
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
File: 3OXgIlmwLxipnQnkvc5BnGrgo7g.mft (raw, json)
Hash identifier: wwy35O0+rtH4ou8yiqsezPoeeUC7SCYR5AdEU7fLuC0=
Subject key identifier: FF:CB:89:16:99:93:DE:67:D0:7B:BF:57:D9:FC:9A:49:76:32:55:8A
Authority key identifier: DC:E5:E0:22:59:B0:2F:18:A9:9D:09:E4:BD:CE:41:9C:6A:E0:A3:B8
Certificate issuer: /CN=dce5e02259b02f18a99d09e4bdce419c6ae0a3b8
Certificate serial: 019F8F4786D64E767CCCBA31450D7FFB1B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OXgIlmwLxipnQnkvc5BnGrgo7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
Manifest number: FD
Signing time: Thu 23 Jul 2026 14:00:57 +0000
Manifest this update: Thu 23 Jul 2026 14:00:57 +0000
Manifest next update: Fri 24 Jul 2026 14:00:57 +0000
Files and hashes: 1: 3OXgIlmwLxipnQnkvc5BnGrgo7g.crl (hash: Q3V/wUOo+LLHUSNACsWQ36d3Z8/6aC3a3k7as2Pa9qE=)
2: dzwsdq_p19qeWq1sVjAo8n8DF3A.roa (hash: ypz0q9rJFOFUluO/EXbahQLlxxipPvEZdWT5c5RYe/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OXgIlmwLxipnQnkvc5BnGrgo7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:86:d6:4e:76:7c:cc:ba:31:45:0d:7f:fb:1b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5e02259b02f18a99d09e4bdce419c6ae0a3b8
Validity
Not Before: Jul 23 14:00:57 2026 GMT
Not After : Jul 24 14:00:57 2026 GMT
Subject: CN=ffcb89169993de67d07bbf57d9fc9a497632558a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:4d:12:9b:57:60:21:2c:82:0e:ff:8b:b0:
97:95:a5:10:f9:2e:ba:b0:d7:f6:f3:53:14:90:80:
b0:11:ce:39:6a:c8:36:ee:4c:00:67:fc:f4:f5:16:
57:8b:4a:5f:2a:3f:d9:82:5d:77:84:89:43:3d:2e:
ce:2a:c6:44:f3:12:35:d5:82:4b:82:0f:b8:56:8f:
03:82:70:8e:a5:b4:6f:cb:bf:37:4b:d8:38:a4:ed:
ae:7a:8c:42:00:ef:44:5a:b2:37:fb:87:43:cc:af:
e3:10:51:b2:9d:b4:cf:71:44:19:76:2e:63:42:a9:
1b:89:2e:37:bc:1a:f2:db:da:d2:50:e2:4c:a3:d2:
5e:b2:82:c8:d7:a9:bc:45:cd:25:d6:5e:e3:a8:5d:
a6:fe:aa:bd:91:81:49:e5:9b:07:79:7e:95:61:22:
e1:1c:f0:09:41:60:05:c4:8c:4e:96:3f:5e:57:38:
9f:c7:13:29:78:d1:f7:86:0a:3e:3c:bb:59:72:eb:
ad:64:e2:08:db:53:a2:f3:2a:f0:28:2a:de:ac:61:
c0:e0:c8:b4:b3:d7:b9:fb:82:7c:f1:9b:01:a5:64:
ce:e9:1e:40:99:08:ca:a2:8b:50:f1:c0:2c:f6:6c:
ab:7a:94:b0:af:4b:5f:15:b7:35:7d:54:f9:de:56:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CB:89:16:99:93:DE:67:D0:7B:BF:57:D9:FC:9A:49:76:32:55:8A
X509v3 Authority Key Identifier:
keyid:DC:E5:E0:22:59:B0:2F:18:A9:9D:09:E4:BD:CE:41:9C:6A:E0:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OXgIlmwLxipnQnkvc5BnGrgo7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3b:f6:e3:a0:bb:01:44:73:82:27:4c:aa:e8:1b:ef:c2:49:
2e:ea:bc:e4:b6:78:64:cf:86:f7:03:1f:4a:5b:d4:f7:e8:78:
0a:17:53:f6:be:97:e1:f0:5b:49:0e:4e:ac:e4:d3:38:dd:f0:
52:c9:ee:62:1e:94:0d:0a:1b:a5:8f:9e:32:80:1e:9c:e8:80:
82:79:07:b3:d2:8a:89:1b:8a:d8:1a:fd:5b:8c:e4:13:1c:2b:
5b:e3:db:90:a1:bc:88:86:a2:27:4c:e6:b8:11:cf:0f:30:ac:
1c:36:4e:f7:63:ab:7a:c3:71:20:17:74:20:1c:cf:e3:ab:d9:
7d:ab:3a:a8:8f:ae:17:5b:29:16:67:e2:a8:86:de:9f:1f:fc:
bf:c6:2d:ae:c9:71:56:ff:68:8a:6b:39:ef:35:e5:07:10:ed:
dc:dc:0e:7d:1c:ae:42:f6:42:17:af:66:27:07:2e:f7:28:49:
f7:8c:9e:86:7f:ce:31:ca:3b:8c:9e:3a:fb:5f:52:b5:f9:b2:
2d:50:82:9b:af:7d:ff:3a:d5:d0:c0:7e:32:d9:af:d6:2b:bc:
3c:7a:78:5c:f3:ac:0f:72:0b:fc:0a:f3:22:a0:5b:d9:ab:5b:
d2:09:f9:5d:13:d1:d7:3a:f9:f6:fd:5a:70:4d:7c:21:b6:0b:
22:c4:04:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:53 2026 by rpki-client