Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: XCVr07oGI63CYaYd0jbgvrMTd9IZktEHI2FZlxE/vQc=
Subject key identifier: 3E:FD:D6:6B:F5:BC:E3:1D:F1:70:09:81:34:D6:4C:74:F4:F8:D3:65
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 019F8F102F9C50B5825D0E3C01EAFAE0CFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 105D
Signing time: Thu 23 Jul 2026 13:00:30 +0000
Manifest this update: Thu 23 Jul 2026 13:00:30 +0000
Manifest next update: Fri 24 Jul 2026 13:00:30 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: 2IU+4926p4oG16Q/AODNlTzZxKp4XWaIWswP2PgXR5I=)
2: 58GFDuus_tVD8dh1HAcQzm6Bd5s.roa (hash: pyGHBxobR5Y4/oQZr4EFtkYZAaS4T1/SsoP9evw4DUA=)
3: D7CjrTPEmaFgX5q30EgqridM6Ks.roa (hash: 6VDTLT0bKAkkx8WWVo+B1/Z/i7C3vrJBLQ7Xx0A+EvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:2f:9c:50:b5:82:5d:0e:3c:01:ea:fa:e0:cf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Jul 23 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=3efdd66bf5bce31df170098134d64c74f4f8d365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:98:4a:d3:6d:65:46:fc:60:da:ef:6e:3e:
ce:bc:46:1c:80:98:36:57:8f:20:5c:4b:42:18:92:
1f:43:9f:7e:f6:06:e8:5a:a5:d9:55:a7:24:9f:76:
22:b2:f0:93:7f:d1:1b:cb:b0:cf:db:76:ee:20:81:
09:a2:4d:e6:b7:4c:a6:e9:f4:42:b2:ee:83:f1:bc:
ca:1c:a1:9d:0b:00:40:7d:62:57:fb:7d:0e:a5:2e:
e7:54:18:6c:ca:e4:9b:89:da:0e:87:09:3f:fa:5e:
07:92:11:e9:1c:7b:e7:70:cc:0f:a1:c2:a3:56:0f:
7d:fc:a5:01:0d:10:18:2d:a8:be:8a:47:4b:20:e4:
46:71:b5:4c:19:0f:4a:b0:1a:a9:00:9e:47:9e:e7:
0e:fc:e3:ba:bd:f8:5b:8b:ec:70:48:fd:82:0b:57:
6c:41:cd:9a:4b:a2:8c:d0:91:4e:0b:f4:20:dd:e4:
af:38:4e:43:2d:99:a5:60:82:79:83:8f:ec:44:0f:
ad:7f:26:0b:28:e4:85:15:50:13:a2:4b:6d:bc:b6:
21:07:d2:bf:a7:30:2a:10:0f:2e:32:90:03:ac:a3:
c4:f4:ba:37:02:bf:68:74:d7:88:8e:25:fe:b6:d3:
46:11:b9:b2:b4:57:be:d1:fc:aa:a6:84:fd:e9:7b:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FD:D6:6B:F5:BC:E3:1D:F1:70:09:81:34:D6:4C:74:F4:F8:D3:65
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ca:e7:b1:e1:6e:e1:1c:9e:1e:05:58:af:85:20:e9:23:05:
52:52:14:46:5e:d2:90:2e:84:d6:53:9d:bf:5d:0b:25:21:4b:
9a:fc:61:05:65:d6:ee:a1:1f:d4:d7:c6:01:0a:5b:b6:3e:4c:
70:db:fa:dd:34:02:7a:e4:f3:81:f4:c3:d7:4f:56:16:a0:d3:
62:ef:3c:69:c4:65:fa:cc:2a:e1:67:7a:2f:9f:58:00:ac:f9:
a6:ad:5e:6d:2a:0f:70:77:25:e1:9c:b7:f7:af:5c:c9:88:a2:
22:4a:2f:d7:71:24:ff:c2:86:55:13:9c:99:aa:dc:9c:e0:4c:
66:25:64:b7:8d:11:33:c5:41:bb:7f:a9:ee:51:81:73:5d:ab:
09:73:4c:b0:af:9d:69:06:ba:3b:1c:e2:2c:08:25:5e:3f:fd:
29:d8:49:00:ae:42:e6:8f:15:ce:e1:47:f4:d2:e3:8d:14:5e:
7f:44:18:91:4c:55:40:41:d0:c1:bd:bc:5c:dc:52:49:7d:d3:
1c:18:9f:5b:7f:07:9d:92:44:96:d2:cb:09:3e:a9:2e:c0:81:
c5:f5:50:79:35:8f:08:a7:57:fc:53:e9:48:f9:60:da:cb:e9:
3f:90:5d:53:4d:44:d9:eb:d7:ca:7b:33:1d:88:24:3f:1d:bd:
85:be:b3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:00 2026 by rpki-client