Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier: rKKjIwr2ZDnv3zwpFV7oz1GAygrWr4n1Wi8cIrCCHxY=
Subject key identifier: EA:BC:6C:6E:A9:13:B7:24:49:2E:39:3C:73:6A:05:C7:A9:62:B1:DA
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 019F916CC2CC4A1BFEA3CCAF670B2AA83699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number: 07A3
Signing time: Fri 24 Jul 2026 00:00:51 +0000
Manifest this update: Fri 24 Jul 2026 00:00:51 +0000
Manifest next update: Sat 25 Jul 2026 00:00:51 +0000
Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: 92oZLh4lgQpRRul4hN5QTtXQCcPp9R+PNX2zEMtQTfs=)
2: SAIHz1BSLN8cZrRdxLMBgPm4XlA.roa (hash: McGCOon8pvSTjIiegxDTJso9YyCAyFlc2PqcW0Wd9HE=)
3: kAZJSgS29MgxZueFo76bZT3RLoo.roa (hash: 3PDTIlQgL4yc+u1IAv1XjtSyfqW/Sc3TvGpNsbSmrQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:c2:cc:4a:1b:fe:a3:cc:af:67:0b:2a:a8:36:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: Jul 24 00:00:51 2026 GMT
Not After : Jul 25 00:00:51 2026 GMT
Subject: CN=eabc6c6ea913b724492e393c736a05c7a962b1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c9:17:ac:d4:4b:31:1d:57:0c:c3:39:a5:b7:
4f:ca:06:40:da:3e:a3:a6:35:14:d0:cd:84:a4:55:
02:3d:ef:2a:ab:0b:b4:8f:0d:1d:90:87:e8:15:a8:
b6:79:20:0d:85:f7:a3:8c:fc:40:bd:57:4c:4f:8d:
01:05:dc:b2:cb:83:92:11:84:e5:52:8e:2a:1b:a6:
67:9b:5a:d0:a4:b3:06:e5:dd:39:a7:84:ef:9d:8a:
46:94:0f:67:d1:8e:0d:ba:ad:43:a1:45:bb:e3:d7:
f5:90:60:ba:b3:c0:1c:e9:a4:e2:73:c8:1a:b5:77:
1b:ff:2c:fd:97:3d:41:e0:31:db:08:25:89:1c:d1:
76:4c:56:30:15:87:76:d1:91:29:53:2f:8e:84:4a:
5d:f2:ae:36:93:07:b4:9a:00:af:cd:ab:1b:52:0f:
c8:59:8f:c4:1f:6d:28:af:f5:1e:51:d6:51:58:17:
e2:e6:5c:95:ab:6a:ec:54:2d:1d:56:cb:63:23:4e:
1b:05:62:79:75:04:c8:f6:ab:b3:c4:98:a7:e3:8b:
a3:2e:17:0b:0b:fb:9d:79:14:63:1a:18:9c:9d:db:
1b:bf:63:58:5c:52:8c:31:ba:b3:2e:47:00:d9:49:
a5:bf:27:50:f2:04:2c:9b:f9:8c:24:ec:2f:01:c7:
3c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BC:6C:6E:A9:13:B7:24:49:2E:39:3C:73:6A:05:C7:A9:62:B1:DA
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e7:3b:51:dd:12:fc:a6:65:ae:fe:f4:97:8b:5e:a7:fe:0c:
7e:b9:e0:37:d3:1a:ad:1c:d0:5f:12:61:ff:68:59:ef:08:bd:
b5:3e:0e:b0:ec:a7:2b:e9:26:34:47:62:4e:8e:8a:bd:c7:ca:
f3:c1:59:82:27:22:40:08:f8:c2:ab:8b:0e:c1:c3:ce:07:ea:
39:7f:6b:3f:a6:ad:fa:76:2d:96:de:ba:9d:2d:31:1e:19:69:
e8:57:7e:0f:52:35:97:22:40:3e:2d:ba:36:08:89:ae:c8:a7:
46:cb:b4:d2:03:9a:a2:b6:26:10:bb:3c:00:1f:22:4d:ec:d2:
8c:48:eb:29:f0:75:04:47:8c:aa:0e:a9:1d:8f:e0:d9:9c:6e:
b8:c4:f9:8c:54:e6:67:e2:f0:66:f3:16:3f:05:12:e1:88:9f:
5d:fd:73:9b:6f:f5:00:a4:d9:03:cc:ed:a2:54:54:43:45:a9:
88:e9:d3:d5:ad:3b:81:51:65:56:6d:09:21:a0:8f:50:35:1c:
92:ba:3c:9c:e2:02:ba:09:cd:37:36:c1:0f:40:ee:37:d8:a8:
69:21:f3:a4:80:49:c1:f7:ce:b7:db:be:97:e8:1f:9c:b6:ba:
87:25:59:87:3e:80:ae:d9:5c:d6:c2:b9:c7:7c:ef:a4:95:ed:
97:c2:77:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:39 2026 by rpki-client