Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json)
Hash identifier: z0edpT3hFzqsKL0o9NaihMfAmV9V7XSezFjAM7Lkw3I=
Subject key identifier: 57:71:77:0F:6D:90:70:0B:46:60:44:5F:58:E1:31:F8:B4:C8:3E:38
Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888
Certificate serial: 019F8F10CA62E5F9FB58F4EE69F668FC6A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
Manifest number: 0D21
Signing time: Thu 23 Jul 2026 13:01:09 +0000
Manifest this update: Thu 23 Jul 2026 13:01:09 +0000
Manifest next update: Fri 24 Jul 2026 13:01:09 +0000
Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: kscu4ZPHDxMj9TcTHbBYgXQRYDLacOjRkt3rrKksYWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:ca:62:e5:f9:fb:58:f4:ee:69:f6:68:fc:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888
Validity
Not Before: Jul 23 13:01:09 2026 GMT
Not After : Jul 24 13:01:09 2026 GMT
Subject: CN=5771770f6d90700b4660445f58e131f8b4c83e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:70:9b:41:09:3b:93:77:eb:77:cb:58:88:
21:45:03:1f:8c:3e:2e:85:03:79:00:c3:05:04:7b:
ab:32:32:65:52:8e:06:be:d9:37:6f:cc:7a:ad:f2:
e6:9d:72:04:45:ab:86:46:e5:6b:98:4b:1f:3f:a8:
c9:3c:ec:7d:69:e2:c0:85:dd:7c:4f:58:74:8b:5d:
45:c1:96:b8:f4:62:5e:ec:0c:ee:e6:66:06:2b:4f:
cd:08:93:55:ee:14:6c:6d:8e:51:f8:3b:f4:f3:7a:
7e:ba:03:f1:ad:31:9f:a0:60:2d:ea:c9:5b:67:65:
4c:28:e1:cb:9a:0b:c7:7f:5e:3a:e8:57:23:5b:ff:
dd:47:7b:d7:a0:85:b0:d5:ba:97:04:35:b4:e2:a1:
1a:c2:d8:d4:ec:96:a4:bd:18:4f:7f:0a:4e:e4:e3:
ee:d9:33:f6:48:60:33:75:9e:50:a8:cf:bf:66:df:
bc:96:08:8f:20:4d:8b:8c:7d:aa:71:8f:39:20:12:
fb:20:c6:b5:9a:4b:6a:f6:87:58:a9:10:0a:49:59:
33:95:15:0c:68:43:1f:7c:4f:cf:2a:b4:3f:04:21:
fb:00:d7:62:93:1e:f2:6e:aa:02:fe:2b:bc:64:8f:
94:a9:50:47:c3:e5:e3:b6:d4:d0:92:8f:c7:e0:28:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:71:77:0F:6D:90:70:0B:46:60:44:5F:58:E1:31:F8:B4:C8:3E:38
X509v3 Authority Key Identifier:
keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:69:0b:71:f6:81:f7:00:1b:ff:ac:64:29:e7:a7:f8:53:13:
22:52:c2:c0:81:69:1b:4f:52:e1:26:61:b2:e1:75:54:ee:c5:
78:e1:fa:28:39:f8:16:c4:8d:82:61:a8:c9:7d:48:33:cd:5a:
8b:77:ce:60:17:dc:b4:93:ed:8a:67:ed:0d:6c:bb:d6:6b:c8:
30:05:fd:91:2e:d7:5d:52:b0:75:59:57:01:c5:87:4f:85:07:
88:69:0a:7f:d8:67:ea:c5:66:85:9c:4c:20:7e:c2:31:5b:97:
38:cc:99:be:3e:5b:8c:05:21:31:3a:75:4a:db:de:a8:41:c1:
be:17:82:11:ee:6a:e3:76:f3:6b:47:b1:8a:6e:23:9b:44:e2:
ec:2a:d7:a8:0e:18:1a:0a:2a:65:72:af:65:4c:f1:ae:4e:34:
44:bf:83:90:24:be:52:8a:ba:e1:14:d3:03:bd:97:9e:40:ec:
1c:1f:1e:3c:d0:d1:f0:f3:15:6b:50:94:4d:14:6f:2c:c5:3a:
77:25:db:7a:06:33:7f:87:63:c8:59:cf:87:5b:13:1c:e0:01:
bc:67:50:15:ca:a4:94:c6:e6:b1:7b:5e:14:10:2e:4b:0e:c7:
91:38:79:9a:0d:0f:1d:3b:aa:97:1b:de:d6:01:a5:8b:13:7f:
13:b5:a6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:15 2026 by rpki-client