Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
File: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft (raw, json)
Hash identifier: Ej9PnSxAAdWYsCGqi4Apo50KYo6IHA22XBCjtQjxU8E=
Subject key identifier: 1B:BF:4F:C9:85:00:97:55:16:01:28:01:52:9E:4E:24:9A:14:05:31
Authority key identifier: DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
Certificate issuer: /CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Certificate serial: 019F8EA2BD3675C5DC4E4D360A4633FD9A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
Manifest number: 0614
Signing time: Thu 23 Jul 2026 11:00:57 +0000
Manifest this update: Thu 23 Jul 2026 11:00:57 +0000
Manifest next update: Fri 24 Jul 2026 11:00:57 +0000
Files and hashes: 1: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl (hash: bPoFOBDENgEM8jkGG2wjUovktdMOA37dki+UCQGrNe4=)
2: _tzPs4jJj87d7Cluh9sgQm06Oy8.asa (hash: zWtQvDfWVHth5+g0jzyRaLgIhTdtWs7KPbDKeSI3a2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:bd:36:75:c5:dc:4e:4d:36:0a:46:33:fd:9a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Validity
Not Before: Jul 23 11:00:57 2026 GMT
Not After : Jul 24 11:00:57 2026 GMT
Subject: CN=1bbf4fc98500975516012801529e4e249a140531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:49:c1:96:db:28:bb:3a:7f:24:e7:10:9f:
78:23:cc:64:51:4d:d2:df:4a:ca:01:16:7e:cf:3c:
7b:97:67:79:68:83:44:23:f7:11:d0:0b:4e:42:09:
02:42:72:87:ed:d5:37:e8:3f:2b:7a:d8:e3:6d:3c:
a6:b7:32:04:9c:53:57:1c:51:df:ca:10:74:89:49:
d6:39:b8:6c:37:21:39:70:72:ca:4e:f3:f1:eb:40:
67:12:27:a8:2c:62:c3:2f:8d:59:17:7d:0b:d8:49:
e7:43:13:63:a2:2f:94:dd:19:0b:36:5d:c1:07:ff:
9e:50:4b:3c:2e:02:87:c5:44:68:67:c2:53:e6:8d:
74:20:72:b9:96:f2:18:a0:f3:20:ed:c2:0f:0b:b2:
ce:e7:37:e3:b2:b2:b4:8d:47:27:06:b0:55:13:d4:
cd:9b:eb:9c:99:f9:12:2f:5f:03:47:c6:3c:7f:d7:
0d:ec:a0:e6:c4:2f:85:f8:fe:b9:75:a8:03:e4:1f:
7f:5a:19:f9:21:cb:85:b7:ca:ef:7d:36:f7:0d:73:
cb:68:b0:0c:22:f3:1a:bc:71:ce:5f:c2:ba:7a:32:
81:da:ae:1f:10:5f:fe:44:48:e0:43:df:99:f9:80:
48:e1:be:19:36:d3:45:02:a2:35:c3:6e:94:24:28:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BF:4F:C9:85:00:97:55:16:01:28:01:52:9E:4E:24:9A:14:05:31
X509v3 Authority Key Identifier:
keyid:DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9b:f0:c4:2f:94:02:b4:8d:53:f9:be:02:c2:cc:c5:74:4d:
9b:23:66:11:99:60:6e:13:af:63:24:ee:57:ba:51:a6:fc:5d:
a5:9f:51:93:bb:7b:aa:fc:93:68:8a:f3:5b:c2:8e:f5:2f:b9:
14:98:4b:6b:9c:63:fa:5a:53:a4:22:62:57:d7:b4:b2:97:86:
bd:1e:c1:5a:ae:95:46:e5:ae:c6:b0:1e:76:b0:25:81:30:bd:
38:26:94:fc:2a:8e:35:de:3e:fc:20:af:c1:fe:3c:ec:fe:96:
07:da:16:61:b5:ba:cd:0d:b4:b6:86:c3:5b:13:a1:94:88:3a:
1a:32:3f:0e:94:50:0c:04:db:a1:83:5d:7f:7c:1c:8d:ac:ec:
21:f1:19:47:d6:d5:dc:39:77:56:4c:b5:a6:0b:3f:67:ef:b8:
e3:90:de:33:56:aa:04:67:51:d4:ee:66:82:f3:04:9a:05:d5:
d7:f1:69:e0:34:2d:e7:5e:35:7a:44:0f:81:8d:c2:c1:07:6e:
1e:39:fd:90:8b:32:c8:62:33:89:48:cc:11:be:05:bd:79:86:
ff:dc:c7:a7:bc:31:10:3f:68:9e:84:3e:a6:80:0c:56:2d:27:
c0:14:b3:d6:52:08:fc:ee:d2:ab:19:fa:a4:76:be:df:a8:33:
82:8e:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:12:06 2026 by rpki-client