Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
File: 3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft (raw, json)
Hash identifier: C9stOeIh3hfKsXuPramJKdvkEYfpWKGtXeCQ5Jd1gYY=
Subject key identifier: D2:6D:3A:47:1B:2D:03:51:67:D9:00:87:2A:DF:7D:4D:94:50:ED:66
Authority key identifier: DE:45:F9:BB:82:63:32:52:88:11:5B:E5:E4:E5:77:F8:0B:C9:A5:CD
Certificate issuer: /CN=de45f9bb8263325288115be5e4e577f80bc9a5cd
Certificate serial: 019F8F7F205AE2E32C54D3D3364E01A3BC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kX5u4JjMlKIEVvl5OV3-AvJpc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
Manifest number: 28
Signing time: Thu 23 Jul 2026 15:01:40 +0000
Manifest this update: Thu 23 Jul 2026 15:01:40 +0000
Manifest next update: Fri 24 Jul 2026 15:01:40 +0000
Files and hashes: 1: 3kX5u4JjMlKIEVvl5OV3-AvJpc0.crl (hash: t7PUDZFY7ofU8SpOEbnVAobBTy6jyMFPwsPA36j69Qc=)
2: MBj5kGluPT5_HSR9ElprzeHWlR0.roa (hash: bTpK8jvE50MfOz8I4rdcfBf2xLTGRw3SAiHk9+mLUjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kX5u4JjMlKIEVvl5OV3-AvJpc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:20:5a:e2:e3:2c:54:d3:d3:36:4e:01:a3:bc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de45f9bb8263325288115be5e4e577f80bc9a5cd
Validity
Not Before: Jul 23 15:01:40 2026 GMT
Not After : Jul 24 15:01:40 2026 GMT
Subject: CN=d26d3a471b2d035167d900872adf7d4d9450ed66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5a:be:a8:de:89:87:b4:66:2a:20:ff:d3:d4:
83:9e:7b:d8:d5:ff:9e:21:b6:da:93:a4:7e:b5:12:
9a:91:20:30:bf:48:fc:b4:0c:6c:ba:76:fe:ca:ff:
11:a9:e8:f3:04:da:a6:28:86:8f:f3:4f:b0:20:ee:
93:95:2e:ab:dc:9c:54:7c:7b:59:ad:84:8a:6e:1b:
d1:65:de:1c:12:20:a2:ca:a1:73:31:ea:a9:8a:be:
98:97:4d:9b:fd:52:99:fa:e3:bf:78:d8:52:d6:99:
a3:c8:df:89:ea:42:fc:2e:39:11:16:42:f6:2d:53:
75:ea:f3:a7:89:1c:2e:e1:fc:58:45:52:94:95:9a:
24:9f:28:b8:d6:53:df:2d:e4:e6:4e:fb:08:c7:b9:
00:cc:25:3e:8d:b3:c0:72:37:d9:8a:e9:ce:de:23:
4c:9c:94:3f:cf:37:a3:de:6c:bd:d8:65:9e:8a:6b:
98:7b:0e:4c:08:dd:61:f5:e8:41:78:9e:c5:d4:40:
ed:5d:52:cb:4f:72:b9:82:d7:ae:18:b5:aa:52:d8:
0b:1d:80:a7:d2:f4:c6:a3:e9:74:92:9b:50:ff:58:
5a:b8:64:41:96:03:df:18:5d:4e:38:67:b9:89:fc:
9f:62:9d:25:cc:46:92:95:50:07:ed:64:42:05:8d:
ee:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6D:3A:47:1B:2D:03:51:67:D9:00:87:2A:DF:7D:4D:94:50:ED:66
X509v3 Authority Key Identifier:
keyid:DE:45:F9:BB:82:63:32:52:88:11:5B:E5:E4:E5:77:F8:0B:C9:A5:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kX5u4JjMlKIEVvl5OV3-AvJpc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9b:7c:24:f3:8c:99:fe:cc:32:84:0c:5d:7f:aa:40:d5:1e:
95:75:1e:56:7b:f2:ae:5b:23:0e:c7:44:8c:2d:dd:ca:07:f3:
e3:13:4b:bc:c2:0f:b1:04:de:e4:3e:d3:e5:26:c1:c3:96:4b:
98:88:1b:84:c9:35:4c:26:ac:93:f2:56:26:28:4a:00:99:a8:
44:48:9c:f1:fd:ed:3f:17:8e:ab:b8:0b:61:b5:62:75:cd:1b:
74:22:11:b5:b7:ef:33:c1:68:dc:a7:1c:52:ce:93:c3:4f:19:
fd:e4:04:e4:5b:37:38:b2:bd:3d:86:3b:6a:1f:b0:da:38:97:
e2:6d:ad:fa:27:dd:45:9b:b7:57:36:d6:3c:db:f9:a5:f3:b6:
a1:4c:04:af:cc:c7:7b:47:69:07:75:20:a9:53:8e:75:7e:2b:
92:ce:76:4f:16:04:18:cd:35:0b:1f:90:99:5f:e5:0b:a0:a8:
f7:10:59:17:7b:56:f1:5b:77:0e:e3:ec:84:72:ac:03:9d:ef:
26:bc:ec:c4:23:2b:ff:b8:01:d3:8e:63:6b:42:b0:bd:9f:00:
d8:c0:9b:e7:59:75:00:be:d2:e5:02:45:db:23:d6:26:98:f3:
fa:76:7e:d3:ef:81:09:af:1c:c6:bb:cb:8e:08:ac:d4:95:22:
48:c0:e5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:49 2026 by rpki-client