Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
File: 3dStS_QUF7o4OE1lvC0HwPaFCeE.mft (raw, json)
Hash identifier: jSYN+Crdr2vv5nzHqge3WMZQ1N6lFb9YnLi6mlwCQIM=
Subject key identifier: F7:5A:A1:FD:E9:58:71:D2:01:CD:ED:F5:FB:3B:B9:77:18:00:D2:A4
Authority key identifier: DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
Certificate issuer: /CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Certificate serial: 019F8F7E008C31198AB8DCC7B6B2B7EA7224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
Manifest number: 1956
Signing time: Thu 23 Jul 2026 15:00:27 +0000
Manifest this update: Thu 23 Jul 2026 15:00:27 +0000
Manifest next update: Fri 24 Jul 2026 15:00:27 +0000
Files and hashes: 1: 3dStS_QUF7o4OE1lvC0HwPaFCeE.crl (hash: K++WsKP7rD6Ki/wt0/m82G/QVWKLEyG3RacZ6xhmcGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:00:8c:31:19:8a:b8:dc:c7:b6:b2:b7:ea:72:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Validity
Not Before: Jul 23 15:00:27 2026 GMT
Not After : Jul 24 15:00:27 2026 GMT
Subject: CN=f75aa1fde95871d201cdedf5fb3bb9771800d2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:36:23:83:05:e2:49:99:83:c3:f8:aa:cd:
b9:1a:d9:3b:87:3a:35:8e:14:71:3f:e5:ad:73:ff:
13:f1:f7:ea:02:82:e5:b2:ac:0c:04:a0:a6:4c:5f:
4f:e2:be:18:cc:e2:8b:ad:c8:09:a4:69:dc:7a:3d:
cc:a7:9a:0c:78:37:fd:9c:62:f4:40:18:78:b0:7e:
e5:3d:05:c3:64:fe:8f:7a:4f:45:f6:b0:29:e1:0d:
47:66:3c:dd:8d:42:f3:b2:f7:78:d5:04:ea:1f:dc:
67:99:74:63:23:7d:3f:77:8d:ae:78:53:c6:1d:6d:
b6:93:f6:fc:39:52:6d:ef:c6:a6:43:b9:07:56:4d:
a4:b6:47:5a:f0:01:f8:e3:17:c1:65:2b:0d:58:bc:
5d:40:cb:67:80:f0:f0:ac:f9:de:70:81:60:64:05:
b5:06:fa:b7:51:bd:b8:bb:b9:ac:f6:00:ab:0c:00:
27:2a:32:69:6b:17:4f:ce:30:3b:1c:f3:d2:bf:8b:
a5:b0:c8:3c:10:80:d6:6e:dc:5f:78:93:7a:a6:0a:
ea:48:ae:26:65:41:21:16:01:59:9b:ee:e9:5c:4b:
6c:f9:a1:31:b7:40:0f:c2:18:44:f4:e3:55:c2:75:
42:3d:e9:c1:cd:f2:a2:4d:27:70:eb:28:6a:d5:5d:
a8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5A:A1:FD:E9:58:71:D2:01:CD:ED:F5:FB:3B:B9:77:18:00:D2:A4
X509v3 Authority Key Identifier:
keyid:DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6a:f5:88:77:3d:16:66:3b:62:06:81:c8:31:84:d7:89:af:
22:ad:08:69:68:de:4e:95:2e:3a:16:f2:bc:49:39:8c:c0:ad:
2e:b2:d6:bf:e4:2e:7b:e0:49:80:b4:4e:3b:91:41:80:f0:51:
1f:09:4d:8b:ea:93:ba:1b:eb:bc:d7:ab:bc:ee:36:f1:d5:ed:
b9:a2:ae:68:3e:62:44:07:7a:85:3d:a6:6c:3d:7d:df:bb:b3:
4c:80:1c:76:d0:4d:4b:79:6d:2b:29:2e:ab:24:59:83:c9:eb:
cd:e5:a8:3a:f3:d6:a6:3e:85:08:91:0c:b1:49:84:71:77:01:
93:36:6d:4d:db:f2:df:33:84:6c:bf:2f:b0:fd:95:56:65:13:
37:f6:ee:7a:e1:43:35:6f:ce:4a:23:e2:26:aa:3f:97:c1:86:
17:f9:14:a8:78:ab:c1:91:a0:e9:41:b3:48:d1:16:8e:60:1d:
7b:ba:7b:2c:d4:dd:7c:80:bf:1e:dd:15:91:34:a8:be:e2:74:
94:4c:94:89:9c:f3:15:8f:0e:60:79:99:97:b8:2a:03:c9:27:
6e:0d:38:ff:4c:84:12:70:0b:38:48:c8:e1:d7:ce:41:be:96:
91:23:3d:4e:d9:d3:4b:c4:be:e8:2e:15:fd:38:b4:eb:6b:5a:
42:55:56:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:41 2026 by rpki-client