Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: LpJLZJRO2Mqr1tXQBiKFBffnC0wsF2z6+PaInU1VfmI=
Subject key identifier: A5:DD:6C:DB:53:94:77:18:40:6F:C7:B7:4B:89:E7:9A:15:10:3F:F6
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 019F905A23F9F396074FE0AA697070C9C6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 07FB
Signing time: Thu 23 Jul 2026 19:00:54 +0000
Manifest this update: Thu 23 Jul 2026 19:00:54 +0000
Manifest next update: Fri 24 Jul 2026 19:00:54 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: YwejXJ3pqgGmCK1sZ0ClfFgduVAwG2G/wTJH6WyWM2g=)
2: HrUPMg6A27LayY1nzJVXakWil-8.roa (hash: 6oiaD9+R084Ie04PfQ9j94YYcX9VFnuvxlsXJPk70DA=)
3: LsW7E92fgqyb4h0SFoyQ1iS_A-A.roa (hash: lZdLHI5/Pom2chJvXWn7/eiTGrnfbJ5HoDaiu046MUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:23:f9:f3:96:07:4f:e0:aa:69:70:70:c9:c6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Jul 23 19:00:54 2026 GMT
Not After : Jul 24 19:00:54 2026 GMT
Subject: CN=a5dd6cdb53947718406fc7b74b89e79a15103ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:c2:d2:69:34:f0:07:ea:67:4b:0a:39:28:
be:e8:3c:02:d7:38:12:36:07:b0:af:2d:b5:d7:c9:
df:aa:e5:9e:1d:d0:71:17:4a:45:01:8d:32:d8:0c:
36:99:46:0b:48:93:2e:35:88:64:11:72:f3:9c:4c:
90:c0:93:8b:71:3d:2f:30:f7:ba:03:49:f6:16:64:
12:e7:9c:73:9c:09:42:24:cb:8c:2c:fd:d9:c2:d7:
5b:7f:db:62:5e:d9:f2:e9:59:8f:35:3f:91:59:6f:
02:a8:17:26:74:06:05:b4:6c:46:77:79:3c:7e:68:
19:ba:26:b0:ee:2c:91:f4:f8:06:cd:0a:22:ba:80:
2d:42:45:ad:d0:cb:15:f3:0a:44:0d:30:55:fd:e3:
15:62:e1:52:7d:2f:d3:e7:0a:d4:b8:bc:dc:08:e9:
53:2b:34:3d:5e:ff:6f:ae:bd:51:3c:12:6d:0e:c6:
76:27:a9:50:01:2e:8f:2d:80:12:4e:22:f1:a2:7d:
01:89:65:8c:01:e9:af:f6:da:ea:ad:bf:ec:ec:19:
d1:62:0d:a9:e0:7e:8a:3a:20:96:41:b2:e3:fb:86:
ed:97:3f:12:ab:a5:27:f4:23:f1:e1:b1:81:7d:10:
3c:d7:35:55:cb:95:6a:a4:a9:93:46:64:89:02:94:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DD:6C:DB:53:94:77:18:40:6F:C7:B7:4B:89:E7:9A:15:10:3F:F6
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:51:f5:82:92:e8:c3:08:6e:6f:e0:b9:92:84:dc:a8:ee:31:
81:a8:f3:98:59:84:36:c1:cf:ec:1e:95:4b:a8:c1:f2:a5:ae:
ba:f4:37:40:a5:db:3a:b9:47:62:68:1b:10:05:67:86:a2:8e:
a0:56:dc:79:c9:24:1e:b9:98:86:07:fe:fd:c2:57:90:f6:bb:
b9:fe:bf:28:10:bb:de:5a:e9:81:ac:34:be:86:0a:c9:27:65:
6d:b3:df:1a:7f:b5:3e:91:4c:cd:46:c7:97:4c:03:e6:06:bf:
38:d5:f3:5c:50:4d:05:1a:0b:a9:7a:c5:37:14:16:42:c9:d6:
2c:6d:8e:ac:d6:a7:e7:79:c8:0c:b6:7f:72:44:fe:f3:fd:e1:
ee:d0:16:ce:10:2d:63:05:f8:16:6a:96:dc:99:a2:f0:f9:92:
28:c4:21:b7:f4:ee:dc:00:89:18:98:b4:7f:f4:00:a7:f3:10:
d3:d6:c8:1d:06:9d:dd:a4:ba:89:58:e2:04:66:38:cf:5f:2c:
5e:b4:20:b6:4f:4a:d5:6e:a5:f8:0c:23:00:90:bd:72:c7:53:
7a:f9:64:50:eb:4e:27:a2:37:60:68:aa:8f:00:fe:11:a9:4f:
16:c1:85:d9:2b:6e:c8:7a:60:df:05:f7:f5:a4:47:82:df:72:
87:3d:8c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:42 2026 by rpki-client