Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
File: 3mshhKwi402MRNprhFSbunH9VT0.mft (raw, json)
Hash identifier: dfCTQqmZqKcL8c59amiaaMegJBKT71EjGAXfNGXxbn4=
Subject key identifier: 8F:A4:B6:DC:38:B7:DE:F4:2A:29:EA:A8:B5:8E:1B:7D:DA:D4:30:C8
Authority key identifier: DE:6B:21:84:AC:22:E3:4D:8C:44:DA:6B:84:54:9B:BA:71:FD:55:3D
Certificate issuer: /CN=de6b2184ac22e34d8c44da6b84549bba71fd553d
Certificate serial: 019F9090B8CFA1EEE56BD5A33B6B832BCAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
Manifest number: 02F0
Signing time: Thu 23 Jul 2026 20:00:31 +0000
Manifest this update: Thu 23 Jul 2026 20:00:31 +0000
Manifest next update: Fri 24 Jul 2026 20:00:31 +0000
Files and hashes: 1: 3mshhKwi402MRNprhFSbunH9VT0.crl (hash: Wf2UelfzSRK5Jcg3lMOWGTgGJHkWxjZ31CbkuRujnsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:b8:cf:a1:ee:e5:6b:d5:a3:3b:6b:83:2b:ca:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6b2184ac22e34d8c44da6b84549bba71fd553d
Validity
Not Before: Jul 23 20:00:31 2026 GMT
Not After : Jul 24 20:00:31 2026 GMT
Subject: CN=8fa4b6dc38b7def42a29eaa8b58e1b7ddad430c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:54:f1:8f:f9:ba:f9:2f:f2:ee:88:05:4c:c7:
4c:fb:d8:13:03:0f:ce:e4:94:4b:66:12:83:3d:38:
e2:00:86:35:ac:b1:c8:5d:fa:5f:a0:ca:60:2a:8b:
bd:09:0e:91:a2:68:a6:7f:57:98:ae:43:09:77:d7:
6a:82:58:96:cc:ef:5b:9c:65:d3:b3:94:e5:fc:b3:
c3:cb:05:f6:90:05:50:5f:9e:24:2c:eb:32:47:80:
8c:ba:4d:b9:79:27:c5:5d:ff:e3:ef:c9:e2:4b:85:
b8:5a:f0:9c:dc:6f:f4:31:5e:3f:12:28:da:d4:de:
08:1a:e4:b7:b2:5a:76:fa:6a:5b:0c:b2:9f:b2:b9:
21:4e:86:21:54:3d:24:03:e7:a6:c3:79:56:5c:7b:
80:4e:bf:a9:c2:86:92:1c:9f:7c:cb:de:c1:ac:b9:
b8:1b:33:04:94:3f:18:40:10:39:ff:ee:57:bc:2e:
f7:f0:11:10:23:0c:5f:3d:a8:46:d6:03:85:43:c7:
1c:13:c4:6d:a0:3a:c5:4b:fc:72:c7:24:f4:bc:4b:
0e:01:1e:21:93:ef:10:5c:df:63:ee:c7:d7:c3:6c:
95:89:6f:bf:f1:fe:d2:a8:f7:12:ea:3d:d4:05:36:
4e:dc:3f:3e:d4:a5:5e:ff:e3:cb:a1:1e:2c:a2:e5:
ba:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A4:B6:DC:38:B7:DE:F4:2A:29:EA:A8:B5:8E:1B:7D:DA:D4:30:C8
X509v3 Authority Key Identifier:
keyid:DE:6B:21:84:AC:22:E3:4D:8C:44:DA:6B:84:54:9B:BA:71:FD:55:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7d:ab:bd:e2:53:e8:d3:aa:90:99:5e:00:68:72:81:f4:26:
c9:9b:c2:fe:70:72:e9:97:c0:4a:10:52:9c:1c:8d:20:a6:db:
d6:63:5f:47:40:81:b2:85:3b:a2:df:5c:4a:90:c0:7b:bb:87:
2b:62:f6:a2:5a:43:57:a7:41:3f:a6:3b:0a:cc:8e:b2:25:bb:
a0:e9:d1:85:89:40:05:98:64:4a:a8:63:f2:a1:10:09:8c:64:
31:13:89:dc:e4:47:ec:00:18:ff:8e:5f:9a:b3:8e:ba:a6:93:
27:8e:d7:09:dd:28:87:17:38:b5:98:7a:e3:c7:9b:4e:45:85:
4d:2c:f9:73:80:ad:6e:3c:c0:7b:cd:65:05:4d:f4:5b:9f:8f:
f9:8d:5f:97:a7:59:99:87:c3:f9:c1:73:05:2d:75:e7:0e:0d:
82:67:de:14:88:7c:b1:16:02:23:92:0c:ac:41:d7:eb:b7:b1:
2e:da:26:09:b0:c1:6d:50:f0:c6:e2:59:06:ac:c9:51:4a:70:
69:f9:2f:56:05:f6:9d:c4:5e:3f:d1:ee:28:02:20:f0:1b:9b:
e3:a5:4f:ab:5d:46:26:77:d0:39:3e:3f:aa:b4:6a:37:b9:42:
63:51:67:d9:40:fc:40:ea:7e:ce:95:90:70:4e:5f:c8:cb:70:
3d:08:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:38 2026 by rpki-client