Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: uWuyvwBseV6JbYDYyDpr+GCrCaP+ttH/ctQkvQgZ7dM=
Subject key identifier: F1:9C:EA:9E:61:70:87:10:0C:43:A7:47:F0:B2:BD:AC:6E:2F:56:91
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 019FAAF59FD465FE102C5F350CB4B36A7CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 19DA
Signing time: Tue 28 Jul 2026 23:00:51 +0000
Manifest this update: Tue 28 Jul 2026 23:00:51 +0000
Manifest next update: Wed 29 Jul 2026 23:00:51 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: VAUJtQ58PiDUJXScx7NDFpQ2h8fRuKhgXAY1bdl8l6k=)
2: BMMff36mDnqefE-fi1QYcDeaUEk.roa (hash: Yky2cFQCYWcMLt5A2AE8QdQ1eB3p9PDevvqazUFMfX4=)
3: c1k5DpW670XTtOlEvTkIz9kZXlc.roa (hash: Y49a9m/TdUFutVOSA2rIEcmP18u8ki2BwGqjBT3Sy90=)
4: ncKH1YpuJk5-uciMg32syOz5Dh0.roa (hash: 8NVQeOlGQC5ZiQGFRi3sIRfLjXwS5UuTrVhAQo79EFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:9f:d4:65:fe:10:2c:5f:35:0c:b4:b3:6a:7c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Jul 28 23:00:51 2026 GMT
Not After : Jul 29 23:00:51 2026 GMT
Subject: CN=f19cea9e617087100c43a747f0b2bdac6e2f5691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:10:26:52:cc:60:d7:4a:db:09:9b:ac:87:
77:74:d4:dc:a6:fc:b1:25:fd:61:a5:5e:a3:24:b2:
cc:b4:bd:d2:cc:91:fa:95:d4:cf:33:dd:79:83:5d:
9f:44:44:b6:b6:57:66:17:de:e2:dc:c1:1d:ad:0e:
f0:43:84:62:97:c3:59:7c:c3:cd:80:59:7b:ea:35:
62:0b:30:39:39:98:2d:d1:96:87:d3:42:d4:3e:58:
56:f6:5d:7f:37:d5:97:c6:2b:bd:25:26:09:e6:f5:
21:99:11:7a:87:46:2c:46:11:b2:5b:9d:23:4e:e2:
a7:f5:5b:4f:78:ed:61:c2:3c:28:df:76:9f:3b:d1:
f4:ec:a7:7a:6a:0a:d6:d5:d9:00:60:6d:64:c7:97:
d4:ed:ef:1d:f9:98:96:82:24:b8:5e:3d:f5:cc:3f:
23:ca:0f:2a:11:7e:77:2c:1e:1b:04:dd:48:af:ad:
31:63:c5:6c:da:49:5a:78:9b:41:aa:a9:66:02:d2:
47:a5:8a:3e:59:01:29:f1:91:1d:6a:f8:a4:27:1d:
18:5d:d4:a6:34:08:c5:38:f8:ff:ff:7a:78:f3:1b:
d8:fc:01:d7:55:26:b9:9c:76:e0:97:76:65:83:1c:
2c:ba:15:c3:0c:b9:09:ad:25:f8:c1:e5:56:5b:07:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9C:EA:9E:61:70:87:10:0C:43:A7:47:F0:B2:BD:AC:6E:2F:56:91
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7a:0a:63:da:23:94:b2:13:43:b6:47:bf:14:07:ee:56:bd:
c7:fa:0f:f0:51:da:af:27:d2:54:6b:56:28:3e:2c:75:58:9f:
eb:8b:c9:f4:9a:ce:d2:26:63:34:49:da:75:d0:87:ea:26:df:
cf:e4:43:80:e5:e4:f1:cc:03:2b:e6:26:d4:7a:79:00:b8:49:
c7:c7:f6:4b:60:db:59:08:3f:44:0c:50:9d:08:db:53:4b:32:
44:2c:20:9d:c0:ec:a7:a6:a7:2b:05:4e:a3:94:53:79:76:98:
6a:b3:56:6a:f8:28:16:12:c2:36:84:1c:8a:fc:7e:cf:be:b5:
3b:0a:72:4c:77:d5:3e:96:26:76:ab:9b:30:cf:96:0b:3b:2e:
45:82:8f:a6:13:22:cd:b3:80:48:31:1f:ca:1a:e5:5f:f0:ab:
bf:72:7c:91:03:7c:fd:75:75:b0:bd:44:2b:21:2b:0c:bf:18:
0f:75:da:0c:8f:db:7e:d5:1a:53:87:87:cf:89:c1:9b:01:0a:
28:9f:ec:73:e0:a8:37:39:2e:5d:88:67:ae:f6:bb:7d:c7:d8:
17:d3:7f:78:a3:77:80:30:c8:e3:dc:a4:d7:dc:34:29:ee:50:
af:a2:f7:46:14:e0:2d:ba:65:e4:5d:0c:72:9b:51:a0:06:da:
7c:ad:f5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:45:50 2026 by rpki-client