Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: K8siyb8CFCotBEHpSEpVCaNqRBXLe8w06KV+ikHWfgw=
Subject key identifier: 6D:55:4E:46:65:E7:00:B7:BD:6F:20:73:E7:AE:6D:A0:BF:C9:AB:11
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 019FA9E27D861123D38DD9956ADC35243222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 18:00:20 +0000
Manifest this update: Tue 28 Jul 2026 18:00:20 +0000
Manifest next update: Wed 29 Jul 2026 18:00:20 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: 5FF+T79aAJTdJoR6jxaVTso5yAnHneWvJw/1HV7/ey4=)
2: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (hash: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:7d:86:11:23:d3:8d:d9:95:6a:dc:35:24:32:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Jul 28 18:00:20 2026 GMT
Not After : Jul 29 18:00:20 2026 GMT
Subject: CN=6d554e4665e700b7bd6f2073e7ae6da0bfc9ab11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:86:f3:90:47:2d:c9:ef:8c:60:d1:59:1c:
92:80:9f:00:d9:e8:02:1b:24:6e:87:a0:d5:d7:12:
de:12:cb:46:df:24:59:bb:68:5e:f5:96:23:dd:a1:
18:fb:d9:b6:17:b6:6b:15:29:a1:f1:02:71:c3:0a:
86:e1:02:9d:8d:00:6b:a0:83:d6:dd:45:50:e9:a3:
b2:6f:6b:03:4f:5c:df:2f:eb:f7:ea:18:5d:83:e1:
17:40:e4:54:94:b0:4a:5e:be:b5:70:75:54:76:1e:
68:a6:ec:4d:53:0d:0f:0e:8a:73:15:6a:09:18:2c:
d7:3b:c9:a1:c5:c1:5e:7c:24:4d:13:21:9e:1f:17:
55:6f:19:90:ff:69:04:4f:7f:2c:f1:9a:0b:43:64:
5f:d8:a7:2e:47:9e:e4:57:13:ef:fe:43:90:03:47:
d5:d4:f1:62:41:69:7c:3f:c1:0c:f1:5c:a4:30:8e:
a7:3e:67:15:4e:dd:a7:24:7c:0b:50:78:22:c1:b3:
30:f3:20:32:6d:e8:e6:86:bf:dc:16:0f:1e:a1:b2:
b2:c7:50:f0:4d:ee:1c:59:9a:90:ec:af:91:dd:57:
e9:72:63:90:f3:12:98:1f:2c:38:61:68:71:db:7e:
eb:5b:87:e6:a2:e9:54:2d:01:46:58:5b:84:24:a8:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:55:4E:46:65:E7:00:B7:BD:6F:20:73:E7:AE:6D:A0:BF:C9:AB:11
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d6:8b:a9:88:97:90:cd:08:25:f9:d8:63:ff:1e:ae:c4:48:
f8:38:cf:a2:ed:e7:be:9d:13:4d:35:87:80:a3:40:d6:fe:7b:
d7:92:d2:95:1c:7f:5c:d1:7a:ee:19:b0:f0:7f:93:79:66:b2:
b1:7a:54:e1:9a:7f:8c:56:23:a0:ba:4c:9d:86:96:2e:31:fc:
a1:c7:69:2b:10:04:54:fa:9a:21:3f:5c:aa:08:fa:49:cc:7e:
45:e8:94:ce:a4:d8:56:9a:f6:da:6a:f8:94:8a:65:56:ac:d4:
13:a5:8f:f6:90:77:74:82:f3:78:01:0d:c8:3c:10:0f:60:c5:
b1:28:0d:4c:31:be:0f:94:90:e5:7e:8e:2a:0d:f6:51:9c:bb:
09:84:1f:88:33:de:ca:e1:e4:0a:62:aa:25:20:af:b4:1f:32:
7f:38:fb:da:f3:05:1f:07:74:09:70:91:07:f6:86:92:85:d3:
40:ae:92:5f:f5:89:36:9c:f8:16:8b:d3:e5:e5:d8:fe:52:33:
ea:6c:88:36:52:18:b6:4c:57:ee:ae:a2:d9:c1:1b:55:64:79:
7a:f2:5d:50:6c:b9:e7:31:82:4f:97:9f:ba:c5:44:54:52:ea:
87:ad:ac:6a:d7:cd:a0:90:54:ce:6c:2e:da:24:5a:80:45:2d:
79:3a:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:00 2026 by rpki-client