Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
File: 3q91C1wrlTnZblZJdyr34Q7-D-o.mft (raw, json)
Hash identifier: 8LYwRfp3Lyd1A3jKkQz6YXRn/+Hw/mxuVv0kxWepkuA=
Subject key identifier: BB:81:8D:A1:6A:38:E4:02:8F:AA:15:00:F2:17:8D:2B:67:51:D1:3B
Authority key identifier: DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
Certificate issuer: /CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Certificate serial: 019F935B5947FB2CE34B21BA245BD06D4587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
Manifest number: 1058
Signing time: Fri 24 Jul 2026 09:01:05 +0000
Manifest this update: Fri 24 Jul 2026 09:01:05 +0000
Manifest next update: Sat 25 Jul 2026 09:01:05 +0000
Files and hashes: 1: 3q91C1wrlTnZblZJdyr34Q7-D-o.crl (hash: TKPf5wSur0MHNGNLVWEAIIRSugH7HETA6MrIaseCA/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:59:47:fb:2c:e3:4b:21:ba:24:5b:d0:6d:45:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Validity
Not Before: Jul 24 09:01:05 2026 GMT
Not After : Jul 25 09:01:05 2026 GMT
Subject: CN=bb818da16a38e4028faa1500f2178d2b6751d13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3f:d4:af:df:2b:fb:42:52:28:4b:36:75:d7:
4f:f5:1a:1e:a9:30:a3:81:42:ad:b6:cb:62:85:08:
53:cc:34:c1:24:b1:bf:57:b2:42:f3:1a:b7:36:39:
5b:59:f2:05:05:b5:37:1e:ef:87:dc:fe:98:3c:39:
b4:bd:37:b6:e7:1c:33:52:82:83:41:55:27:5c:72:
e1:1d:cc:27:8d:a6:fb:f6:26:0f:b8:0c:fb:94:d2:
79:7a:b3:c0:85:82:c4:f8:62:ad:87:14:68:20:22:
cb:1b:42:0a:2c:57:75:c4:c4:43:60:8f:83:96:e5:
96:b2:60:13:ec:2f:72:15:ca:b1:b9:52:3e:6e:e7:
48:0a:20:34:64:3f:e8:84:a4:69:54:2b:39:8b:7b:
84:8a:f0:16:38:4c:3d:c2:cd:9b:5d:88:da:b2:e8:
06:e8:3f:de:ff:4f:82:f2:1c:9d:e3:0f:25:e8:b6:
a7:ac:83:35:8a:36:f9:4b:9e:a7:ef:e7:03:32:7b:
bb:6c:69:30:5a:c3:25:97:f1:55:25:fe:9f:bd:58:
4d:b3:d5:98:cf:7a:3c:9c:50:6b:7e:04:f6:ec:f6:
5e:b3:ca:07:b3:9c:3d:10:c1:40:6a:12:73:1e:20:
bd:c0:0e:9a:5e:05:ad:1c:ec:57:48:ed:7f:a5:28:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:81:8D:A1:6A:38:E4:02:8F:AA:15:00:F2:17:8D:2B:67:51:D1:3B
X509v3 Authority Key Identifier:
keyid:DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:3d:51:e0:61:b5:ab:c6:9c:ab:bf:19:a6:e4:09:1d:a2:2e:
ca:4d:fd:34:67:a5:9d:f1:9c:ed:80:22:83:e5:28:3a:01:1e:
4f:cf:0c:27:4e:85:a0:9c:a4:66:70:f1:f2:30:bf:bf:22:38:
4d:4a:9b:14:52:46:51:e2:32:0c:96:5d:78:3b:55:42:3c:0a:
e4:06:8f:fe:ef:a8:70:f0:01:b9:b0:14:29:81:bc:a8:94:f0:
87:eb:54:28:bf:82:a7:8a:95:1e:97:0d:99:33:3d:67:ee:1d:
8a:6f:cd:f5:65:6e:45:e9:c8:01:b4:e7:dd:57:86:fc:70:ec:
38:38:e7:63:a3:9a:3a:f4:9e:cd:97:72:a6:a7:ae:1e:ce:81:
9b:ea:e7:17:63:7f:7b:99:bf:91:63:36:07:ef:01:84:c9:52:
0d:ca:c6:1b:bf:23:a0:95:f0:1c:29:20:85:0f:74:0e:bc:de:
94:61:69:d7:59:9e:17:8f:40:1c:1a:7e:31:35:b1:5b:82:93:
8f:ee:f8:db:08:05:24:fc:0f:7e:5f:16:ab:f3:48:fe:e9:98:
3a:08:72:99:1a:02:e7:e6:95:8d:b5:1f:80:24:f2:53:0e:d7:
98:75:b3:8d:67:20:33:05:5b:58:16:29:30:59:29:0d:77:4a:
e0:aa:ee:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:11:15 2026 by rpki-client