Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8fde48-666f-4fbd-b8d4-6e715d742fb4/1/3BHpqTDWTdNjIaC4yiVepJ5vwUc.mft
File: 3BHpqTDWTdNjIaC4yiVepJ5vwUc.mft (raw, json)
Hash identifier: q7Pcva82l3vH4z2uTr+QLFsJ2pEvRoZ/PWY9Jlg+87I=
Subject key identifier: 20:E9:2B:65:D1:E3:00:80:8D:E4:B6:69:6F:39:B8:6F:23:70:0D:39
Authority key identifier: DC:11:E9:A9:30:D6:4D:D3:63:21:A0:B8:CA:25:5E:A4:9E:6F:C1:47
Certificate issuer: /CN=dc11e9a930d64dd36321a0b8ca255ea49e6fc147
Certificate serial: 019F9059F24BA38084B0A1EB2EFA3BDDD726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHpqTDWTdNjIaC4yiVepJ5vwUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8fde48-666f-4fbd-b8d4-6e715d742fb4/1/3BHpqTDWTdNjIaC4yiVepJ5vwUc.mft
Manifest number: BF
Signing time: Thu 23 Jul 2026 19:00:41 +0000
Manifest this update: Thu 23 Jul 2026 19:00:41 +0000
Manifest next update: Fri 24 Jul 2026 19:00:41 +0000
Files and hashes: 1: 3BHpqTDWTdNjIaC4yiVepJ5vwUc.crl (hash: IXQp4IdcEPyShYDCFhBFfYlM0GyPvECUn7YyCEg2TlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8fde48-666f-4fbd-b8d4-6e715d742fb4/1/3BHpqTDWTdNjIaC4yiVepJ5vwUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8fde48-666f-4fbd-b8d4-6e715d742fb4/1/3BHpqTDWTdNjIaC4yiVepJ5vwUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHpqTDWTdNjIaC4yiVepJ5vwUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:f2:4b:a3:80:84:b0:a1:eb:2e:fa:3b:dd:d7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11e9a930d64dd36321a0b8ca255ea49e6fc147
Validity
Not Before: Jul 23 19:00:41 2026 GMT
Not After : Jul 24 19:00:41 2026 GMT
Subject: CN=20e92b65d1e300808de4b6696f39b86f23700d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:69:cc:c8:68:38:91:4d:33:8c:27:f9:cf:
1b:ff:49:a8:95:b7:d8:dc:a8:2d:d0:bb:1d:6b:13:
1f:a0:ad:32:48:72:06:41:5e:4e:c9:1a:c1:db:b5:
e7:53:ed:63:8e:9c:e2:4e:ce:51:aa:22:ba:9f:ec:
66:2f:54:47:de:a1:04:26:89:55:3a:d1:cf:fe:9b:
0c:59:ec:0d:16:89:53:6e:bf:d2:a7:83:50:c6:f6:
fd:19:cc:9a:b2:46:6f:f3:f6:cd:9a:be:01:7d:b2:
f7:37:93:d5:fd:c4:b6:8f:6f:6f:68:73:c4:b0:f7:
cf:97:02:c0:c8:0e:a9:f8:f1:45:80:69:a8:c9:2d:
a8:d6:c0:72:1e:04:1a:e4:0d:85:1e:1e:de:8b:69:
df:5d:e1:f7:cc:d6:25:e9:ae:6a:f9:b4:9d:46:b5:
04:02:9d:e0:25:ac:9c:1c:07:03:60:21:46:9c:58:
fe:3d:2c:89:7b:8d:ec:63:d6:a5:fb:ac:6a:00:e3:
a4:1f:82:ed:88:de:db:d9:c0:ae:43:a6:70:26:2d:
64:86:ac:05:14:a2:06:f3:c2:12:60:14:b1:87:93:
87:82:8a:c3:27:04:fd:fa:1e:5b:6d:c5:e5:93:ed:
8b:d2:c6:12:36:44:51:a1:22:f0:2a:e4:59:e2:58:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E9:2B:65:D1:E3:00:80:8D:E4:B6:69:6F:39:B8:6F:23:70:0D:39
X509v3 Authority Key Identifier:
keyid:DC:11:E9:A9:30:D6:4D:D3:63:21:A0:B8:CA:25:5E:A4:9E:6F:C1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHpqTDWTdNjIaC4yiVepJ5vwUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8fde48-666f-4fbd-b8d4-6e715d742fb4/1/3BHpqTDWTdNjIaC4yiVepJ5vwUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8fde48-666f-4fbd-b8d4-6e715d742fb4/1/3BHpqTDWTdNjIaC4yiVepJ5vwUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3a:3f:90:b8:38:4b:0a:39:3e:a5:9d:0f:1b:71:74:5b:24:
0d:31:50:12:22:c9:c5:10:0e:fa:42:7b:52:10:58:b8:a9:fa:
4a:ec:76:78:ce:9b:53:64:ab:03:eb:65:35:6f:34:0e:57:5f:
60:1d:5f:4d:e2:41:82:b0:e9:f9:e1:8f:7b:05:6a:24:2e:c5:
86:42:23:19:de:ea:bb:5a:e1:ad:4e:31:63:a4:d4:0e:49:d0:
1b:49:97:8b:09:f7:0c:f6:ad:fb:66:a9:09:01:16:af:fd:8e:
52:11:b2:dd:a2:89:8b:f7:d0:cb:c7:04:5e:a6:46:e3:3b:2f:
b6:a2:5e:90:ef:b5:7d:ca:cc:d0:91:a0:b3:ba:45:c9:b5:df:
01:c9:21:8c:99:8a:4f:29:3f:f9:24:c9:10:95:0d:88:90:6f:
7c:ce:d9:a3:b8:63:7f:78:3c:32:93:cc:28:06:d5:8c:6d:48:
cf:ec:4b:da:97:68:d9:2d:ac:7b:b9:ec:b8:c9:53:4a:b6:f7:
7b:35:c0:2f:d9:26:9c:4a:08:37:84:5e:02:75:94:13:08:ac:
a5:a5:59:3a:40:1e:e3:04:f7:62:62:ce:75:ae:60:20:c5:df:
dc:d2:a9:bc:54:9c:34:b3:b8:73:8e:65:73:78:5b:91:31:27:
58:5d:9c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:23 2026 by rpki-client