Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: dDB8WSuY7+qLBpJDKAlkaA9gSHHjfVVF5tjggnRgyII=
Subject key identifier: 9B:CD:30:C1:F9:21:D6:8F:F7:9E:B4:61:18:BC:B1:D0:6D:FB:7C:E6
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 019FAA19FFBDEC54FDEB8EF94AFACDB1ADC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 19:00:58 +0000
Manifest this update: Tue 28 Jul 2026 19:00:58 +0000
Manifest next update: Wed 29 Jul 2026 19:00:58 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: jXjJXlDgY95chZhvRMztiYFoH/XuG28b0vOjn+amf/U=)
2: 8J_-hWHGPWEYN0vjZgr-eCklQg4.roa (hash: qBQWLHkgusN1QQCqlJvTYnenuo1KralG8LLl2synFhs=)
3: elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa (hash: 8uKk6fr9oWkQeVcBDQrXHD0Zpv9/C37D7zWtE6D01OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:ff:bd:ec:54:fd:eb:8e:f9:4a:fa:cd:b1:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Jul 28 19:00:58 2026 GMT
Not After : Jul 29 19:00:58 2026 GMT
Subject: CN=9bcd30c1f921d68ff79eb46118bcb1d06dfb7ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:7b:82:e3:a9:9d:ba:be:f7:46:fb:79:6b:
6f:db:d4:90:b0:77:dc:91:3c:23:df:ba:b0:2b:46:
78:c7:e0:15:dc:b5:1e:fb:25:77:9f:c3:8c:32:9f:
67:f5:2d:e3:36:e8:0e:26:6e:7b:10:78:93:47:a9:
2b:2b:e3:57:53:a3:2b:4b:2e:81:c4:ce:56:3e:20:
de:cf:57:7d:68:2f:bb:61:92:47:97:97:a8:48:e6:
0a:1c:ed:bb:ae:86:b5:9c:b8:b9:61:fc:9b:1d:a1:
8f:f2:ee:f2:eb:2c:61:90:aa:27:18:ef:4d:23:93:
8b:7b:ff:0d:03:79:1b:ac:2d:bc:a5:c1:a0:e2:49:
fa:48:65:e7:74:d7:46:bb:7b:82:87:f0:bc:2f:27:
93:4b:94:95:be:58:87:63:20:9f:bf:e3:82:c2:d2:
27:f0:2b:a8:11:44:b6:e4:42:4f:cf:e5:90:dd:d5:
5f:3a:db:9d:f1:42:c7:50:f5:a2:72:c1:73:5f:3a:
8b:be:14:90:c4:4c:4c:86:d5:24:54:d7:1b:a6:1c:
f7:8e:52:d7:6b:6a:35:b5:e3:7f:17:21:91:2e:07:
ed:49:c8:3a:4c:d3:27:31:24:49:e5:98:9d:97:6c:
63:88:b5:41:a5:19:c8:5b:83:00:bf:7e:09:0e:e0:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CD:30:C1:F9:21:D6:8F:F7:9E:B4:61:18:BC:B1:D0:6D:FB:7C:E6
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9c:e5:14:03:f0:e8:ae:bb:af:34:d8:fa:bf:95:fd:59:5f:
e4:9b:28:b3:d6:eb:8d:46:ad:bf:3c:30:b6:ce:78:cd:5c:32:
e7:74:57:3c:a9:1f:6c:45:e4:ea:43:cf:1d:f1:12:3e:1d:e9:
1b:83:52:c7:b7:5c:a3:6f:d5:63:8d:d6:92:eb:c5:f4:70:1f:
8d:c3:b6:84:f1:c5:26:f8:5c:62:7e:26:32:6e:8e:25:96:57:
89:8c:86:ff:78:95:d1:ad:2d:95:c1:83:94:29:9c:21:7a:f7:
a8:51:c7:e0:eb:a1:7f:ea:2d:9f:14:c2:79:b7:14:c3:bd:b5:
b1:0a:ec:0f:2d:2d:fa:f9:66:08:f4:11:8a:6f:79:d8:75:5b:
a2:ab:6c:79:42:17:5f:81:49:52:5b:fc:0f:f1:8d:e8:f0:73:
82:24:e1:19:4c:ba:1e:4f:5b:d0:43:18:4e:ab:86:a1:a6:36:
9e:74:e0:07:61:01:77:88:fc:13:07:28:b2:92:77:65:26:bc:
a2:7c:b6:9f:ba:57:1e:99:85:43:80:26:93:a8:0c:3a:e2:ac:
45:ac:de:8f:9f:2a:32:79:12:05:03:89:31:a7:99:46:f5:cf:
bb:a5:df:de:f5:f8:eb:91:c6:0d:b1:60:69:f1:47:4d:7f:2f:
4f:d4:fb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:14 2026 by rpki-client