Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: fDDNxCevxamJTctiuTHqY2NSFhjDKw96/RkQ4tDwTRg=
Subject key identifier: F8:B8:08:98:6A:DA:4B:AF:0A:38:95:88:81:AE:13:67:58:77:42:3E
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 019F9022C45673B98726EE949BA046257CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 19D5
Signing time: Thu 23 Jul 2026 18:00:25 +0000
Manifest this update: Thu 23 Jul 2026 18:00:25 +0000
Manifest next update: Fri 24 Jul 2026 18:00:25 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: Yg9VPcTurtvvTVwVoisD7HlwHTxnCxAXcFQlK1Jt5JU=)
2: 9zaCEl1SgGOc-A7zIR9SmhOUbCA.roa (hash: eFtzjl4+/9tlA7bC6sKrJsHMLsAxLeLlfmditC5aZTs=)
3: _QaXkGOzguH_3SYFNe1d3y7B2Tw.roa (hash: KztSdz5ODte8K6guWxzrXZlYDG1F2rVO/Vqml3J+Q0o=)
4: fsnKswSMyeM4OK2o8J_ZzwwYiiI.roa (hash: tWk+nFmUcDykdNhoUyVPw1UFkRx/3AJQMBQrLxH1g5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:c4:56:73:b9:87:26:ee:94:9b:a0:46:25:7c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Jul 23 18:00:25 2026 GMT
Not After : Jul 24 18:00:25 2026 GMT
Subject: CN=f8b808986ada4baf0a38958881ae13675877423e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:37:83:cf:54:2c:e5:36:44:78:4b:8c:a0:
75:96:c3:bc:7a:b8:60:ae:70:66:b6:6b:fd:c0:94:
0b:95:27:2a:76:79:cd:e1:cd:0e:89:57:8a:1e:38:
ac:6e:41:16:66:d5:56:19:6d:d4:4d:5c:f9:e6:8a:
1a:21:18:81:4f:6c:fb:77:0f:a7:1d:ac:2a:81:ff:
91:d4:94:33:cc:07:18:5a:25:66:6c:f6:39:da:e0:
1c:67:8c:43:7e:62:97:79:93:41:c0:13:92:15:77:
6b:e0:03:0a:ae:ff:69:f5:a4:58:dd:29:f8:4b:9b:
da:01:98:af:0c:e3:3f:dc:b4:79:73:8b:63:00:c0:
fa:dd:fd:f1:92:16:bd:73:bc:ca:33:ac:1d:17:c6:
97:5f:69:44:dd:6c:54:89:82:0d:d6:ed:f2:a7:f7:
0e:d1:44:d2:13:0b:f7:98:8c:0d:d2:4a:3c:c2:04:
7a:d0:3a:22:a3:f8:49:1d:7b:bb:3c:6a:b5:dc:48:
15:b3:d5:bc:61:e4:be:04:5d:18:53:27:f1:40:e0:
ca:06:14:4e:24:3b:16:67:75:db:5f:f7:3b:9c:b1:
7b:c8:0e:99:54:5a:f8:21:48:5a:35:9e:1b:84:e9:
2b:eb:73:59:9d:5d:c3:03:bb:34:46:56:3a:df:df:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B8:08:98:6A:DA:4B:AF:0A:38:95:88:81:AE:13:67:58:77:42:3E
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:07:4c:89:1e:28:ab:0f:77:a4:66:ea:74:4f:d3:84:de:c2:
29:d4:ce:35:a5:41:8b:78:cd:6a:72:fd:b5:bd:98:b0:e8:20:
8c:69:43:80:59:c8:0d:e0:e5:00:f9:b7:84:04:62:1d:71:42:
91:11:c0:0d:4f:11:ae:ec:dc:ce:9d:8f:74:a2:9c:12:1f:c3:
21:78:12:fa:7c:be:c7:73:73:1b:53:31:95:ce:0d:66:1a:e7:
e4:df:55:49:1e:1a:7d:c4:c9:9c:34:9d:11:23:ff:f3:1a:59:
bd:c7:86:16:a9:a4:06:cd:27:9d:1a:e7:00:e5:9d:99:bb:e4:
69:d4:78:ed:e1:47:f8:16:16:46:59:e1:6e:8a:27:49:85:87:
e4:6f:3d:da:e2:73:d0:a6:9f:3e:f3:11:2f:fb:7c:77:2a:5b:
bb:fc:0e:60:43:f2:aa:1f:97:cc:81:6a:36:ed:ed:57:2f:be:
dc:c6:ad:69:54:7f:8e:d0:ce:0f:89:85:e4:5b:a8:55:b9:88:
f4:6e:b3:3c:cc:6a:aa:94:ec:66:d3:7a:19:50:41:98:5c:9c:
f8:d3:81:07:bb:a1:12:a8:56:98:49:7a:e4:38:43:18:c3:28:
53:97:01:f4:23:77:7b:eb:55:97:75:21:39:ea:2a:d6:11:87:
fe:4b:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:57:14 2026 by rpki-client