Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
File: 3VShBsGZ81M-VritvPpLGsPmkJ8.mft (raw, json)
Hash identifier: jOV9/aw+6wuS9Ui1oHUvg6JrUsmYvYql6QMjJ5yrovY=
Subject key identifier: 45:2D:DF:96:51:EE:25:77:28:72:AB:C7:24:3C:18:04:F1:F0:F5:B5
Authority key identifier: DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F
Certificate issuer: /CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f
Certificate serial: 019F90FEA9217EAAA3B76E4328235D365E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
Manifest number: 0C92
Signing time: Thu 23 Jul 2026 22:00:36 +0000
Manifest this update: Thu 23 Jul 2026 22:00:36 +0000
Manifest next update: Fri 24 Jul 2026 22:00:36 +0000
Files and hashes: 1: 3VShBsGZ81M-VritvPpLGsPmkJ8.crl (hash: wrX0LiXbM5nkZhc660Y15bGBrFeEWebe4z2UOCOTES8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:a9:21:7e:aa:a3:b7:6e:43:28:23:5d:36:5e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f
Validity
Not Before: Jul 23 22:00:36 2026 GMT
Not After : Jul 24 22:00:36 2026 GMT
Subject: CN=452ddf9651ee25772872abc7243c1804f1f0f5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:84:f8:df:ae:38:43:0f:3a:30:b0:f8:93:
48:2d:b2:0a:e9:f6:fa:69:d6:2f:45:9c:d6:ed:90:
fd:62:18:6f:17:bb:88:10:11:78:30:b8:bb:00:34:
fb:47:47:9a:f9:14:69:74:c2:43:60:7d:25:5b:01:
1b:45:38:f1:de:b0:f4:e0:29:42:3e:5e:83:33:f1:
87:7a:9e:06:4b:0d:9b:0f:3e:9e:6c:7a:05:1f:09:
93:5a:68:98:b8:ba:c3:b1:ca:94:df:54:69:e6:f6:
84:2c:32:60:2b:45:df:a2:ac:f1:0b:9f:82:8d:c4:
17:b6:46:77:65:db:39:cb:0f:12:a6:d2:6f:8b:85:
59:73:53:28:02:37:63:35:d1:1d:0c:28:58:eb:dd:
ae:4a:a7:ba:3c:5a:2b:97:7a:27:6f:8e:86:ed:6e:
2e:1b:bf:e5:63:92:09:7b:22:67:9e:df:f5:48:58:
da:d1:c0:dc:1e:c2:60:19:0c:bb:f7:a1:e3:83:2d:
f6:be:65:a6:7d:44:8d:18:3e:d2:91:2e:bc:eb:f9:
f1:db:e1:51:80:03:45:fc:2c:4b:b4:26:12:ab:9c:
ac:96:78:9d:aa:18:2e:7c:ef:35:90:2a:87:02:53:
33:0c:63:95:93:93:0b:a3:d2:92:b5:27:be:35:ba:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2D:DF:96:51:EE:25:77:28:72:AB:C7:24:3C:18:04:F1:F0:F5:B5
X509v3 Authority Key Identifier:
keyid:DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a8:b3:f8:f8:85:ce:76:dd:5d:21:49:6f:bf:69:3c:5c:04:
38:35:3b:46:49:cd:04:df:02:96:68:25:05:cd:56:db:31:98:
17:3e:a1:cd:7d:a4:4a:74:f7:2d:78:fb:63:49:b2:69:2e:82:
72:a3:b2:72:f9:ca:70:4b:f7:f7:d5:a6:2a:26:a7:4f:e7:f5:
03:51:49:b6:e2:99:0e:ae:99:e1:19:a0:7b:52:5c:e4:ee:d6:
8a:a2:f7:86:2d:bb:d2:14:75:37:0f:4e:6f:16:6c:41:de:35:
5a:71:2c:f1:44:54:16:e5:e2:ff:89:54:c5:e9:65:78:a2:7e:
29:a5:fe:00:2b:87:dd:2d:29:11:ac:b0:56:66:4f:fc:71:46:
1e:8d:ca:1c:91:85:a8:18:c5:59:71:65:6f:2b:b2:0c:8d:51:
ae:a7:c6:5e:fe:b8:8e:5a:c9:55:76:53:51:e9:8e:e6:07:c4:
1c:28:b2:4a:24:4f:f7:c3:c8:79:f0:1a:f7:cd:a0:ee:6b:96:
1f:7b:f8:08:28:db:8f:73:49:14:af:12:b7:d4:30:05:ba:a0:
a6:52:cc:5b:9a:99:4b:b7:95:dc:9b:c6:84:bc:e2:74:06:f8:
47:61:83:ac:36:a9:8b:a8:b8:80:fb:00:b0:c7:f2:ab:56:c1:
59:a0:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:37 2026 by rpki-client