Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
File: 3Hgh4by_bgdOpIFKqlxj47qBPF8.mft (raw, json)
Hash identifier: Dn8n7fejUDqyQxYCTBb2wICqpbKxh+k4QdUyLmy3w6o=
Subject key identifier: E0:51:14:CE:23:DC:BC:42:06:84:8D:43:78:45:FA:76:D5:1B:05:CD
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 019FA93E767E52F64BDC45AD3038C1C1ABB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
Manifest number: 19F6
Signing time: Tue 28 Jul 2026 15:01:10 +0000
Manifest this update: Tue 28 Jul 2026 15:01:10 +0000
Manifest next update: Wed 29 Jul 2026 15:01:10 +0000
Files and hashes: 1: 32lYY6uEr5NQiZ36Yw1PDpEB0LE.roa (hash: nbIrlyDfM/OsIW8q6DxR5+MKnNJS4Cwv/h7ugS3W6kw=)
2: 3Hgh4by_bgdOpIFKqlxj47qBPF8.crl (hash: sQaY7EkiHY6r+u4j1FPFLqSx6WRoZRP+OAUWB7z56Vc=)
3: 4brBRSXd-3J0XI6W1cQMml969rM.roa (hash: HAAIbdurASwhGqOl0EqIaoNlObK5qBtHlNL6sAbPYAw=)
4: CV0Da0hDhTImPAfNEKg1Zmq-t4Y.roa (hash: gRQv5O+XgMBfojo8WrrSJ295oJBia/Hac6oJn0s/JA4=)
5: NS8B9quAxg9DaONCvo-F09E4aHg.roa (hash: 611N6cJ08ljysAfZN/DDvW2PaFTUCRX+l4eXQLoeFWE=)
6: YorSmVSKuGvPWA7DA6m1cRcL1FY.roa (hash: qU63ylCGxnEyiZbz76RKuCXngXRAm2RLSoEhfEzs9Wk=)
7: ZkI0BKv7hf_ucyX53-0WeS2FZU0.roa (hash: /W5mPhl5tNlOLzwA/Si8gsOL5g4fr6fls1AqWYZxDGY=)
8: hsVsux8sHzZqQOz9MIXAz_SM6VI.roa (hash: 3Hc4odb8fRJz6qv0eC3Z9gpTtQGDv+DPG+2jWtEDSs8=)
9: vulmYW4p9PU9wnTvn-jVp44qOCM.roa (hash: MXgO5bfy+NsKZlh8zhQJtMRiH5fhuEIemBIGiWuNsdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:76:7e:52:f6:4b:dc:45:ad:30:38:c1:c1:ab:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Jul 28 15:01:10 2026 GMT
Not After : Jul 29 15:01:10 2026 GMT
Subject: CN=e05114ce23dcbc4206848d437845fa76d51b05cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:35:7c:d0:2a:76:00:19:2a:8f:dc:a3:9d:
f0:dd:10:00:8d:b0:c5:c4:36:1b:15:40:80:bb:0b:
20:12:13:89:a1:73:ff:16:41:1f:74:bb:00:8f:28:
c0:ca:cd:10:e1:19:f7:2f:dd:93:81:98:e6:f4:b8:
1c:1b:ee:40:49:f8:dc:73:7a:af:bd:9d:1e:cb:54:
3f:20:86:64:88:d6:41:22:32:b8:34:eb:a6:c3:0e:
60:68:51:7a:bb:62:91:3d:44:d3:55:9d:14:3d:61:
38:50:6c:42:75:1e:78:2a:4a:93:94:e8:cb:95:37:
6d:2c:c6:b4:66:4d:0b:e6:14:d8:e0:c4:56:59:64:
a1:48:cc:e8:97:48:01:e2:ca:20:5d:bc:d9:13:09:
2e:e0:d8:f5:96:58:1b:03:d9:2c:d5:bb:8d:7e:cf:
ee:1a:ca:2a:41:da:6a:36:2d:e4:df:99:3c:52:ff:
6e:85:16:cf:d1:ae:97:d2:03:0a:69:a5:80:6d:e7:
77:0a:a8:33:08:eb:c2:bf:4b:fa:b1:7d:da:fe:d8:
f6:66:8c:47:fc:94:52:0d:5d:d4:0c:04:f2:f6:d9:
fc:2f:2e:82:87:8b:5c:0a:18:44:d3:30:2b:5b:02:
17:c0:d4:ea:a3:47:4d:5a:04:c4:3e:bd:0e:8d:32:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:51:14:CE:23:DC:BC:42:06:84:8D:43:78:45:FA:76:D5:1B:05:CD
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ee:dc:8d:bc:bd:98:21:74:b3:8a:b5:72:2f:b7:79:af:11:
67:d8:af:ad:2f:4e:89:a7:d3:19:a1:6a:fe:55:b1:82:0a:44:
5a:5a:e9:7d:a3:ea:23:d6:8b:60:a7:ff:b9:a0:72:8b:0e:6a:
a4:9d:93:1c:7a:42:ce:c5:54:a6:61:60:22:42:5b:7d:76:88:
76:de:20:e5:53:fd:86:b7:71:15:8f:3c:e1:3c:c5:00:2c:2c:
67:f0:17:1d:31:a7:55:a6:c7:d9:50:ae:fa:e7:63:bf:39:da:
f2:a2:43:e9:df:92:9f:c4:c3:91:72:23:e8:98:68:60:76:0c:
19:55:aa:51:20:f7:b7:d4:7b:eb:a9:f8:f8:31:f0:3a:9f:63:
25:e1:0c:46:13:7c:09:94:c6:7c:65:39:27:36:95:ee:3c:fa:
f4:68:45:49:0d:a7:c9:3e:88:33:2f:4c:25:59:99:44:18:57:
8a:52:56:a5:14:ad:fb:20:f5:37:85:d4:11:aa:6d:d3:49:02:
72:c8:51:56:e4:0b:65:e5:5d:0c:fd:e5:e5:bf:31:78:7e:f2:
3b:ab:1c:b7:05:aa:10:b4:54:2b:63:0d:c2:5e:29:99:cb:15:
c0:bc:57:4e:3d:9b:30:8f:53:00:95:9a:1f:84:45:59:55:d4:
ca:e7:e4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:30 2026 by rpki-client