Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
File: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft (raw, json)
Hash identifier: P26YM8dsua/aZ52JUWKqD6jpNYljGBRF6x4OR+s5JLc=
Subject key identifier: A8:ED:0B:A2:70:A6:D3:60:A3:52:AB:2A:1D:AC:00:E6:A5:FA:E5:BF
Authority key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
Certificate issuer: /CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Certificate serial: 019F8FEBF28BD7F0AECE5CAA73E83FCE0C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
Manifest number: 12C7
Signing time: Thu 23 Jul 2026 17:00:32 +0000
Manifest this update: Thu 23 Jul 2026 17:00:32 +0000
Manifest next update: Fri 24 Jul 2026 17:00:32 +0000
Files and hashes: 1: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl (hash: Uam831ZzqusD0Ky6cxJncLOuTuu8C/X5QzxgTI7MVZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:f2:8b:d7:f0:ae:ce:5c:aa:73:e8:3f:ce:0c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Validity
Not Before: Jul 23 17:00:32 2026 GMT
Not After : Jul 24 17:00:32 2026 GMT
Subject: CN=a8ed0ba270a6d360a352ab2a1dac00e6a5fae5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:f1:e0:9c:5e:59:2c:3a:46:f1:72:66:3e:
2f:92:dd:84:3b:93:55:8b:da:36:f1:03:18:82:65:
61:16:c0:d3:81:29:78:5f:9d:09:34:7c:3a:0e:d9:
ad:36:bc:f8:95:84:2f:b8:7e:2d:a1:80:5d:59:ed:
3f:2b:0c:de:e0:ba:25:68:f4:1a:9a:ef:af:69:81:
4c:96:cc:13:d2:88:0d:15:c0:0c:4e:3b:b4:72:46:
93:29:8f:c8:ad:08:93:28:a8:9f:e0:bc:58:c1:33:
b3:2d:9c:b4:46:28:de:16:bf:37:bc:aa:e1:fe:31:
d6:46:73:ef:05:95:f5:29:75:7c:e2:dc:ea:8b:34:
5d:98:dc:2c:54:c8:e7:b1:c4:1a:8e:54:75:5f:af:
81:e8:6b:39:c7:ac:6d:c7:95:a4:57:18:91:e4:48:
c6:2a:3c:90:bc:3e:61:96:4e:38:0c:6e:ed:ea:38:
0b:68:96:c3:95:16:cd:ed:dd:e5:34:6c:23:5e:df:
b7:30:91:7c:72:0c:f4:16:c6:bf:4c:f5:c2:80:9f:
f7:35:40:30:a8:73:01:d4:0e:ad:78:7d:b3:63:c8:
a1:34:cc:f6:8d:de:fd:64:17:de:4f:bb:b9:a1:ef:
87:4c:ce:30:f4:ff:e6:b4:81:a3:52:8a:e4:24:06:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:ED:0B:A2:70:A6:D3:60:A3:52:AB:2A:1D:AC:00:E6:A5:FA:E5:BF
X509v3 Authority Key Identifier:
keyid:DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:4d:0c:5c:dd:78:ec:08:09:aa:6b:26:49:5d:e7:02:98:0e:
77:d9:09:fd:7a:2e:fc:f8:b4:5d:af:4c:af:a0:bf:1a:99:fa:
9e:0f:4f:58:0a:ca:ca:10:5d:ac:8a:f9:95:06:e4:52:f4:5f:
14:f8:20:ff:ef:25:b7:7f:2e:0a:0f:69:b1:e6:05:8e:cc:79:
9a:5f:c6:37:2d:35:fa:8f:0f:bf:c1:c0:21:36:d2:fe:ef:47:
4b:fa:17:84:cc:93:89:fa:ee:58:55:bf:94:c5:73:b8:c3:89:
2b:60:e1:3d:53:11:b8:dc:bf:52:fa:2c:97:28:be:56:6a:74:
a5:d8:24:58:98:dc:96:ce:79:2d:6b:ff:0c:bc:83:1c:08:c0:
52:29:73:9d:1b:a9:6d:c3:5e:f9:e0:94:35:ec:41:e6:72:5a:
08:d1:3d:38:ae:d3:ad:1e:02:d3:98:70:cc:71:02:97:19:d4:
48:f3:f7:d3:c1:5d:41:78:6e:cf:de:0f:3d:56:98:01:9a:62:
ba:74:04:17:b6:c3:89:c7:9e:b5:44:64:45:48:a3:bc:db:e8:
21:b4:13:ff:f6:a3:5a:76:c3:9c:a1:37:96:3b:f8:94:2a:f1:
5b:9f:99:57:15:86:2f:09:36:d3:73:db:71:20:38:db:cd:8a:
4d:47:a6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:58 2026 by rpki-client