Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: NjS15pRaL5DcKsqp04j0pJxXnC9mlg2CSlD3iz55aRs=
Subject key identifier: B7:47:63:7D:A4:A0:E0:44:DB:9D:73:99:D1:64:93:27:12:2D:E0:34
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019FA8D06C37035A01E3DC4518E67CBA9C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 13:00:59 +0000
Manifest this update: Tue 28 Jul 2026 13:00:59 +0000
Manifest next update: Wed 29 Jul 2026 13:00:59 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: SCY0YQfX+nalVjlRY54NA9JKh5JqZ64YjyKOLtvX6TA=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:6c:37:03:5a:01:e3:dc:45:18:e6:7c:ba:9c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Jul 28 13:00:59 2026 GMT
Not After : Jul 29 13:00:59 2026 GMT
Subject: CN=b747637da4a0e044db9d7399d1649327122de034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9c:b6:0d:26:01:cb:61:de:9f:69:95:07:05:
ac:91:b6:62:e1:76:8d:d5:65:54:7e:a8:5d:f6:96:
41:04:a0:8d:8f:96:d4:43:6b:96:fb:61:63:b2:24:
93:bc:62:11:fc:74:d6:cc:16:eb:8c:e6:a7:d4:e5:
28:d6:8c:06:2c:87:20:6b:f4:e7:ce:ce:6e:25:ae:
84:f2:c6:8f:88:f9:74:f8:59:7a:05:c6:c2:6f:c7:
fc:f2:31:31:fb:c2:80:fa:23:8e:97:c9:e8:73:d1:
11:a0:96:d2:c8:fe:57:c0:fd:e7:98:5d:4c:04:05:
e5:78:b5:f0:0a:6d:a4:68:e0:c5:12:d9:63:c7:20:
ba:e4:a7:4d:14:fc:71:f8:a4:5e:e5:ff:a8:3e:54:
52:03:fb:97:b5:c1:a9:19:12:be:0b:3c:e9:89:62:
86:5b:62:f2:dd:97:95:58:8a:6e:8a:c1:c3:30:d4:
f2:cf:67:4b:43:ca:13:fb:05:71:73:ae:be:00:5e:
4c:d6:50:ea:f2:27:8d:34:6d:0f:d4:30:44:f4:ca:
1a:2f:9f:2f:3f:03:ef:a3:53:d7:b7:8e:1a:88:91:
60:60:54:c4:b7:2a:60:4f:fd:c9:0a:34:21:83:dd:
2f:f9:e7:19:b2:0d:13:4b:fa:7a:d3:a2:6e:c8:a3:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:47:63:7D:A4:A0:E0:44:DB:9D:73:99:D1:64:93:27:12:2D:E0:34
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0c:b4:b1:d4:f6:9f:35:cf:53:9e:5a:c7:65:3e:68:f0:d5:
82:4e:00:0d:17:fe:c4:86:3f:cc:6c:82:9b:18:8f:2a:0b:09:
d8:e6:f2:b8:28:a5:7a:c1:24:56:f2:51:12:99:07:ef:a8:e7:
a6:f9:cf:8d:4f:39:3a:b2:d9:2b:b5:fe:ce:cc:cc:03:ef:8a:
a5:e2:36:20:8c:33:0e:00:d2:4f:1e:fa:8c:09:10:9a:cc:44:
cd:7e:f3:a1:93:65:98:cf:6d:d9:a7:ef:15:6b:7c:cb:60:ec:
c8:99:bf:09:c6:0d:7f:36:2f:74:37:3d:d5:e3:10:2f:79:8b:
c3:a6:d5:5b:20:3a:c6:6d:0e:fa:4f:22:31:e5:73:58:ab:7d:
97:e0:04:43:24:e1:83:d1:e1:28:37:87:7a:58:91:56:7e:d2:
75:aa:ba:12:0d:81:a7:02:f9:1b:f5:0d:67:cf:62:a5:10:fc:
59:64:f7:42:97:3c:dc:69:7a:e4:2a:31:79:70:51:96:27:05:
ed:aa:89:0d:3a:99:21:2a:5d:ad:e4:a3:cc:ff:42:c5:08:df:
4b:d8:a4:2c:4a:db:3e:45:6a:74:ac:20:49:27:5f:87:03:b0:
77:de:0b:a5:33:97:b8:24:0a:c1:bf:01:e1:70:84:79:5f:bb:
09:0b:1c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:20 2026 by rpki-client