Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: 6S6jv9pS+gMaU81rLojGWcBq6tdYQtI+BiNEv78nQRI=
Subject key identifier: BA:12:7F:FB:1B:76:37:50:5D:72:36:2D:FD:0A:04:97:F0:B5:12:AC
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 019F916CCBEB631E71F5A7E3F4F27065E637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 08FD
Signing time: Fri 24 Jul 2026 00:00:54 +0000
Manifest this update: Fri 24 Jul 2026 00:00:54 +0000
Manifest next update: Sat 25 Jul 2026 00:00:54 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: ltGB0XKkNZQpy+y20spYjAVx87MsZj8pfKTk9gFjIP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:cb:eb:63:1e:71:f5:a7:e3:f4:f2:70:65:e6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Jul 24 00:00:54 2026 GMT
Not After : Jul 25 00:00:54 2026 GMT
Subject: CN=ba127ffb1b7637505d72362dfd0a0497f0b512ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:4a:6b:bb:5b:c3:a5:1d:82:b2:0c:d3:0e:
8c:59:20:6f:92:50:8c:52:08:57:d8:4e:8e:25:42:
96:44:f3:a4:b4:62:15:9d:1d:b7:38:9f:f4:e9:b7:
f6:5d:db:31:e8:23:06:84:62:05:19:57:4a:c7:5a:
e7:a4:56:1d:d2:b7:38:36:ab:af:c3:aa:bd:e1:13:
f0:28:00:97:bd:fb:64:55:38:24:39:d3:ec:e2:65:
46:8a:2e:a4:62:b0:47:6b:c7:ff:c1:e5:d5:67:de:
71:c5:1f:f9:34:78:4b:76:e5:9d:d4:95:6f:76:2f:
9d:84:1d:39:18:6e:59:64:26:55:85:2b:45:c9:8e:
10:6d:d1:cd:db:22:16:4c:3e:bb:51:4d:c8:57:6b:
13:9f:90:84:55:9e:c9:d3:c3:5a:21:8a:94:26:7a:
58:76:ee:33:02:fa:91:b2:ca:1a:03:4a:63:a1:80:
65:44:c2:a0:2f:ab:85:5a:9d:d7:8e:2f:59:c3:00:
e9:8e:52:db:5a:6d:1b:11:4c:86:9c:57:1d:78:9a:
7c:9f:46:52:ef:55:7a:a2:b4:0c:83:c1:be:3f:83:
7d:b2:71:0c:61:15:e3:8c:9c:47:9b:cb:0e:ec:11:
1c:06:0d:88:8c:5f:09:c6:d1:b4:3f:45:86:c6:e5:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:12:7F:FB:1B:76:37:50:5D:72:36:2D:FD:0A:04:97:F0:B5:12:AC
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:23:19:1a:40:af:ed:8e:9a:d9:f1:3a:c1:af:ad:5d:77:ca:
56:a5:8a:bd:10:85:99:65:da:b9:03:c1:ab:b8:dc:5d:84:1c:
4e:5c:0c:2a:e7:31:41:34:07:60:98:37:e9:b6:2b:de:b1:10:
96:2b:69:29:1b:f7:4e:d8:3e:34:c3:2e:76:64:72:00:c0:97:
dd:eb:f5:5b:58:ba:2b:f1:0d:a9:58:ad:3d:1f:d6:54:dc:52:
48:22:4f:d6:7e:5e:b5:50:65:ac:c5:3f:63:78:2a:d1:ec:28:
dd:34:f3:e9:4a:2c:3e:cc:6b:df:6c:73:13:2b:b0:0e:9d:c3:
3b:6f:4d:c8:b1:ef:f6:ec:28:16:c5:e0:bd:2e:2e:ee:43:c9:
79:59:0a:6e:12:2a:76:02:db:04:dc:a7:91:5c:d4:22:5e:be:
30:11:10:43:7c:f0:99:70:5f:7f:c9:26:86:59:de:ad:4d:dd:
8f:80:e0:20:d1:a6:08:6f:47:38:0d:03:47:93:13:2b:2e:3a:
da:44:b6:1b:02:b2:65:2c:31:c8:5b:05:dd:1d:3b:5a:3a:64:
03:88:39:bd:2a:db:99:7a:1f:1b:53:1c:07:1e:49:d2:d5:08:
e7:06:91:aa:4b:a3:f7:dd:bf:9e:9a:a6:e3:35:50:20:1d:ab:
93:d6:93:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:53 2026 by rpki-client