Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
File: T3zlnkdBgWbSD1FkhW-HkzmRidA.mft (raw, json)
Hash identifier: F36P/W4grlsDU8nVhVWfq8TioUPmnlqa1DH0stzxWt8=
Subject key identifier: 73:72:4F:55:10:C2:05:53:CC:93:44:7E:86:1A:59:5F:53:48:C4:04
Authority key identifier: 4F:7C:E5:9E:47:41:81:66:D2:0F:51:64:85:6F:87:93:39:91:89:D0
Certificate issuer: /CN=4f7ce59e47418166d20f5164856f8793399189d0
Certificate serial: 019F8F7E92EC2AEAA274D770F4955ECCBF44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:04 +0000
Manifest this update: Thu 23 Jul 2026 15:01:04 +0000
Manifest next update: Fri 24 Jul 2026 15:01:04 +0000
Files and hashes: 1: T3zlnkdBgWbSD1FkhW-HkzmRidA.crl (hash: OjqRQUEV6Urh3NREOduq0GS3HesxQt816zVGF67PV6s=)
2: hzeHFDX7-fXakvbRNzVIimetgT0.roa (hash: TTVPslSxsu3A4z0fsBCY/2+kt2uSPjNyxRVnr/wiATk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:92:ec:2a:ea:a2:74:d7:70:f4:95:5e:cc:bf:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7ce59e47418166d20f5164856f8793399189d0
Validity
Not Before: Jul 23 15:01:04 2026 GMT
Not After : Jul 24 15:01:04 2026 GMT
Subject: CN=73724f5510c20553cc93447e861a595f5348c404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2d:5b:8f:3a:0e:61:ea:96:d4:0d:f3:47:23:
b1:07:87:1a:e7:16:13:86:70:7e:b5:85:4a:2f:9a:
06:96:52:14:19:be:4e:55:70:cd:ce:2c:d7:46:9d:
21:01:76:68:04:94:07:00:11:f1:19:94:38:ca:c8:
f8:0b:b2:91:06:08:55:d4:9f:b1:e8:37:47:cb:9e:
b5:38:70:3c:b5:4a:28:0e:81:f7:33:07:09:83:7b:
6f:fb:54:7e:18:9d:a6:41:2b:bc:c4:33:5e:7a:ff:
d4:a6:7b:82:72:74:ff:3a:65:82:64:8b:78:ea:12:
33:4a:93:db:5f:3e:6c:e1:0a:bb:4c:a2:2f:8a:7a:
1c:93:83:0b:78:a6:21:0f:c6:01:91:db:ce:05:b3:
4b:39:89:10:72:8b:1a:13:fa:f9:15:da:34:0a:cf:
e7:83:84:52:35:47:08:76:7b:20:82:c1:74:58:35:
fa:96:2b:6a:8e:8f:be:e7:c9:af:0c:45:a1:c0:2e:
b7:16:51:7b:c8:d7:9f:a3:5f:29:4b:eb:ef:42:d9:
7c:c3:e2:e7:53:da:94:83:6b:65:22:c8:62:02:19:
ac:d8:35:e2:6d:68:cb:de:44:5d:5d:f8:36:df:8c:
de:c8:55:23:c3:93:8e:81:2f:15:bc:39:fe:78:c3:
d6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:72:4F:55:10:C2:05:53:CC:93:44:7E:86:1A:59:5F:53:48:C4:04
X509v3 Authority Key Identifier:
keyid:4F:7C:E5:9E:47:41:81:66:D2:0F:51:64:85:6F:87:93:39:91:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b5:9a:2f:65:b2:e5:a9:56:34:a5:1b:a1:c7:ff:d1:f9:16:
d6:f3:26:4f:d5:10:1e:96:23:38:a7:1d:a1:65:65:04:99:6b:
ed:98:5e:5e:9c:ae:0e:ad:f1:f9:61:82:89:4c:a4:ae:70:28:
88:d5:84:61:06:52:b5:98:14:bb:db:f6:0b:df:f0:2c:c0:a0:
42:cf:2d:92:da:77:12:ea:22:67:28:18:0e:71:bc:d4:d2:63:
fd:08:cf:6b:d7:a5:ed:e2:e7:dc:d0:3c:ec:40:65:57:f1:ed:
69:86:85:b8:d2:4a:83:6f:cb:9b:89:46:56:be:c2:09:5c:e2:
12:b6:b8:e6:ca:b3:bc:c3:11:24:c7:fe:d3:e5:75:41:71:5d:
36:35:7b:45:6a:f2:74:e3:44:52:3a:45:fe:b1:4b:f4:e2:5b:
53:a7:42:7a:9b:a4:6a:2b:e5:5f:cb:da:7b:69:6f:5d:2a:99:
d4:a2:9d:a3:76:cf:2e:c0:49:6f:69:16:59:cc:47:15:8b:76:
f4:87:d6:3f:ee:0b:4f:4e:15:02:9e:0e:ad:20:e3:2b:31:33:
44:74:11:6d:9b:e9:a3:2f:4e:c4:ca:ce:39:91:13:83:88:2d:
2c:31:26:3d:8e:86:c7:9f:29:e4:4e:45:8b:52:ba:b0:80:8f:
52:11:c2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:56 2026 by rpki-client