
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
File: 3KLzDk5paSsbT-zrrpH9VgS97JM.mft (raw, json)
Hash identifier: cm1TQj9bNjXh01JoBdfxYopwRVzeHWSjm4dCTP45jz4=
Subject key identifier: 32:03:03:1F:8A:DD:17:F8:D7:C9:94:D1:F5:07:FE:15:4D:FD:ED:F7
Authority key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
Certificate issuer: /CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Certificate serial: 019F9090C54E0D599271AF7CA8BF1735165D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
Manifest number: 097F
Signing time: Thu 23 Jul 2026 20:00:34 +0000
Manifest this update: Thu 23 Jul 2026 20:00:34 +0000
Manifest next update: Fri 24 Jul 2026 20:00:34 +0000
Files and hashes: 1: 3KLzDk5paSsbT-zrrpH9VgS97JM.crl (hash: 2GX6pmKvG/nhOIxAEf2jkHlgGLrU0qUBl2fkXSbc3y4=)
2: xSDhChXyrgpPczPrq9N_lmr5FEw.roa (hash: f8x2Ffld+Joqpjyz5VMQ9d3wfsE4pU4+FNaMK65q5CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:c5:4e:0d:59:92:71:af:7c:a8:bf:17:35:16:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Validity
Not Before: Jul 23 20:00:34 2026 GMT
Not After : Jul 24 20:00:34 2026 GMT
Subject: CN=3203031f8add17f8d7c994d1f507fe154dfdedf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:01:aa:e4:92:93:9c:c7:a0:89:b7:aa:a8:
f0:02:85:a7:f4:3f:7a:61:47:57:29:45:d8:92:79:
21:1a:09:84:07:52:51:6e:1d:3e:fe:d0:35:1a:71:
a5:11:48:3c:f4:27:60:21:1d:9c:40:51:32:1c:10:
77:7c:5d:c6:a4:e0:bc:79:eb:44:93:df:17:52:24:
1d:7d:bd:6a:a3:86:20:97:72:b1:8e:9d:12:f4:c6:
85:d2:7e:59:d1:92:39:00:65:b4:52:78:e1:b7:df:
37:ee:56:48:36:08:87:61:3b:7c:00:7b:63:49:0e:
c0:49:d7:0c:62:33:5d:00:a0:08:2a:96:60:3c:73:
b7:7d:a1:b8:5c:e0:e5:ba:79:c9:c9:7e:af:2d:1b:
6d:2a:f5:58:73:a0:86:ed:ac:a4:0c:5a:26:e1:80:
21:50:ae:39:7d:1c:d8:11:06:12:56:fb:41:ec:5d:
5a:d3:48:f0:2f:f3:6a:58:e7:fc:28:b5:50:7c:25:
2b:ca:c2:e0:6a:4e:06:10:11:26:8f:09:54:d6:dc:
b7:b4:b3:74:5c:78:13:b4:34:6e:4a:5d:1f:7d:6f:
39:42:b1:5e:6c:04:67:eb:3f:5f:9c:5c:7b:6e:b7:
21:60:27:67:af:35:57:3c:33:c2:19:30:d5:69:a8:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:03:03:1F:8A:DD:17:F8:D7:C9:94:D1:F5:07:FE:15:4D:FD:ED:F7
X509v3 Authority Key Identifier:
keyid:DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:24:3f:c4:34:23:45:73:02:35:1d:dd:d2:90:6c:e5:23:7c:
89:ab:49:45:e8:2c:d8:f7:6d:f8:50:de:8b:d5:0d:15:a7:a7:
3d:fb:23:0c:1a:bb:0a:b7:84:2d:9d:d7:54:e6:25:dd:e1:23:
40:26:57:b7:bc:97:86:96:e7:c3:85:87:ba:71:21:9f:4b:91:
ab:fd:33:80:04:12:f5:a3:4c:e1:ee:07:ab:60:ce:f4:ec:7e:
fd:70:74:99:70:04:1a:4a:18:4f:ad:ba:7c:a7:1c:4a:ed:8f:
d2:0e:3d:76:70:a0:cb:16:14:7e:75:1a:37:95:d5:37:9d:37:
4a:6f:86:b2:25:04:75:43:9c:a7:b0:e8:88:13:1d:e7:ad:77:
90:db:0b:97:60:e0:5b:4f:dd:76:c9:18:8a:f3:97:7c:9c:f7:
74:72:aa:99:30:9f:e8:7b:28:65:d9:77:8c:4c:ee:c3:6d:22:
c5:46:02:ed:1d:10:85:02:e6:f4:81:0c:df:56:2f:f4:dd:1e:
41:47:a2:6a:b4:25:d0:e0:7c:70:c5:d1:29:18:44:01:cc:f9:
94:eb:56:f4:0e:03:d5:15:6e:f4:16:4f:be:3b:c9:5f:a3:75:
01:28:f1:33:0a:d4:53:4b:dd:92:55:60:26:63:e8:21:25:ef:
44:c9:26:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:02:53 2026 by rpki-client