Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json)
Hash identifier: eU6AOE52MwAcA4RQGdqvOfFAcpwRAXwNTa6Emgd7GTQ=
Subject key identifier: 82:EC:9E:7A:7C:EB:1B:CC:DC:63:F1:7C:5F:BB:AE:42:D9:36:06:0A
Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Certificate serial: 019F90916B8F2E556BB2CF6EDF02D7C63AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
Manifest number: 0917
Signing time: Thu 23 Jul 2026 20:01:16 +0000
Manifest this update: Thu 23 Jul 2026 20:01:16 +0000
Manifest next update: Fri 24 Jul 2026 20:01:16 +0000
Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: 2NnlCWlP/mMIp01n2SNbXUlZ54Yvj25aZRtFpMk8CYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:6b:8f:2e:55:6b:b2:cf:6e:df:02:d7:c6:3a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Validity
Not Before: Jul 23 20:01:16 2026 GMT
Not After : Jul 24 20:01:16 2026 GMT
Subject: CN=82ec9e7a7ceb1bccdc63f17c5fbbae42d936060a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:2b:17:1e:51:7e:57:97:6c:51:a0:11:c7:
e6:2c:a6:1b:30:9a:17:0e:86:66:12:df:b0:a3:d9:
93:52:70:6d:1e:4f:20:b7:2a:48:71:51:be:eb:48:
39:8c:0a:75:a1:5c:4a:1b:38:7b:dc:ee:ad:cc:47:
16:1e:81:a0:68:48:8c:60:4c:ab:79:75:e5:9f:2a:
b1:e3:3f:5a:08:de:eb:ac:db:33:91:86:c1:df:e0:
1a:d5:e3:0e:d9:56:51:ca:71:d4:9e:fd:c0:89:77:
88:a2:2f:04:94:a2:af:c0:5c:87:4b:cb:6d:3e:eb:
4c:c8:f4:09:ad:cc:9b:eb:43:47:dd:d6:48:6b:e2:
17:29:75:d7:79:88:47:22:92:12:7d:d5:55:8c:a1:
3d:33:ff:9b:06:c2:ae:15:8f:1c:98:72:13:02:be:
83:19:fa:35:70:fe:7f:90:ce:34:4d:dc:5c:80:b7:
a8:5f:a3:18:94:ca:61:a3:e0:c9:a2:74:a6:a1:c1:
85:60:c7:b5:b1:e6:fa:fe:b8:09:3a:30:7a:e7:8e:
f5:b9:75:f7:3d:03:9f:88:ed:82:b7:38:a7:c9:bc:
63:76:4e:8a:12:1b:ad:b0:f9:07:9b:9d:34:2c:a5:
bb:62:cc:18:18:77:28:51:e4:d9:f4:7b:64:82:a2:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EC:9E:7A:7C:EB:1B:CC:DC:63:F1:7C:5F:BB:AE:42:D9:36:06:0A
X509v3 Authority Key Identifier:
keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f6:9e:d2:89:4e:f4:82:16:ca:69:f5:12:9e:32:fc:43:a3:
ee:03:b6:64:40:3d:a7:af:1e:b3:2b:f4:36:99:b9:90:01:a0:
07:53:36:44:da:a1:ef:c5:87:5f:a8:b9:72:eb:e9:3c:84:6b:
ff:bf:68:d8:d2:dd:fc:9b:41:d3:77:b5:fd:ef:12:5f:b0:cd:
43:a1:40:d4:40:df:6d:3b:6c:b5:ea:4b:03:8f:0e:eb:88:1d:
27:ae:56:a2:d7:e7:35:66:8c:71:51:f3:14:a7:a5:64:ff:3d:
be:f4:65:23:c0:ee:0f:30:a8:64:50:e9:69:bd:84:82:10:66:
03:52:0c:ec:15:31:92:9b:bf:d5:8b:b8:f2:8f:be:44:a6:36:
23:0e:e4:b1:4a:1b:07:cb:1d:c5:90:4d:4b:67:04:eb:81:99:
b7:38:ef:f0:db:85:63:5d:cc:43:b5:8c:75:6d:a4:3a:f7:33:
9a:1e:1d:58:c8:22:fc:10:7d:f3:4c:90:dd:52:3c:48:b9:8b:
e1:04:a2:c5:4d:a3:f9:e0:5f:91:0f:e5:93:39:c2:a8:e5:58:
3b:b9:d1:2e:5a:ef:a5:53:2b:ea:24:f8:4a:d5:30:51:a5:7e:
dd:7a:e9:1d:08:23:de:c6:45:98:2a:7d:4b:34:88:10:57:f0:
9d:83:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:08:26 2026 by rpki-client