Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
File: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft (raw, json)
Hash identifier: w+MmAxj+sqITPAtRtxqG3fNaeaLuH9JmbRjEAPfgaE8=
Subject key identifier: C8:BD:99:4E:F0:D5:FA:1E:E3:F6:F7:05:74:63:82:CB:37:FB:FD:4E
Authority key identifier: DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D
Certificate issuer: /CN=dd70c5f09b62683292fd9109e694713590281f8d
Certificate serial: 019F8FB530A08624DC04D4B7F8C17D389C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 16:00:44 +0000
Manifest this update: Thu 23 Jul 2026 16:00:44 +0000
Manifest next update: Fri 24 Jul 2026 16:00:44 +0000
Files and hashes: 1: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl (hash: pLGU4Ogg2ByQaW7QsMtaiPBv7JF+PpNt6nfualq2de8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:30:a0:86:24:dc:04:d4:b7:f8:c1:7d:38:9c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd70c5f09b62683292fd9109e694713590281f8d
Validity
Not Before: Jul 23 16:00:44 2026 GMT
Not After : Jul 24 16:00:44 2026 GMT
Subject: CN=c8bd994ef0d5fa1ee3f6f705746382cb37fbfd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:79:a3:10:43:81:f6:8c:07:6e:ee:6d:00:
84:f0:73:5c:7b:e1:f9:ff:c9:28:a3:0d:32:65:9e:
69:c3:40:55:7b:b7:6b:4f:8d:df:a3:cc:af:01:ed:
ee:14:d3:42:4e:44:f5:2b:96:a2:6e:b2:9b:53:e3:
32:d4:37:83:0a:12:3f:fd:f6:1a:68:11:17:ae:25:
8e:e0:20:d5:8a:1d:bb:b4:6a:01:a3:b3:d1:ef:0f:
02:3c:73:d9:0c:26:8e:06:cb:00:fa:18:5b:5a:a1:
bf:fc:53:85:c1:2c:b9:82:67:6a:8a:6f:4d:fc:8c:
87:42:67:f4:31:78:87:00:79:33:fc:6c:04:84:5b:
a6:11:82:1b:89:23:ca:b2:1f:0c:26:15:fc:83:1f:
78:ef:c8:b0:10:7d:86:b4:6f:f8:d4:d4:d6:d8:50:
19:58:94:3b:b1:de:67:f5:35:93:20:c3:44:8d:5b:
0d:3d:24:d5:6b:0a:c5:b6:aa:eb:c2:cc:ab:74:04:
34:85:04:a8:60:77:6b:aa:0b:f8:e4:50:25:19:de:
08:53:af:b7:a0:4b:ad:e4:ea:7b:ea:a7:32:0a:ad:
32:0f:45:59:31:d9:1e:72:12:fd:cf:2b:6a:04:60:
bc:f5:e0:a0:8d:1d:40:86:dd:b3:cb:07:56:40:e2:
72:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BD:99:4E:F0:D5:FA:1E:E3:F6:F7:05:74:63:82:CB:37:FB:FD:4E
X509v3 Authority Key Identifier:
keyid:DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0e:54:f4:06:7b:9a:36:e1:66:8b:75:5d:16:28:13:b1:08:
61:5b:79:b7:db:b6:8b:e0:62:88:dd:91:d3:19:b0:dc:c1:4a:
0f:da:b5:20:f8:cf:a5:74:1a:fc:a4:f0:50:51:a1:4b:60:8b:
88:84:9c:6c:1d:c1:80:16:53:c4:d8:66:1c:6a:05:57:0c:ee:
cd:2a:09:ba:c0:d6:ba:ab:b9:e0:98:ef:04:41:eb:3c:b2:d6:
3b:46:f3:3f:43:5b:2b:25:4b:fb:94:d0:a6:93:8e:44:a7:7f:
16:6e:9d:2b:99:c7:c4:ad:ef:38:64:e3:da:49:95:f8:80:1b:
23:bf:03:1a:a4:fa:22:f5:d3:41:c5:1b:9a:5e:10:7e:c6:4b:
c0:f0:0e:c4:32:5c:10:62:97:14:0c:df:a4:f2:86:f5:5f:ab:
70:62:2b:d6:08:dc:d2:0b:8c:f3:f5:cc:70:01:be:7e:9a:b7:
1a:72:b7:f8:81:64:c4:87:ca:2c:48:db:a9:7b:ac:9c:1f:b8:
5a:24:89:0b:33:e9:14:21:48:2b:98:82:af:4e:7c:00:d8:2a:
b1:ca:58:5d:b6:2b:96:ce:d2:40:1b:b1:b6:40:4b:72:f0:de:
ad:c0:87:b5:d4:07:31:e8:0b:40:63:6c:12:08:2d:d7:fc:94:
a9:fc:23:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtTCghiTcBNS3+MF9OJxpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNzBjNWYwOWI2MjY4MzI5MmZkOTEwOWU2OTQ3MTM1OTAy
ODFmOGQwHhcNMjYwNzIzMTYwMDQ0WhcNMjYwNzI0MTYwMDQ0WjAzMTEwLwYDVQQD
EyhjOGJkOTk0ZWYwZDVmYTFlZTNmNmY3MDU3NDYzODJjYjM3ZmJmZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LZ5oxBDgfaMB27ubQCE8HNce+H5
/8koow0yZZ5pw0BVe7drT43fo8yvAe3uFNNCTkT1K5aibrKbU+My1DeDChI//fYa
aBEXriWO4CDVih27tGoBo7PR7w8CPHPZDCaOBssA+hhbWqG//FOFwSy5gmdqim9N
/IyHQmf0MXiHAHkz/GwEhFumEYIbiSPKsh8MJhX8gx9478iwEH2GtG/41NTW2FAZ
WJQ7sd5n9TWTIMNEjVsNPSTVawrFtqrrwsyrdAQ0hQSoYHdrqgv45FAlGd4IU6+3
oEut5Op76qcyCq0yD0VZMdkechL9zytqBGC89eCgjR1Aht2zywdWQOJyJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi9mU7w1foe4/b3BXRjgss3+/1OMB8GA1UdIwQY
MBaAFN1wxfCbYmgykv2RCeaUcTWQKB+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1hERjhKdGlhREtTX1pFSjVwUnhOWkFvSDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNjc1NTctZDg5YS00ZWYxLWJkNjMt
YTdmY2FiOWFhN2FhLzEvM1hERjhKdGlhREtTX1pFSjVwUnhOWkFvSDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hNjc1NTctZDg5YS00ZWYxLWJkNjMtYTdmY2FiOWFhN2Fh
LzEvM1hERjhKdGlhREtTX1pFSjVwUnhOWkFvSDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADw5U9AZ7
mjbhZot1XRYoE7EIYVt5t9u2i+BiiN2R0xmw3MFKD9q1IPjPpXQa/KTwUFGhS2CL
iIScbB3BgBZTxNhmHGoFVwzuzSoJusDWuqu54JjvBEHrPLLWO0bzP0NbKyVL+5TQ
ppOORKd/Fm6dK5nHxK3vOGTj2kmV+IAbI78DGqT6IvXTQcUbml4QfsZLwPAOxDJc
EGKXFAzfpPKG9V+rcGIr1gjc0guM8/XMcAG+fpq3GnK3+IFkxIfKLEjbqXusnB+4
WiSJCzPpFCFIK5iCr058ANgqscpYXbYrls7SQBuxtkBLcvDercCHtdQHMegLQGNs
Eggt1/yUqfwjaA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:28 2026 by rpki-client