Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: l1wFlOYPjM4+k9CiQt1wpnA6NDKyIqD4Sk0W9coJ6vM=
Subject key identifier: 8F:20:4D:13:51:5B:29:EA:43:16:B9:F2:6D:E9:56:09:8B:D1:FA:92
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 019F8F4732FA89EC37BA6D67D43E07EE5A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 0F71
Signing time: Thu 23 Jul 2026 14:00:35 +0000
Manifest this update: Thu 23 Jul 2026 14:00:35 +0000
Manifest next update: Fri 24 Jul 2026 14:00:35 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: GBbfF0y5grzbpqypiBSSdMGlRFu/UEgSE23YUSdwZM0=)
2: 7TZLT2P2zuuPjzUmClw3kX64yXM.roa (hash: fnAcb1tn2nnIoVX24Iibq3Ab9gwSJ7WX+AekjhFSNg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:32:fa:89:ec:37:ba:6d:67:d4:3e:07:ee:5a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Jul 23 14:00:35 2026 GMT
Not After : Jul 24 14:00:35 2026 GMT
Subject: CN=8f204d13515b29ea4316b9f26de956098bd1fa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:e3:ab:64:5d:71:9a:0b:df:f7:08:4c:5e:
4c:28:0e:d7:63:a6:14:1a:c2:c6:db:dd:b7:bb:7e:
7e:cc:59:0c:a3:bb:f1:84:55:e3:d5:de:e2:cb:2f:
fd:f9:96:53:07:04:18:04:b2:dc:a7:26:b2:25:a9:
12:11:e7:e9:4a:a7:26:61:55:fb:69:2b:a9:af:30:
32:1a:21:41:59:3c:7c:8f:90:0e:cf:a4:32:e9:ae:
d6:cc:7d:38:83:74:38:67:0b:cb:63:00:2e:79:a3:
d1:99:fd:86:38:6e:99:94:2d:11:83:69:33:04:42:
62:e8:2d:21:fc:72:84:b7:a3:01:f3:da:50:11:e3:
e0:5c:7c:49:63:dd:da:80:e7:e3:a7:85:e6:62:4a:
bc:69:93:cf:e6:c6:32:fe:1c:65:c7:35:0f:3b:5e:
32:01:c1:b5:f6:50:8a:c9:f1:a3:fc:b0:93:a0:86:
d3:98:da:f1:51:5b:04:33:17:88:a8:56:fd:9f:20:
1a:f8:5c:e3:f7:b4:98:5b:87:04:51:56:11:64:2f:
f2:c3:cf:fe:6d:ba:66:ea:8f:61:db:57:17:31:6e:
b3:98:14:e2:b3:a5:bb:16:16:8a:4a:e5:74:62:c1:
62:bc:c2:90:6c:28:fb:79:c3:38:af:27:fd:28:ac:
52:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:20:4D:13:51:5B:29:EA:43:16:B9:F2:6D:E9:56:09:8B:D1:FA:92
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:69:f5:55:66:6b:9f:61:a9:98:bb:ab:83:66:54:3f:28:bd:
7b:f1:54:5f:1b:0d:31:ea:66:f5:55:e7:08:a8:0b:e6:42:ad:
69:bd:8d:6a:f9:a1:2c:c5:1a:37:64:d5:82:3a:6e:eb:d0:d8:
db:7c:c3:86:cd:ee:3c:f8:e6:68:64:8c:aa:17:64:57:79:bc:
ea:0a:21:f0:96:b2:91:17:50:8c:4b:27:21:58:ca:76:fe:e6:
06:9b:ea:84:89:b6:a7:6d:cc:ae:36:9e:d5:95:ac:0e:0c:f0:
77:c8:d8:be:28:3f:8e:7e:a4:00:45:4c:8e:9c:84:aa:73:c1:
df:c8:94:3e:41:e1:19:7a:ac:da:40:15:81:a4:82:5b:f4:30:
d9:32:64:30:d3:7b:d7:bf:03:bc:49:16:f6:5b:28:0a:ab:e5:
63:c2:52:0b:bf:2a:c0:5a:bc:a8:14:47:36:5e:a4:2a:64:4c:
44:3b:4f:4e:e5:83:f7:4a:a8:e4:7a:92:4c:59:aa:22:85:78:
83:0c:56:24:09:28:ba:a3:fc:52:fd:5e:b4:78:19:75:7f:62:
43:1a:6d:0f:7f:2d:31:d1:5b:66:f6:b7:06:94:97:34:b3:2e:
74:7b:72:6a:fc:c2:58:5a:48:28:f3:dd:c3:68:f8:e1:4e:ab:
79:fb:91:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:15:28 2026 by rpki-client