Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: MF2ts42MP3+YdjT//LaIg6slQpWuN4+yvkmcISZy0Vo=
Subject key identifier: F9:08:3B:0C:40:5D:6D:85:B7:E7:3F:46:04:A4:68:0B:7D:8A:28:79
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 019FA974D619261B359EA4213E53E485F5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 16:00:34 +0000
Manifest this update: Tue 28 Jul 2026 16:00:34 +0000
Manifest next update: Wed 29 Jul 2026 16:00:34 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: /B5rd+6b5kylKXcnmt7utlrRvHca/U9kwKePHsBO/P0=)
2: SIrHAW8-wlZDKzvy2I8a6ATw1Os.roa (hash: J87HrMwqHtHS9Z8HI1NmmjUGTf0po2q7EzVGTEZtP5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:d6:19:26:1b:35:9e:a4:21:3e:53:e4:85:f5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Jul 28 16:00:34 2026 GMT
Not After : Jul 29 16:00:34 2026 GMT
Subject: CN=f9083b0c405d6d85b7e73f4604a4680b7d8a2879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:01:5a:be:7a:c0:50:16:9e:dd:bc:a1:11:
79:f9:76:6b:31:31:1b:94:7a:d1:3b:f1:9e:ba:ba:
4e:03:8a:df:c1:01:48:1f:85:ca:82:54:97:48:2f:
fa:97:1e:01:8b:af:9a:2a:99:54:9b:0f:87:06:54:
9d:70:ae:80:b0:c6:c6:9d:73:f3:bd:6a:c4:ce:c7:
5b:70:6d:a3:2d:ab:61:1c:78:75:2f:32:a1:35:5a:
80:45:ef:f8:1d:21:3d:60:b2:0a:1a:98:f9:11:cd:
4c:aa:f5:ee:18:81:92:a9:ac:f4:85:20:03:4f:c4:
91:cb:37:a2:31:9d:08:a0:ed:8b:8f:f0:d2:bd:29:
0b:46:d9:84:fe:b4:05:5d:b9:d9:d0:7d:f0:39:d7:
4b:d8:6d:6c:6d:07:2a:e9:03:09:d8:00:e8:8d:ce:
ca:ef:b6:c3:84:0d:d7:a9:c4:2c:e8:31:5e:69:4f:
ed:a7:84:4a:36:e6:ef:7f:75:cd:dc:72:cb:48:42:
81:90:4a:8d:60:7d:48:f6:65:6b:a8:51:57:01:ec:
a9:09:58:66:81:56:c6:bf:55:f2:a8:0a:27:f7:72:
24:30:96:50:7d:4a:16:64:a4:37:f3:41:cc:71:89:
89:46:1a:c3:11:11:2b:59:9f:0a:aa:f4:44:20:c3:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:08:3B:0C:40:5D:6D:85:B7:E7:3F:46:04:A4:68:0B:7D:8A:28:79
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1a:f3:5a:18:4b:5f:81:80:00:f0:1a:b0:b8:ab:74:4e:87:
f1:4d:55:f1:53:1e:e5:43:68:16:f5:62:ad:eb:09:9f:71:47:
05:6e:1b:26:fd:eb:fd:68:f1:24:94:75:53:2e:39:d5:b7:62:
16:88:57:82:11:b1:bd:bb:ea:e0:02:cb:9d:ee:87:86:d4:87:
c5:1d:28:4a:51:bb:5d:a9:9a:e1:77:f1:8e:f2:e9:0b:46:d0:
3c:68:b9:9c:c7:e5:bd:50:40:c3:06:0f:6a:2c:ba:b2:31:d2:
92:10:79:dc:bf:f7:6b:9d:87:d4:04:84:15:a2:c2:ce:af:86:
c3:59:73:16:ae:57:45:6e:82:fd:bb:26:dc:f5:a0:7e:2f:a9:
fd:a2:be:0e:f6:47:70:bd:b6:81:35:5d:43:88:d1:b0:44:f1:
16:62:f5:9a:b8:4c:49:f9:b3:d2:b1:79:af:ca:21:31:98:7a:
82:a1:80:9a:19:09:19:06:94:c7:a1:0b:f6:be:6e:f2:03:95:
29:39:91:2a:52:a5:96:77:ff:2b:62:d0:a2:64:5c:31:59:19:
71:b0:4d:a1:43:9a:07:44:87:78:c9:b7:d5:8c:97:cd:a3:db:
35:aa:1a:70:c5:6e:d4:5b:9f:92:1b:2e:fb:76:c9:88:74:55:
d9:9e:b2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:03 2026 by rpki-client