Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/072bvUeZC8zDmqI0Q8sHOUBR9xE.mft
File: 072bvUeZC8zDmqI0Q8sHOUBR9xE.mft (raw, json)
Hash identifier: At9zNabAcZ1WAB5OwwVwRueEPOxpeg5Vx/w2DUVhDT0=
Subject key identifier: 38:41:CB:1D:23:5D:7D:0B:5D:9C:9E:D4:93:89:19:73:3A:3E:37:A7
Authority key identifier: D3:BD:9B:BD:47:99:0B:CC:C3:9A:A2:34:43:CB:07:39:40:51:F7:11
Certificate issuer: /CN=d3bd9bbd47990bccc39aa23443cb07394051f711
Certificate serial: 019F9059C2FF904319EA52CA09F7C415ED73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/072bvUeZC8zDmqI0Q8sHOUBR9xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/072bvUeZC8zDmqI0Q8sHOUBR9xE.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 19:00:29 +0000
Manifest this update: Thu 23 Jul 2026 19:00:29 +0000
Manifest next update: Fri 24 Jul 2026 19:00:29 +0000
Files and hashes: 1: 072bvUeZC8zDmqI0Q8sHOUBR9xE.crl (hash: C0eRmGUKQ1XyD+sqr1Uz4Uslw6FZku9Z0C7zewdp0hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/072bvUeZC8zDmqI0Q8sHOUBR9xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/072bvUeZC8zDmqI0Q8sHOUBR9xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/072bvUeZC8zDmqI0Q8sHOUBR9xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:c2:ff:90:43:19:ea:52:ca:09:f7:c4:15:ed:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3bd9bbd47990bccc39aa23443cb07394051f711
Validity
Not Before: Jul 23 19:00:29 2026 GMT
Not After : Jul 24 19:00:29 2026 GMT
Subject: CN=3841cb1d235d7d0b5d9c9ed4938919733a3e37a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:fe:bb:0d:f5:3a:73:db:fe:a3:98:54:12:
63:f9:7d:ed:87:1b:44:18:b4:f3:4c:e5:40:f5:2d:
88:41:59:c2:97:b2:31:49:5b:16:9b:3e:00:13:16:
c6:25:c9:50:3d:ca:1e:9d:06:f3:d9:08:33:54:1d:
4f:2a:a7:b1:58:88:2f:01:7e:f8:28:79:b7:9c:a0:
32:d3:31:9c:04:05:f8:22:ce:42:5e:b7:58:12:96:
a9:6b:b1:d5:07:79:51:04:98:1e:21:b8:24:ab:b4:
c9:15:0a:b0:e2:c4:c2:64:0d:f8:80:d5:de:fd:9e:
69:31:01:ef:6d:f2:6c:b9:4c:ce:f5:53:93:e0:f9:
ec:0f:c3:ed:3e:90:4e:29:a0:a1:e7:42:bb:be:06:
29:0b:02:66:44:eb:b3:e5:ad:6b:55:ca:40:cf:03:
2c:3a:69:bd:53:ba:2f:4a:3b:bd:14:57:a4:34:05:
4f:dc:a4:74:6f:1c:64:77:82:94:ad:e4:5f:b0:73:
da:cb:31:36:93:59:5a:34:9e:11:e0:61:63:38:63:
be:0c:55:16:e4:e2:f0:63:22:16:ff:29:68:79:f7:
31:39:6c:2e:9a:3f:4a:5b:9f:70:70:c9:85:a3:8b:
d6:ac:26:3b:29:13:75:f5:5e:00:b9:8c:2d:2e:16:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:41:CB:1D:23:5D:7D:0B:5D:9C:9E:D4:93:89:19:73:3A:3E:37:A7
X509v3 Authority Key Identifier:
keyid:D3:BD:9B:BD:47:99:0B:CC:C3:9A:A2:34:43:CB:07:39:40:51:F7:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/072bvUeZC8zDmqI0Q8sHOUBR9xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/072bvUeZC8zDmqI0Q8sHOUBR9xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/072bvUeZC8zDmqI0Q8sHOUBR9xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:76:6c:ec:40:2b:66:31:e7:16:89:da:d4:a3:87:7e:29:de:
ec:ad:83:2c:21:30:c5:7f:12:c9:bf:35:15:55:44:44:e1:68:
3e:9d:b4:e9:5c:1d:33:08:6e:0b:83:45:fb:0b:81:26:63:3e:
b0:2c:f5:74:92:54:ae:3e:f6:14:f6:a3:97:77:03:c2:52:bc:
ef:61:58:c0:bd:c3:da:34:f0:00:ef:c5:b5:1c:70:cc:1c:55:
a8:25:bf:3b:ff:8b:cd:a5:b0:c3:10:02:90:d8:0d:6f:07:7f:
eb:8b:47:71:a2:6e:f2:b7:e8:bc:4b:99:5e:66:39:13:02:dc:
30:c8:f3:05:95:ff:5d:05:72:52:4c:63:09:43:f2:fd:5f:76:
64:3f:55:22:22:33:20:94:9d:83:c8:80:d5:71:f2:4d:bf:24:
58:12:e8:e1:ea:86:04:71:30:22:c2:dc:f7:bf:7a:a2:d3:b6:
7a:ce:09:bf:1a:d6:95:3f:33:f0:a5:32:96:bd:84:70:81:52:
cb:15:16:46:ef:d6:9e:38:b0:87:d3:8f:b0:b6:f2:df:da:e2:
85:ce:b1:2b:21:44:0a:bc:d0:78:52:9d:5a:b8:28:2d:06:ba:
db:bb:9e:8c:8a:89:65:f1:78:bc:05:c1:02:72:69:92:0b:2c:
1f:67:ae:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:38 2026 by rpki-client