Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.mft
File: 3jCrARAqrvMOvUyJHAOAm6rQOeA.mft (raw, json)
Hash identifier: 6PewDdeA0SM/TD5ciMnU7GW4Otsb/vXT1NS2rfPC+AY=
Subject key identifier: 59:59:96:A5:6D:2C:07:A7:77:0C:2F:FD:CA:33:FB:D0:62:DF:99:C8
Authority key identifier: DE:30:AB:01:10:2A:AE:F3:0E:BD:4C:89:1C:03:80:9B:AA:D0:39:E0
Certificate issuer: /CN=de30ab01102aaef30ebd4c891c03809baad039e0
Certificate serial: 019F94371F3636EB1B7062BD5E41F1DC5EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3jCrARAqrvMOvUyJHAOAm6rQOeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.mft
Manifest number: 038C
Signing time: Fri 24 Jul 2026 13:01:08 +0000
Manifest this update: Fri 24 Jul 2026 13:01:08 +0000
Manifest next update: Sat 25 Jul 2026 13:01:08 +0000
Files and hashes: 1: 3jCrARAqrvMOvUyJHAOAm6rQOeA.crl (hash: AAMVV6l0fOrnVOEP4EUIX47SkSJ8KaqDIwCoGk4E4C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3jCrARAqrvMOvUyJHAOAm6rQOeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:1f:36:36:eb:1b:70:62:bd:5e:41:f1:dc:5e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de30ab01102aaef30ebd4c891c03809baad039e0
Validity
Not Before: Jul 24 13:01:08 2026 GMT
Not After : Jul 25 13:01:08 2026 GMT
Subject: CN=595996a56d2c07a7770c2ffdca33fbd062df99c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:3a:4a:89:cd:f2:57:16:4d:e5:aa:da:b6:
ae:24:c7:41:41:4e:b9:bc:09:d6:51:d1:e7:7d:38:
0e:ef:5a:ca:01:d3:a0:89:2c:b4:3a:69:91:c0:c2:
e4:fb:34:dd:f1:8a:54:eb:89:d8:af:af:a3:25:d2:
4b:78:93:d0:7d:b7:3b:aa:b6:e7:f7:4f:7e:e1:b8:
69:82:90:61:c1:ec:91:fb:62:86:64:25:b6:8a:e2:
88:71:42:60:cd:a5:12:16:ae:a0:6c:8b:1a:43:10:
77:d4:e0:8e:9e:25:53:10:53:88:c0:d5:00:67:ed:
13:49:e2:87:76:67:ee:32:d9:fa:d5:1f:77:c6:d5:
a1:42:75:ac:f7:e1:d4:2b:0b:c8:d6:97:1c:67:aa:
0e:c7:67:3d:f0:14:f9:e2:61:8b:bb:d7:83:18:34:
a1:b6:f7:9a:5f:ee:6c:d8:76:61:e9:fc:87:1b:a0:
41:5f:4c:27:2a:48:e2:3d:4c:c2:62:ad:fd:2d:2f:
9a:af:91:01:f1:35:67:77:38:22:a3:5e:b6:83:3a:
25:15:85:b6:83:ea:39:14:25:20:0c:bb:a6:8a:ba:
93:9a:6e:62:b4:00:d2:a4:a4:5d:f5:a5:b4:71:2d:
e5:9c:67:27:8b:a8:ad:50:70:34:35:1f:9c:12:04:
49:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:59:96:A5:6D:2C:07:A7:77:0C:2F:FD:CA:33:FB:D0:62:DF:99:C8
X509v3 Authority Key Identifier:
keyid:DE:30:AB:01:10:2A:AE:F3:0E:BD:4C:89:1C:03:80:9B:AA:D0:39:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jCrARAqrvMOvUyJHAOAm6rQOeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a5:e6:c0:6e:94:13:0d:9e:a9:d0:2b:f9:f4:c5:df:64:85:
d0:70:bf:40:3a:4c:0b:9a:89:6a:2d:0d:5d:b6:b6:c5:a7:0b:
6e:1a:78:67:ee:43:22:3c:c2:ff:e4:67:44:6b:bc:70:8b:5c:
07:ef:08:5f:7f:d1:5a:da:78:c0:cd:2c:e3:fb:ef:6f:a9:f2:
91:e8:1c:64:ab:58:e9:f3:23:30:b7:b4:e7:78:9a:08:a7:d3:
cd:26:0c:00:7f:39:fc:49:ac:cc:2f:b3:79:cc:66:18:a7:ce:
37:80:9b:1a:ce:c6:04:6c:03:30:99:db:94:51:7f:11:63:4d:
80:6b:59:ac:16:aa:ea:42:f9:df:64:3c:f3:ca:1c:cd:e7:0b:
40:02:8d:bf:f1:9d:29:7a:fa:db:b9:73:fd:b8:81:1a:93:df:
2b:e9:0b:f7:cc:ad:7e:03:00:eb:cc:14:f6:63:0b:27:aa:69:
7e:08:78:d3:86:5a:67:37:65:3b:05:b2:8c:9a:6c:17:38:5b:
6e:4f:cf:65:9c:17:e1:4c:91:7f:a5:61:89:e2:d0:26:36:f4:
1e:78:b5:38:94:04:d9:1e:71:f8:b3:5d:2c:ab:f9:4d:1c:39:
1c:2a:b1:df:19:23:21:b7:24:ae:07:d3:66:cb:0f:b2:44:cc:
3f:df:0f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:53:20 2026 by rpki-client