Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
File: 3liIYKFLOUpzUSmEKu-tGnBKMoc.mft (raw, json)
Hash identifier: niXiz4LTrZphJyW7KBtr+sZLMRNxuEmbStHSaIEc478=
Subject key identifier: 79:EC:0B:CC:BB:6B:B6:9E:46:B9:1A:B2:A5:05:6B:D4:7A:B7:63:6E
Authority key identifier: DE:58:88:60:A1:4B:39:4A:73:51:29:84:2A:EF:AD:1A:70:4A:32:87
Certificate issuer: /CN=de588860a14b394a735129842aefad1a704a3287
Certificate serial: 019F9059E298BEE7C457022E6D3ACBA320E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
Manifest number: 02DF
Signing time: Thu 23 Jul 2026 19:00:37 +0000
Manifest this update: Thu 23 Jul 2026 19:00:37 +0000
Manifest next update: Fri 24 Jul 2026 19:00:37 +0000
Files and hashes: 1: 3liIYKFLOUpzUSmEKu-tGnBKMoc.crl (hash: smO6QxbAJ/9NJI7INL816Oko+HwQ2ULoles3SoOyvGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:e2:98:be:e7:c4:57:02:2e:6d:3a:cb:a3:20:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de588860a14b394a735129842aefad1a704a3287
Validity
Not Before: Jul 23 19:00:37 2026 GMT
Not After : Jul 24 19:00:37 2026 GMT
Subject: CN=79ec0bccbb6bb69e46b91ab2a5056bd47ab7636e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:14:c5:24:52:ef:ec:34:0e:bc:37:b0:8d:25:
4a:93:de:b7:68:61:c0:90:ca:7b:57:b0:d8:73:81:
78:aa:ef:70:97:81:bb:23:53:6f:3a:28:4c:87:cd:
74:1d:d9:8d:a3:da:39:27:a4:c4:40:6c:1d:56:88:
50:f7:ea:08:ed:ae:f9:d8:33:71:81:b0:2b:fb:dc:
ae:2e:b2:ce:03:a8:f1:38:e4:ef:c1:95:c1:01:b7:
6f:91:ea:8a:50:c5:c9:82:e7:ce:2d:5d:bb:15:c6:
63:06:c7:94:7e:3b:56:5c:f5:7a:9f:1b:98:c6:4d:
ed:7d:20:c6:f0:2e:25:c7:01:56:b9:15:d0:2b:ab:
88:71:7f:fc:56:b0:b2:b7:21:6c:e7:c9:5e:77:d4:
b6:dd:cd:04:73:89:9c:5d:2e:b4:3d:f7:02:7a:ad:
28:76:6a:52:9c:45:cc:76:17:5f:ce:75:49:dd:f6:
48:d1:cc:4c:d3:ea:03:2f:8e:3b:1f:a7:48:25:57:
1b:0f:8f:97:c6:e4:ce:03:12:62:41:5f:a1:6f:cd:
33:8d:b5:05:3a:8e:e7:f5:3c:5b:ee:68:57:49:0e:
ef:50:46:5b:e1:0a:cc:d7:43:60:14:fc:73:60:3c:
56:02:0d:bd:67:bd:7a:f5:7e:f9:ae:8c:30:c8:5b:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EC:0B:CC:BB:6B:B6:9E:46:B9:1A:B2:A5:05:6B:D4:7A:B7:63:6E
X509v3 Authority Key Identifier:
keyid:DE:58:88:60:A1:4B:39:4A:73:51:29:84:2A:EF:AD:1A:70:4A:32:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:da:55:a8:35:ab:98:b6:c2:3f:42:75:9d:5e:90:54:d9:a9:
c4:15:ec:86:45:e7:57:61:f7:78:66:4c:c2:c6:45:88:09:5b:
b1:2f:d3:06:14:3f:5b:dc:c4:59:c8:a8:4a:92:68:6f:62:6e:
6f:50:9b:a1:16:03:8a:06:e8:02:b6:cf:7a:fe:7a:ee:4b:4d:
ff:a2:f3:ff:f9:cb:a7:a8:6e:a7:c2:f1:e2:6c:10:cf:3a:94:
8e:f1:e9:51:bb:7e:f2:c9:21:de:40:64:76:43:2a:98:a6:2f:
12:3f:f0:cb:33:0c:5f:7e:3e:b3:27:19:ff:12:1b:ec:dd:73:
be:7d:ca:05:e3:16:5d:a8:bd:ab:11:98:6c:b4:d3:50:d3:f8:
76:39:82:35:00:c6:07:ad:ea:fb:98:2d:aa:fb:de:73:87:03:
81:08:c6:c2:25:11:48:53:57:14:c5:33:5e:cc:5c:c1:95:a9:
fa:7e:de:c7:b8:42:e7:2d:10:cd:b1:f2:a6:06:09:af:2e:fa:
0e:b8:e7:bb:54:e8:e8:0c:2d:74:21:aa:4d:e6:19:c9:7a:80:
44:ff:db:bc:51:50:a7:d0:1c:3a:c9:7f:fe:dd:b4:18:d4:8b:
e3:67:b1:d7:43:30:ec:e8:0d:98:d7:74:13:f1:39:6a:09:a3:
f3:a9:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:56:43 2026 by rpki-client