
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
File: 3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft (raw, json)
Hash identifier: Nggh4pz/cFmDeWMWS7OD+2YGxBknFH2GZS3w0PgNA4o=
Subject key identifier: 17:AC:0F:45:F5:0B:18:55:76:02:4B:02:C0:D7:E0:4D:B7:63:6B:33
Authority key identifier: DC:75:85:2E:B3:D5:F4:BF:A7:E4:4E:80:EE:A9:88:19:86:40:3C:D4
Certificate issuer: /CN=dc75852eb3d5f4bfa7e44e80eea9881986403cd4
Certificate serial: 019F90FEF161945C68DC4CA4809A579DA477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
Manifest number: 10B8
Signing time: Thu 23 Jul 2026 22:00:54 +0000
Manifest this update: Thu 23 Jul 2026 22:00:54 +0000
Manifest next update: Fri 24 Jul 2026 22:00:54 +0000
Files and hashes: 1: 3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl (hash: EoJh7XU+Nyvavl5qOUf9IeUO1Bkimw7MPFaPMs0Jdnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:f1:61:94:5c:68:dc:4c:a4:80:9a:57:9d:a4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc75852eb3d5f4bfa7e44e80eea9881986403cd4
Validity
Not Before: Jul 23 22:00:54 2026 GMT
Not After : Jul 24 22:00:54 2026 GMT
Subject: CN=17ac0f45f50b185576024b02c0d7e04db7636b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:4c:54:cd:af:aa:cd:88:53:0b:ca:63:2e:
f7:7d:d7:fc:42:78:8b:08:57:e0:35:45:e4:28:56:
91:f8:de:06:f3:08:5d:d8:ef:7d:90:b8:bc:31:b5:
3d:ed:d9:44:68:1f:02:4d:d0:ea:3b:c4:2f:bf:f9:
da:e7:e6:29:e0:f8:45:74:07:9e:a0:6f:0b:4e:1e:
b8:93:d4:46:d5:65:57:ad:b0:a1:a1:46:90:20:e5:
6a:7a:c2:03:ec:f8:d5:28:90:0d:e4:db:65:cf:ec:
bb:8e:c5:b2:1f:38:32:29:84:05:55:c8:a4:39:f8:
8b:66:f0:72:fa:ae:cf:3a:d0:de:5f:5f:6a:e8:a8:
71:a7:aa:a7:34:57:58:73:25:21:13:65:8e:36:3f:
c4:30:9b:77:0f:cf:48:17:89:93:7b:41:ed:71:68:
3d:fc:ca:43:c8:17:e8:a3:1f:73:90:0e:6b:0e:98:
46:25:65:aa:d1:5c:85:ea:b4:f8:16:02:95:84:53:
ec:ac:fd:14:5f:b7:25:3f:4a:55:0b:ee:41:94:c5:
4b:e2:ad:3f:68:d1:a7:24:0c:4c:84:74:ba:65:2e:
25:68:33:8e:30:31:4f:88:48:00:cf:95:36:38:9e:
fb:28:5e:aa:e6:0c:94:fe:b3:72:74:a5:d0:7c:9a:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AC:0F:45:F5:0B:18:55:76:02:4B:02:C0:D7:E0:4D:B7:63:6B:33
X509v3 Authority Key Identifier:
keyid:DC:75:85:2E:B3:D5:F4:BF:A7:E4:4E:80:EE:A9:88:19:86:40:3C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8b:4f:ea:41:60:60:fd:7c:89:c0:7a:f8:bf:2a:65:f9:b2:
f6:2d:85:53:23:0a:1a:62:8b:97:82:0c:2f:99:2d:60:d5:d1:
17:5e:cc:a6:63:2e:c1:39:e3:2f:84:5f:bf:27:e2:8a:f7:cb:
8b:c5:e3:00:a0:c9:e1:e9:28:ae:8f:40:f3:26:cb:da:5c:8d:
9e:92:49:67:be:43:38:40:53:ff:d9:a2:d3:1d:a4:6f:2b:05:
75:2a:63:c8:7b:e5:7f:1f:ff:68:db:d0:7d:75:db:a0:1a:fa:
ed:5c:df:dd:38:98:55:43:3a:6c:19:80:f3:4e:f3:7d:86:b7:
88:be:c8:3b:5b:9d:b7:6d:68:87:59:88:8a:e0:6f:7c:9d:03:
8b:a0:1e:ad:4a:68:cf:c9:a6:d1:6b:04:25:65:84:87:b7:f0:
bf:a0:89:98:a1:5a:ef:71:95:da:e6:31:22:3b:1b:43:5d:1a:
a6:a4:75:e7:5a:be:39:cd:06:3a:02:8a:11:2f:30:29:d4:42:
8d:87:3e:fb:d7:24:9b:ca:06:c9:75:74:b5:5b:24:1f:fb:ec:
7b:16:af:ea:b5:1c:67:12:58:28:bc:66:d6:cb:a4:ea:b3:66:
c6:4b:bf:6f:53:4a:81:a7:ed:1d:12:11:45:26:eb:90:73:0f:
91:0d:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:15 2026 by rpki-client