c7:ff:96:ad:b0:4c:15:6d:85:b2:51:c6:
25:60:27:91:0e:f0:99:06:11:ad:d8:c9:27:b3:70:e6:44:be:
dc:a7:68:1b:5a:23:e7:a5:99:b1:a0:a7:c6:cd:eb:71:06:a3:
68:49:91:7f:b7:e9:6b:6f:10:52:91:3f:b1:c5:ee:9a:ea:fb:
28:ed:38:8a:db:0d:fc:d4:a7:1e:44:f9:53:77:b1:46:ca:d9:
5b:e0:6e:fd:68:b1:d0:fe:cc:0c:1b:48:cb:e4:24:0f:59:ae:
1c:a2:24:20:0a:29:09:f3:53:60:2d:20:ab:5c:89:a8:b8:f2:
08:c9:e3:b7:c8:27:5f:3c:18:36:91:37:a9:35:86:82:62:4a:
66:ab:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:53:32 2026 by rpki-client