Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json)
Hash identifier: 6PTVOffDn9GcWZy9yuqnmGpDdDfAooTkQeTQVpmZqSU=
Subject key identifier: 16:F2:C7:6A:A7:5E:51:B3:6A:55:CB:BB:53:72:23:C7:79:55:01:67
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 019F92488820ECED9169BB77F1CB0DB44A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
Manifest number: 15C1
Signing time: Fri 24 Jul 2026 04:00:54 +0000
Manifest this update: Fri 24 Jul 2026 04:00:54 +0000
Manifest next update: Sat 25 Jul 2026 04:00:54 +0000
Files and hashes: 1: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: ipYyFRWQhZeLWBFPMLzWszSi7coEyQ9yDsT0CADJAuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:88:20:ec:ed:91:69:bb:77:f1:cb:0d:b4:4a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jul 24 04:00:54 2026 GMT
Not After : Jul 25 04:00:54 2026 GMT
Subject: CN=16f2c76aa75e51b36a55cbbb537223c779550167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8a:c0:72:2b:e1:e7:fd:e5:68:13:90:c5:a4:
d6:44:eb:4a:d1:2c:b6:18:7c:ec:8d:f7:6d:c5:4f:
37:34:63:a8:be:b5:a7:07:af:c4:f1:49:8e:45:ec:
4b:4a:2f:d0:f9:ce:61:32:d8:24:51:f3:fd:22:fb:
d3:7c:e4:86:9c:86:bd:f8:9b:bb:e3:8f:de:08:65:
0b:ec:2b:7a:95:eb:70:80:54:7a:e4:6d:81:1b:cc:
05:f6:5d:32:1a:c6:87:33:f5:2b:05:d5:e0:6c:c9:
a5:84:29:cf:38:96:e0:a6:18:9d:e6:53:23:68:ec:
d8:4d:d2:35:75:a1:f7:b3:69:05:b9:db:9d:bb:e3:
cf:82:37:cf:37:5c:d1:36:b7:29:84:8f:ec:f3:24:
0a:3d:0e:57:3f:b2:83:74:91:1c:bf:b5:aa:79:41:
10:36:75:d1:31:43:8a:25:57:a0:85:de:bc:76:c2:
36:cf:1f:8a:07:9f:80:11:b3:39:f2:3d:51:03:9f:
2f:7f:5a:9a:54:3d:d8:07:15:c3:f2:fb:85:fa:26:
b1:69:a4:41:3f:f2:48:a7:04:04:31:b7:9c:31:3a:
17:a3:8f:b8:81:93:2a:a2:84:2e:3b:ac:43:c7:5a:
2b:d4:b1:0a:2b:05:e4:8d:ce:7a:8a:93:f8:f5:08:
a6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F2:C7:6A:A7:5E:51:B3:6A:55:CB:BB:53:72:23:C7:79:55:01:67
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:85:cf:59:a1:b9:d1:cd:20:d4:69:c1:54:b9:7e:40:86:d8:
f7:20:b8:35:af:e7:99:44:75:25:1a:a5:74:f7:b8:48:58:aa:
59:b6:6d:e6:34:89:87:e5:60:98:84:24:44:ee:e0:c5:b3:77:
31:96:1e:0a:77:0b:40:49:45:be:dc:a9:2f:70:55:89:0f:23:
7d:74:16:de:10:6b:cc:ee:f9:68:a4:13:c7:c3:ff:2a:51:f1:
1c:44:ba:c6:e0:f4:e2:a7:f9:f8:4e:ed:21:09:d0:9a:b1:21:
94:97:ca:30:05:66:7a:95:18:b0:39:a7:14:5b:ce:7b:18:31:
77:be:47:3f:89:b8:e9:14:a8:8c:9d:a4:0a:83:c0:b4:d9:e1:
08:69:f1:75:e0:66:d5:be:a7:2f:4b:86:fc:b3:fc:25:0c:49:
ff:66:73:01:91:99:e5:69:b4:16:76:79:aa:40:63:89:cd:43:
30:58:25:83:c0:bf:ec:a8:f5:71:bd:a5:3b:3d:ee:0d:2a:00:
ab:18:2c:a5:b3:18:a1:27:d0:96:55:60:23:91:bf:94:2c:ea:
16:b9:d4:71:e3:04:17:9d:bb:4b:a5:06:8d:26:21:43:ea:1b:
f8:5a:d9:82:90:6c:cd:a7:9b:99:be:77:7c:fc:35:91:bb:ac:
28:9b:5f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:35 2026 by rpki-client