Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bf4a4-3161-411e-b01d-3bfb04a76ecc/1/3ON76XfCMaJj9cbwmEcvj-QO0Rc.mft
File: 3ON76XfCMaJj9cbwmEcvj-QO0Rc.mft (raw, json)
Hash identifier: ukIWLIy1Mv5ElZaVdv83DOkNm9m9OcNhb9UB0SRExK4=
Subject key identifier: 60:7D:21:24:48:7E:13:77:E2:D0:25:69:2A:20:E9:49:F0:CA:E1:01
Authority key identifier: DC:E3:7B:E9:77:C2:31:A2:63:F5:C6:F0:98:47:2F:8F:E4:0E:D1:17
Certificate issuer: /CN=dce37be977c231a263f5c6f098472f8fe40ed117
Certificate serial: 019F9059D01760680101532B8105ED4C2ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ON76XfCMaJj9cbwmEcvj-QO0Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bf4a4-3161-411e-b01d-3bfb04a76ecc/1/3ON76XfCMaJj9cbwmEcvj-QO0Rc.mft
Manifest number: 4A
Signing time: Thu 23 Jul 2026 19:00:32 +0000
Manifest this update: Thu 23 Jul 2026 19:00:32 +0000
Manifest next update: Fri 24 Jul 2026 19:00:32 +0000
Files and hashes: 1: 3ON76XfCMaJj9cbwmEcvj-QO0Rc.crl (hash: uv9QwGLK2eCn4v4X1kPrqOGXvi7YQPkCK09tEITRUoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bf4a4-3161-411e-b01d-3bfb04a76ecc/1/3ON76XfCMaJj9cbwmEcvj-QO0Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7bf4a4-3161-411e-b01d-3bfb04a76ecc/1/3ON76XfCMaJj9cbwmEcvj-QO0Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ON76XfCMaJj9cbwmEcvj-QO0Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:d0:17:60:68:01:01:53:2b:81:05:ed:4c:2a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce37be977c231a263f5c6f098472f8fe40ed117
Validity
Not Before: Jul 23 19:00:32 2026 GMT
Not After : Jul 24 19:00:32 2026 GMT
Subject: CN=607d2124487e1377e2d025692a20e949f0cae101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:37:f1:54:c4:20:14:38:5f:59:16:23:0b:
d5:63:28:35:43:1c:0e:ef:b0:53:0d:aa:ee:11:36:
fb:2f:ad:fc:97:4b:35:ce:70:d6:a2:b3:a2:fc:26:
e3:0e:23:08:c5:1c:58:fd:45:ff:92:0e:02:6a:8c:
97:6c:1c:1f:bb:9c:41:04:0d:75:da:72:ab:c8:70:
c8:78:89:fe:92:bf:02:f0:98:a7:92:8c:5c:2b:d4:
f4:0b:6c:da:d4:7e:a7:59:65:54:97:fc:4a:ac:cc:
11:4b:ec:63:d6:03:2b:af:4d:fe:81:6c:f0:33:e3:
92:e5:d1:2e:b7:c0:19:9b:29:4c:af:6a:67:4f:04:
46:23:8c:37:98:68:f1:ba:43:3f:19:44:d3:71:16:
5c:c6:13:5f:03:32:28:10:1f:d5:ec:2b:89:ed:e3:
da:5a:fc:4a:f8:4e:ad:fc:6b:90:91:bf:4f:a7:b1:
5d:5e:c4:f5:0e:8e:89:99:d9:fa:5f:66:94:9e:db:
d2:e2:e8:4f:11:ec:20:9d:de:0e:03:28:3e:54:34:
89:26:2d:33:cd:14:61:37:c0:92:18:7f:b7:77:41:
a1:c9:c6:c0:ac:b4:6e:be:1b:72:5f:97:a3:be:27:
20:23:a3:61:e9:bc:11:80:7d:84:d3:10:b6:8b:3f:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7D:21:24:48:7E:13:77:E2:D0:25:69:2A:20:E9:49:F0:CA:E1:01
X509v3 Authority Key Identifier:
keyid:DC:E3:7B:E9:77:C2:31:A2:63:F5:C6:F0:98:47:2F:8F:E4:0E:D1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ON76XfCMaJj9cbwmEcvj-QO0Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bf4a4-3161-411e-b01d-3bfb04a76ecc/1/3ON76XfCMaJj9cbwmEcvj-QO0Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bf4a4-3161-411e-b01d-3bfb04a76ecc/1/3ON76XfCMaJj9cbwmEcvj-QO0Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f1:98:31:fc:09:b6:c6:73:cd:46:79:36:1e:66:6a:52:f3:
15:48:6c:6b:2c:c5:c3:8a:02:b4:bc:93:93:5c:30:73:3c:c6:
2a:b4:af:98:1d:1a:5d:50:fe:99:9e:a1:ee:24:fc:84:bf:b4:
bb:1e:0f:b9:f9:b9:4b:65:2a:3e:09:66:41:d2:5a:f7:76:7a:
ce:b6:41:4c:fd:b1:84:49:e1:e4:92:ea:3b:cb:45:79:e7:3b:
19:1c:94:c4:66:82:67:51:d6:d0:a0:40:c3:1e:f7:0b:f3:23:
7a:f0:a4:b5:29:10:60:e9:47:49:c2:3a:07:ce:32:31:17:fb:
c6:c7:13:7d:40:05:cc:f0:32:39:18:62:b9:8f:fc:3f:88:d2:
f8:21:5d:67:a0:08:15:3d:6b:98:7d:8f:91:6d:c1:c3:43:e5:
09:31:c0:a5:ab:f4:59:b6:4b:be:a3:80:41:b9:e5:10:a5:85:
11:5f:2e:f0:e7:e1:62:97:55:af:07:4a:02:e9:67:1d:45:19:
3b:72:54:e1:68:00:b5:4b:41:fa:54:c9:6b:87:d0:8e:95:ca:
8a:d5:5d:97:5d:49:ff:5d:d1:c9:02:57:8c:07:ed:34:19:2a:
5c:13:82:f0:1e:87:6d:0d:d4:4d:7e:c1:58:85:6c:1d:37:b1:
55:b8:63:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWdAXYGgBAVMrgQXtTCq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTM3YmU5NzdjMjMxYTI2M2Y1YzZmMDk4NDcyZjhmZTQw
ZWQxMTcwHhcNMjYwNzIzMTkwMDMyWhcNMjYwNzI0MTkwMDMyWjAzMTEwLwYDVQQD
Eyg2MDdkMjEyNDQ4N2UxMzc3ZTJkMDI1NjkyYTIwZTk0OWYwY2FlMTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtak38VTEIBQ4X1kWIwvVYyg1QxwO
77BTDaruETb7L638l0s1znDWorOi/CbjDiMIxRxY/UX/kg4CaoyXbBwfu5xBBA11
2nKryHDIeIn+kr8C8JinkoxcK9T0C2za1H6nWWVUl/xKrMwRS+xj1gMrr03+gWzw
M+OS5dEut8AZmylMr2pnTwRGI4w3mGjxukM/GUTTcRZcxhNfAzIoEB/V7CuJ7ePa
WvxK+E6t/GuQkb9Pp7FdXsT1Do6Jmdn6X2aUntvS4uhPEewgnd4OAyg+VDSJJi0z
zRRhN8CSGH+3d0GhycbArLRuvhtyX5ejvicgI6Nh6bwRgH2E0xC2iz/S8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGB9ISRIfhN34tAlaSog6UnwyuEBMB8GA1UdIwQY
MBaAFNzje+l3wjGiY/XG8JhHL4/kDtEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09ONzZYZkNNYUpqOWNid21FY3ZqLVFPMFJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmY0YTQtMzE2MS00MTFlLWIwMWQt
M2JmYjA0YTc2ZWNjLzEvM09ONzZYZkNNYUpqOWNid21FY3ZqLVFPMFJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS83YmY0YTQtMzE2MS00MTFlLWIwMWQtM2JmYjA0YTc2ZWNj
LzEvM09ONzZYZkNNYUpqOWNid21FY3ZqLVFPMFJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPGYMfwJ
tsZzzUZ5Nh5malLzFUhsayzFw4oCtLyTk1wwczzGKrSvmB0aXVD+mZ6h7iT8hL+0
ux4Pufm5S2UqPglmQdJa93Z6zrZBTP2xhEnh5JLqO8tFeec7GRyUxGaCZ1HW0KBA
wx73C/MjevCktSkQYOlHScI6B84yMRf7xscTfUAFzPAyORhiuY/8P4jS+CFdZ6AI
FT1rmH2PkW3Bw0PlCTHApav0WbZLvqOAQbnlEKWFEV8u8OfhYpdVrwdKAulnHUUZ
O3JU4WgAtUtB+lTJa4fQjpXKitVdl11J/13RyQJXjAftNBkqXBOC8B6HbQ3UTX7B
WIVsHTexVbhjWA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:18:00 2026 by rpki-client