Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier: SpptpOjL1NL8c4rvFVtwd4USSt6HoZh+AHnKCcgvtcU=
Subject key identifier: 5E:5C:8E:35:25:37:99:A3:04:E2:41:86:8B:E0:DB:9F:D2:88:41:05
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial: 019F905A17E2BF396B1502AE776B356F92A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number: 05C7
Signing time: Thu 23 Jul 2026 19:00:51 +0000
Manifest this update: Thu 23 Jul 2026 19:00:51 +0000
Manifest next update: Fri 24 Jul 2026 19:00:51 +0000
Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: pKmTL3GGH68FSYEgEnf56TjUIj999ca4dfMR1+szdXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:17:e2:bf:39:6b:15:02:ae:77:6b:35:6f:92:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Validity
Not Before: Jul 23 19:00:51 2026 GMT
Not After : Jul 24 19:00:51 2026 GMT
Subject: CN=5e5c8e35253799a304e241868be0db9fd2884105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:3c:e4:97:27:3d:bf:91:a9:54:be:14:27:
90:8a:ac:d8:91:68:ae:85:e5:cc:0a:20:35:1b:ee:
a8:1e:33:46:f8:04:6b:56:27:4b:72:a2:1a:41:7c:
ac:e2:3f:b7:3d:91:93:d2:31:af:a6:34:79:08:7a:
c7:f9:3e:77:40:80:99:91:c4:6a:84:2a:fd:eb:fe:
b7:fa:1f:09:06:55:da:7b:cd:4a:3c:09:d2:53:e7:
f6:fc:fc:45:8f:26:ec:ae:90:07:b3:bd:de:bd:be:
f3:1d:fa:10:91:d5:6a:b1:d4:c6:d6:4d:df:e0:08:
04:59:d8:45:2e:e9:c7:e1:6a:91:59:27:f3:76:44:
aa:29:bc:f0:ac:33:36:1e:1a:5c:9c:19:0d:18:44:
a5:c1:63:f4:4b:22:e2:ec:8a:ff:96:fe:be:1e:ac:
29:eb:f2:20:c2:cb:17:b8:8d:72:09:ef:28:4a:61:
44:d6:a3:b1:41:4b:79:16:1f:b9:67:d5:e5:f3:18:
e3:b9:fd:79:72:2d:02:38:bd:4e:fc:e9:f3:f1:6a:
0c:1e:8b:ac:8e:fc:e7:60:aa:d5:31:c8:85:bb:e2:
dc:0e:8e:f6:d9:cc:f8:e8:38:43:f0:68:d2:d9:5a:
7e:8c:37:a4:b7:d2:80:76:f6:86:f9:10:4d:84:f5:
8c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5C:8E:35:25:37:99:A3:04:E2:41:86:8B:E0:DB:9F:D2:88:41:05
X509v3 Authority Key Identifier:
keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9c:eb:ba:f6:51:4d:d1:bb:96:96:d3:2a:d2:f5:e6:63:1b:
26:95:f3:ed:b7:45:71:0a:66:fe:6d:af:4b:c0:af:8d:4b:3e:
92:77:6e:36:3f:05:8c:2b:45:c6:df:82:fc:c1:97:3f:ba:53:
7f:7e:d0:40:0b:d6:c1:a8:17:79:02:10:75:c5:58:fc:2e:df:
a4:3d:f1:25:d6:74:2b:11:09:90:d5:47:0e:ca:26:70:e5:48:
06:e2:ca:36:28:0e:af:34:16:a7:87:ae:1a:04:94:37:ba:ba:
8d:da:55:7d:d4:23:47:8d:5d:05:73:2a:b8:c6:05:85:bc:aa:
16:7b:2c:56:80:cc:63:a1:d3:4a:39:00:04:11:a1:0d:1c:11:
3f:98:83:3b:c4:2e:ed:c3:a4:71:84:fc:7d:ff:00:89:a7:32:
6e:00:ee:40:89:7e:83:a1:77:66:71:5c:ee:0e:3c:42:85:f2:
52:39:f9:ba:17:94:42:18:e6:5c:4a:bb:37:0e:37:1f:10:90:
74:80:75:2e:4a:a6:1e:75:34:b5:fd:fd:a8:40:27:80:a8:23:
b2:0b:e9:3d:dd:c9:8d:2a:e7:a3:15:8a:c1:b8:59:23:71:f9:
3a:0d:fc:2c:ce:fd:79:7e:90:cd:b5:39:b5:57:19:fb:cf:66:
dd:d4:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:23:59 2026 by rpki-client