Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier: 9N9jCFyGqGvRC7efxRfcVRHhe7O2hz0tYps6XmLtIxA=
Subject key identifier: 02:29:E4:8A:19:26:9C:19:2A:5E:5F:F7:D6:D1:8D:FC:AC:DB:F7:EC
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer: /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial: 019F92ECFEC2E308D3F39C9682267D4A51C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number: 1682
Signing time: Fri 24 Jul 2026 07:00:32 +0000
Manifest this update: Fri 24 Jul 2026 07:00:32 +0000
Manifest next update: Sat 25 Jul 2026 07:00:32 +0000
Files and hashes: 1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: fonTuqxVas9rI9Z0Pa7PXt3yOsaEUA7lv0zio5UKh1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:fe:c2:e3:08:d3:f3:9c:96:82:26:7d:4a:51:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Validity
Not Before: Jul 24 07:00:32 2026 GMT
Not After : Jul 25 07:00:32 2026 GMT
Subject: CN=0229e48a19269c192a5e5ff7d6d18dfcacdbf7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:b9:37:38:2c:6b:df:e0:24:a2:ee:45:68:
a9:6a:2c:29:c9:1f:06:c0:53:c2:03:df:3b:da:f8:
67:18:05:c1:28:ad:77:29:32:25:98:ff:8b:ae:ec:
0b:e5:38:89:a5:05:46:3d:72:88:d2:c8:58:f2:c8:
16:36:f5:77:31:a2:85:0b:99:a2:d7:49:3b:fe:06:
33:9f:62:e8:9a:ea:55:e2:bd:32:b6:af:bf:47:5e:
f7:43:40:ea:ba:90:47:2a:d7:39:b9:99:e9:44:b9:
7b:be:d5:95:fc:8b:ac:70:81:37:0d:5a:4c:df:70:
c7:e7:04:fb:0a:06:41:57:6f:f6:e1:9a:6f:63:a8:
48:fc:2c:8a:ee:76:40:4d:78:1c:03:0f:97:72:bb:
19:4c:12:9c:8d:7c:44:a8:43:84:b3:66:f7:f8:e8:
8d:28:7b:51:af:e5:c8:1a:3c:92:37:53:bb:61:ef:
90:88:5a:8e:64:78:5c:15:af:39:f4:6e:d2:6b:02:
2b:b6:02:2d:11:63:90:96:65:77:95:fd:3c:a9:4a:
c8:9d:25:e5:47:99:80:9a:ba:2c:e9:71:24:94:98:
11:1b:02:7d:e6:8e:2f:ed:3d:02:e5:52:33:b4:46:
52:b5:77:5e:70:b7:61:00:43:a8:ef:14:13:6d:32:
98:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:29:E4:8A:19:26:9C:19:2A:5E:5F:F7:D6:D1:8D:FC:AC:DB:F7:EC
X509v3 Authority Key Identifier:
keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1e:13:d4:a1:18:e1:6a:a6:df:43:2e:f4:96:57:2b:15:5c:
f6:1a:79:0c:69:6f:73:26:e8:62:d9:8a:11:f4:1c:50:d7:0c:
23:4a:c0:50:a2:e5:b5:8f:6b:5f:fd:aa:a5:69:75:0a:25:58:
e7:4f:b2:4f:d6:22:5d:4d:97:d7:8b:d3:fc:97:b6:1f:77:bd:
4c:f0:31:a3:c5:54:1f:3d:de:99:18:9a:ad:29:95:7c:be:2f:
a9:9d:60:a5:3e:8f:9a:7b:95:d8:c1:e8:a3:87:4b:6e:97:49:
eb:e9:f5:26:c5:24:64:d6:cf:63:a7:03:be:0a:49:6f:82:81:
e5:8d:a0:c8:4b:b9:3e:d4:b1:ee:51:1c:0f:67:88:80:4e:31:
53:bb:01:f4:68:a8:db:1d:d7:55:da:b9:bc:e2:92:e5:3f:e3:
b9:ea:3f:a1:4f:23:f5:ea:80:0c:6e:b2:bf:2f:e0:50:51:4d:
73:c6:a6:48:87:da:49:ce:3b:76:8c:50:ae:fb:a2:f8:4a:9b:
88:a8:1a:e2:60:9f:ae:6c:c7:03:d0:67:20:ac:4e:52:7f:60:
71:fe:ed:e3:00:4a:40:5f:9a:20:a0:9e:32:88:c5:bb:66:9f:
49:5f:ab:8b:8f:f8:e9:b9:f4:41:1e:83:9c:a7:7a:b7:30:01:
0c:34:46:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:23:16 2026 by rpki-client