Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
File: 3cHKqpDJHGKtslTJSjfVxfecXxw.mft (raw, json)
Hash identifier: eUv2AvuJ0d/aa78rTv5VPukRqC4iKiheum9fLu4FB7c=
Subject key identifier: 98:ED:42:04:52:02:F9:7F:0F:1D:CF:8E:4C:F7:7E:1C:5A:8F:FF:96
Authority key identifier: DD:C1:CA:AA:90:C9:1C:62:AD:B2:54:C9:4A:37:D5:C5:F7:9C:5F:1C
Certificate issuer: /CN=ddc1caaa90c91c62adb254c94a37d5c5f79c5f1c
Certificate serial: 019F8F7F8944AF8FF175658C3A735551DC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:07 +0000
Manifest this update: Thu 23 Jul 2026 15:02:07 +0000
Manifest next update: Fri 24 Jul 2026 15:02:07 +0000
Files and hashes: 1: 3cHKqpDJHGKtslTJSjfVxfecXxw.crl (hash: ZMH8LHWC9LV0+Awzf8v3IwJAmyZGZcWCS6Yw5eMmhfA=)
2: YN9Cw4qcHXYpLVHYm4VWqw0i0Is.roa (hash: hKz3CdgByzclOsSKFERuifJCiSNf9f2KayzZQ7/xtmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:89:44:af:8f:f1:75:65:8c:3a:73:55:51:dc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc1caaa90c91c62adb254c94a37d5c5f79c5f1c
Validity
Not Before: Jul 23 15:02:07 2026 GMT
Not After : Jul 24 15:02:07 2026 GMT
Subject: CN=98ed42045202f97f0f1dcf8e4cf77e1c5a8fff96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:8f:5a:3b:cd:56:9a:87:49:56:5b:99:c3:
e5:ac:a2:5c:b8:70:62:28:6f:c9:26:cc:99:35:69:
48:a4:07:cf:0e:e9:d8:e0:d4:cb:35:b2:72:4f:76:
4e:1b:40:4d:0f:d7:88:f8:cd:a2:89:21:f6:7c:a8:
fa:45:28:0a:0f:e3:85:66:d1:9b:4c:27:85:55:80:
53:8c:1f:ba:da:18:05:c8:d3:b8:3d:7e:9d:2d:47:
d9:0a:e0:0c:8f:d0:97:c9:35:b7:40:f2:a5:58:19:
15:37:31:96:dc:be:f8:6f:fe:7f:d2:76:11:11:08:
7a:ab:ea:d5:8b:40:69:64:e3:5a:60:dd:5c:b8:1d:
93:e5:2f:95:1c:2b:f3:e0:49:65:3f:12:1d:93:b8:
48:7d:a3:6f:3b:7d:8b:33:86:f9:6a:97:27:a5:47:
6b:b6:34:a1:ed:c9:95:56:c2:3c:8b:4c:38:af:a4:
3d:0c:41:04:43:dd:79:77:c8:76:ec:2d:1f:c1:55:
d7:fc:71:f6:d9:59:de:e5:2e:da:37:69:c8:38:9a:
41:0b:bc:30:6b:b9:7f:13:d4:17:11:9e:9e:5d:b6:
2c:af:25:58:d1:b9:5a:0b:cd:3d:62:17:53:a3:9e:
1a:7b:2f:cf:4b:9e:7b:25:d5:0d:42:3e:1d:99:8d:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:42:04:52:02:F9:7F:0F:1D:CF:8E:4C:F7:7E:1C:5A:8F:FF:96
X509v3 Authority Key Identifier:
keyid:DD:C1:CA:AA:90:C9:1C:62:AD:B2:54:C9:4A:37:D5:C5:F7:9C:5F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:85:6d:9d:e2:c8:ef:dc:c1:ba:ff:db:11:f4:a1:f1:2c:99:
3c:58:42:df:1e:75:b2:b0:90:49:fb:fa:34:6f:3e:3b:f2:04:
4a:70:6f:74:e4:02:8f:83:24:26:cc:01:bd:8a:7d:a9:d8:fe:
5f:01:1c:a8:7e:db:49:54:11:63:ad:37:b5:34:ab:c2:40:5a:
dc:22:2a:dc:90:cb:c4:a3:a4:ee:df:0d:af:c9:67:76:94:9a:
72:c3:34:b4:cd:76:21:1e:a8:04:42:ee:1d:5c:09:20:84:da:
b8:be:2f:c5:62:a5:16:e3:ea:5a:dd:dc:c1:ba:42:6d:9f:23:
6a:24:50:e2:e6:3d:63:7f:41:f7:9b:e0:fa:d3:9c:01:8e:39:
fc:20:b8:9c:24:e3:f7:5b:ac:ca:6d:23:4b:ee:79:2a:69:48:
16:12:05:31:5c:63:5b:69:6e:93:ac:eb:27:b3:12:e7:ce:16:
c6:24:13:b6:04:6c:f4:e9:01:10:99:d4:86:7f:d8:a5:ba:f3:
db:d6:c6:f7:6a:cd:92:d2:d2:7e:a4:25:fa:b9:65:d1:36:02:
af:cf:74:42:58:64:56:6a:66:89:22:ef:a0:33:25:ab:8e:f7:
20:38:71:d9:6a:15:c3:5d:dd:e0:90:9b:9c:e3:db:5d:44:e8:
e8:08:3b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:16 2026 by rpki-client