Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
File: 3keU2fyrI-wF3d1QSKP8cgQAKio.mft (raw, json)
Hash identifier: FbfRZOKHyAjWdxcoTB2DgF9mysYacS4z6EpqkePHCHs=
Subject key identifier: 07:10:A2:3D:05:0E:E9:C3:8D:48:04:7C:8B:ED:2F:67:B3:64:22:11
Authority key identifier: DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
Certificate issuer: /CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Certificate serial: 019F90232A460FC85268DA2A2C6D38F22D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
Manifest number: 12F5
Signing time: Thu 23 Jul 2026 18:00:51 +0000
Manifest this update: Thu 23 Jul 2026 18:00:51 +0000
Manifest next update: Fri 24 Jul 2026 18:00:51 +0000
Files and hashes: 1: 3keU2fyrI-wF3d1QSKP8cgQAKio.crl (hash: J2qzV+JTfE6T8XI4uYYcK/fCQXbucPq+B4NayUDPop8=)
2: kZWW_ntfYvdgmDKHXouZXpr8UMU.roa (hash: pybDSm/TxiDymAX06iB+SSYkpRn7EWk4DKtBzvh17SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:2a:46:0f:c8:52:68:da:2a:2c:6d:38:f2:2d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Validity
Not Before: Jul 23 18:00:51 2026 GMT
Not After : Jul 24 18:00:51 2026 GMT
Subject: CN=0710a23d050ee9c38d48047c8bed2f67b3642211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2f:63:f3:cb:02:24:5b:8c:0a:12:da:1d:1e:
de:62:e4:12:be:8a:63:19:1d:86:cd:f0:8b:76:ae:
bf:ca:37:ee:52:fa:b0:2b:9b:46:c8:f6:10:33:1c:
51:e4:4b:69:ea:f3:64:af:ed:6b:dc:38:e9:b2:37:
0f:1f:be:bc:6d:b6:31:b3:04:5e:ee:4b:64:17:03:
ec:e4:9c:35:2c:11:aa:06:35:86:42:aa:4b:c4:28:
0c:e9:0a:30:df:ce:99:5f:45:f6:c7:2c:6e:53:27:
9e:f0:51:1e:f4:9e:2b:35:13:ae:ec:e1:f4:f1:80:
54:39:3f:73:3c:1a:63:da:86:55:32:8f:3c:4f:7e:
a9:40:d9:7b:0f:8b:d7:f2:55:6e:d1:80:76:b4:41:
99:6a:b6:0f:03:22:7d:d3:26:86:2d:0e:59:ea:d8:
fe:0d:c9:e2:27:60:35:86:dd:5c:8f:e6:68:99:77:
42:74:cd:ff:83:53:ac:69:30:15:8d:b3:34:ab:02:
39:2c:f9:24:7d:8b:5b:c2:86:98:66:a4:6a:72:6c:
f4:fd:c6:3f:4a:ce:dd:9f:16:b2:5d:24:cb:e1:57:
f8:cf:80:69:7b:8e:a4:0c:62:31:be:b1:19:38:33:
2e:1f:b8:a6:ea:1d:bc:dc:c1:10:f9:c3:3d:5c:0a:
5c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:10:A2:3D:05:0E:E9:C3:8D:48:04:7C:8B:ED:2F:67:B3:64:22:11
X509v3 Authority Key Identifier:
keyid:DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:bb:00:00:4f:8e:e6:92:ba:17:73:6a:11:35:fa:ad:81:38:
ec:80:85:4d:dd:d4:69:e2:41:8c:80:0a:c4:09:f8:ec:42:d2:
77:da:76:88:a8:c8:7a:b7:cc:5d:4d:7f:e8:39:b6:22:3c:7e:
a2:99:5e:89:d1:b6:a1:a3:62:3d:21:a6:5c:dd:c0:82:ae:74:
0c:82:8a:1d:fb:b6:40:43:87:6c:89:d7:f3:98:29:c7:37:fa:
ce:07:e0:31:01:43:ff:1a:36:5d:96:aa:0d:28:59:df:72:d0:
f3:d7:d6:12:f9:0e:7a:a6:e1:5e:86:21:34:e1:b6:ad:88:1a:
25:61:f2:71:04:ac:8a:01:ad:65:b1:46:48:cb:f8:c2:7a:45:
5d:bc:79:7f:96:22:3d:65:d2:04:7d:ab:68:96:44:15:e3:23:
64:f8:41:89:a6:54:68:08:e3:2b:a9:0e:52:e0:3d:e3:fe:00:
ea:07:c5:86:d0:32:a6:20:6e:34:87:43:4d:d7:4b:c3:ef:c6:
cb:2d:e9:df:4b:36:2d:92:4c:2d:a0:6c:6c:44:50:ae:b6:b5:
85:22:e6:a4:a4:ad:b4:66:8a:96:d3:c6:3d:0a:92:6e:ed:c2:
0c:da:3d:73:72:eb:6b:ac:5c:3b:14:54:43:f5:7d:c6:c6:ca:
bf:97:03:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:00 2026 by rpki-client