Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
File: 03h3GhBvaw0FSld4U1aSLK8C40M.mft (raw, json)
Hash identifier: W0XFdq/LPzJDDOnXsbppA+vJrHKdODjIPIb5xuJRN1E=
Subject key identifier: B2:53:F8:57:25:FB:81:04:91:C6:D3:29:D4:90:38:69:E9:A4:62:FB
Authority key identifier: D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
Certificate issuer: /CN=d378771a106f6b0d054a57785356922caf02e343
Certificate serial: 019F916C4C45054BE7A4A5AB5CE5510B994A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
Manifest number: 0D70
Signing time: Fri 24 Jul 2026 00:00:21 +0000
Manifest this update: Fri 24 Jul 2026 00:00:21 +0000
Manifest next update: Sat 25 Jul 2026 00:00:21 +0000
Files and hashes: 1: 03h3GhBvaw0FSld4U1aSLK8C40M.crl (hash: 6Sm7DctlJWhShzlq8GM1Igr14X86x7qs6dggW6HAWis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:4c:45:05:4b:e7:a4:a5:ab:5c:e5:51:0b:99:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d378771a106f6b0d054a57785356922caf02e343
Validity
Not Before: Jul 24 00:00:21 2026 GMT
Not After : Jul 25 00:00:21 2026 GMT
Subject: CN=b253f85725fb810491c6d329d4903869e9a462fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:f4:ec:9e:37:8c:93:a1:4a:0f:64:3f:94:
cf:c6:23:9f:7b:26:02:83:84:36:37:f1:12:8a:6a:
16:42:74:a3:70:c9:58:68:97:9c:a7:84:dd:f7:57:
bb:5a:00:e3:e0:13:37:c6:d1:4a:4c:11:6c:1a:20:
e1:a4:a5:6a:14:ac:4f:30:3a:3b:1a:e5:3c:6e:e1:
ad:e1:cc:0b:3f:41:d4:5f:b8:7e:a7:37:7a:df:08:
09:c5:b8:cb:3b:18:d5:b8:6c:28:48:f5:33:b0:74:
58:ed:a9:1f:0d:0c:71:65:ab:3b:12:22:ce:b8:ee:
a1:3f:54:fe:28:7d:be:c7:b5:07:35:14:af:5a:99:
8e:f1:45:82:99:19:96:62:c7:ff:2b:7e:c8:3e:f7:
a0:bb:59:49:80:c2:4a:d6:6a:89:0a:72:10:86:a0:
98:d9:06:c1:e3:a9:b9:ab:0d:5d:c6:43:00:ab:d1:
b7:16:bd:56:ba:6f:af:95:ae:d4:aa:55:c4:45:0d:
b0:9a:35:8c:3b:96:44:cc:91:8a:ca:b7:30:af:83:
af:2f:9f:a0:3b:d5:ad:fe:7a:86:f7:fd:d1:35:c4:
ee:2e:b0:76:d9:3b:42:b5:49:b0:ee:7a:a6:4e:eb:
d1:68:08:37:f1:a2:72:41:60:26:3e:1a:c8:34:3d:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:53:F8:57:25:FB:81:04:91:C6:D3:29:D4:90:38:69:E9:A4:62:FB
X509v3 Authority Key Identifier:
keyid:D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d5:e9:fd:1e:7e:fa:c1:35:9a:fe:76:83:2b:38:0c:5b:03:
aa:48:a4:e6:70:2a:d2:02:fa:cb:45:af:63:87:e4:f1:63:95:
f8:ee:7b:27:87:48:0b:f6:1d:44:65:2d:0a:c3:47:3d:b5:d9:
d3:40:ba:e2:c4:a7:be:ac:2d:c0:04:d0:fd:e1:7e:dd:4b:d0:
83:29:76:3c:79:41:f9:16:2d:e3:3e:1f:b8:85:e5:45:f0:7f:
dc:76:88:06:00:99:27:a8:a3:e5:c6:7c:89:da:10:fa:23:dc:
bc:56:ee:88:e5:cb:30:ea:d8:67:64:7c:d3:1f:a4:7e:06:42:
00:ac:6a:3c:da:f7:3b:9d:0b:25:44:cf:ad:ee:1a:04:7e:38:
67:74:2e:0e:0f:5a:bc:b6:c2:03:9b:e1:04:df:d5:54:e3:d0:
bb:73:7a:63:03:0f:0b:a3:a7:dc:61:f3:d3:a6:a2:82:84:8d:
53:5a:c3:3d:66:bf:a6:f7:0d:b6:43:8d:82:02:39:86:69:96:
76:65:dd:8a:55:8e:30:de:db:79:fc:78:3c:3d:95:d2:8d:6c:
db:bf:fd:1f:e7:4e:a6:4e:7f:d1:b6:b5:0f:40:5f:70:5b:26:
fc:36:a5:b3:68:88:7a:17:a4:87:08:b0:47:2e:e5:49:b8:69:
02:4f:78:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:48 2026 by rpki-client