Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.mft
File: 3eDv_-eZBjbry_628Ek2EyYQcq8.mft (raw, json)
Hash identifier: ijgZsku8eDtFbaSP22frdj4iHR33OgHD7ufXa4jDyRs=
Subject key identifier: C9:58:E3:C1:77:B1:89:03:29:35:29:BD:39:09:7D:C7:A4:58:6F:10
Authority key identifier: DD:E0:EF:FF:E7:99:06:36:EB:CB:FE:B6:F0:49:36:13:26:10:72:AF
Certificate issuer: /CN=dde0efffe7990636ebcbfeb6f0493613261072af
Certificate serial: 019F8FEC89D690823672A1B9D8E0DA013009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eDv_-eZBjbry_628Ek2EyYQcq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.mft
Manifest number: 3C
Signing time: Thu 23 Jul 2026 17:01:11 +0000
Manifest this update: Thu 23 Jul 2026 17:01:11 +0000
Manifest next update: Fri 24 Jul 2026 17:01:11 +0000
Files and hashes: 1: 3eDv_-eZBjbry_628Ek2EyYQcq8.crl (hash: nC90pDGnabaGih241aJXVPRVSgcceFgOWT3h+37OVtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eDv_-eZBjbry_628Ek2EyYQcq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:89:d6:90:82:36:72:a1:b9:d8:e0:da:01:30:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde0efffe7990636ebcbfeb6f0493613261072af
Validity
Not Before: Jul 23 17:01:11 2026 GMT
Not After : Jul 24 17:01:11 2026 GMT
Subject: CN=c958e3c177b18903293529bd39097dc7a4586f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:68:38:8d:bc:7a:38:7f:9b:f5:05:92:8d:
98:8a:bd:0d:c2:82:a7:87:38:95:73:6a:1c:53:64:
af:bc:56:b0:da:6f:e0:66:98:13:85:51:af:4d:4d:
9e:a5:db:24:8a:da:34:f6:f2:7b:b9:ca:8f:a6:73:
04:9a:be:78:f1:a0:13:75:7f:c6:c2:7d:1e:5c:6f:
9d:83:fa:28:e4:15:d0:57:bb:8b:16:22:05:74:bc:
45:af:c0:32:dd:4a:2d:d3:17:24:7b:9d:57:89:6a:
35:07:f2:92:84:89:9e:78:bc:2d:af:7a:cf:dc:f3:
cd:0d:fe:32:4a:a9:e0:8d:73:e0:4c:ad:95:35:e7:
68:50:eb:94:68:1f:d5:38:49:56:dd:cd:31:d3:a2:
19:b1:98:8b:ac:c3:87:71:bf:5c:43:dd:c5:86:8f:
1d:9f:8d:df:38:b2:35:c3:22:fc:19:67:bb:76:04:
c3:fa:eb:f2:17:12:f3:a7:43:45:5f:f0:19:6c:69:
b2:8c:8f:0a:56:cf:84:8d:ec:2a:7c:f3:27:50:ef:
eb:99:64:aa:ec:f2:1a:ef:be:23:4d:6e:2d:49:22:
ce:9b:fb:1f:2c:88:72:f4:5a:ae:06:4f:99:57:f9:
23:2e:9f:45:1b:9d:a0:c4:ce:e7:ff:af:ae:13:8e:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:58:E3:C1:77:B1:89:03:29:35:29:BD:39:09:7D:C7:A4:58:6F:10
X509v3 Authority Key Identifier:
keyid:DD:E0:EF:FF:E7:99:06:36:EB:CB:FE:B6:F0:49:36:13:26:10:72:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eDv_-eZBjbry_628Ek2EyYQcq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f6:f6:90:b6:e0:8c:1e:cc:c6:67:a1:8a:b7:51:3d:a2:c5:
b8:f1:65:a6:1c:23:dc:a0:03:13:4d:42:4b:2f:f9:97:9e:c5:
04:07:cd:b4:ab:30:23:1c:4a:47:ff:1d:fc:3b:6c:43:73:f3:
1c:a5:61:c0:a0:5a:42:26:41:86:78:01:28:5e:dc:fd:00:3e:
f9:01:ae:2b:29:7f:5f:79:33:8e:89:1a:a3:66:1e:13:d6:98:
26:b3:00:74:6a:8e:a3:94:75:91:74:22:52:6d:11:8a:0f:e9:
81:87:d9:96:ff:db:a0:ff:27:8b:d9:d6:7c:7b:42:51:c5:fd:
43:2f:38:fc:99:24:bf:73:84:e3:30:7f:61:4c:d5:80:b5:ee:
47:0a:3d:29:77:3a:41:1f:c9:4c:9d:38:6e:ea:aa:85:34:20:
b7:8e:cc:5e:ee:de:a1:6a:04:c2:53:c7:50:19:1b:48:70:e7:
5d:36:a7:ba:e1:6a:6b:98:c9:f0:3b:37:f1:da:ae:b6:a0:5d:
23:4f:74:da:7c:1b:71:85:18:71:1d:8c:7d:d1:51:59:c6:d5:
92:90:d7:ff:b6:1d:a1:e3:d1:28:f0:c5:38:60:3f:16:0f:16:
de:d4:8f:d7:84:26:c5:ba:08:f4:67:bd:fc:6c:46:0f:ab:74:
38:90:31:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:42 2026 by rpki-client