Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
File: 3frtS0AyNuLKi-twkcug4GpUPQo.mft (raw, json)
Hash identifier: oPiqqK2XGPnueSNxfwRHl+dV73ARYAi97Rd/FgBeEDk=
Subject key identifier: 6C:D3:0C:6A:3B:CE:85:F9:4A:51:FA:F7:B3:58:39:75:F5:F7:EE:99
Authority key identifier: DD:FA:ED:4B:40:32:36:E2:CA:8B:EB:70:91:CB:A0:E0:6A:54:3D:0A
Certificate issuer: /CN=ddfaed4b403236e2ca8beb7091cba0e06a543d0a
Certificate serial: 019F90FF47293AB3CDDF14F4BAF1852A8CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
Manifest number: 0509
Signing time: Thu 23 Jul 2026 22:01:16 +0000
Manifest this update: Thu 23 Jul 2026 22:01:16 +0000
Manifest next update: Fri 24 Jul 2026 22:01:16 +0000
Files and hashes: 1: 3frtS0AyNuLKi-twkcug4GpUPQo.crl (hash: pA6A3+z2Ev0XaLUEqyVfZ7MhZAv9px1LpdaEueV3nwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:47:29:3a:b3:cd:df:14:f4:ba:f1:85:2a:8c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfaed4b403236e2ca8beb7091cba0e06a543d0a
Validity
Not Before: Jul 23 22:01:16 2026 GMT
Not After : Jul 24 22:01:16 2026 GMT
Subject: CN=6cd30c6a3bce85f94a51faf7b3583975f5f7ee99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:26:32:c5:e3:d3:36:7c:aa:5e:b9:65:31:
05:8c:00:fa:33:ed:93:88:c1:da:4e:4f:ae:aa:dc:
0d:0f:4b:e7:b7:76:2e:20:66:4b:06:c1:54:db:3c:
70:00:7f:ee:c9:01:44:6c:d8:f8:c1:f6:fd:89:a0:
3b:de:46:a2:9a:e3:2b:67:11:5b:4a:37:44:15:7d:
a9:42:bf:31:89:5e:1f:26:4e:82:d9:31:f3:39:94:
3d:c9:b6:23:91:78:44:a1:b9:e7:78:09:9c:47:20:
f6:e8:74:e0:c0:a9:b2:0f:dc:94:33:24:da:56:64:
53:04:a4:d9:5d:ca:41:5c:a6:62:05:82:44:c9:7f:
51:45:03:11:53:c0:43:f5:2d:fd:a3:94:33:51:ef:
c3:9d:cf:51:c5:47:a6:a3:9b:87:93:00:fe:16:de:
52:cd:57:38:6b:05:ae:03:f2:fc:da:78:3a:84:eb:
02:cb:62:6e:bd:24:20:e4:e2:f1:a5:ad:22:4e:e8:
79:a1:ba:32:a7:84:43:c7:38:21:83:2a:3f:c4:26:
c8:c1:c1:58:56:0b:0d:ee:17:5d:28:09:29:7c:98:
c8:ba:1f:82:40:8f:0f:18:89:68:ec:61:cc:68:29:
c8:eb:14:66:de:9f:7a:f6:9b:58:70:59:1d:93:a9:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D3:0C:6A:3B:CE:85:F9:4A:51:FA:F7:B3:58:39:75:F5:F7:EE:99
X509v3 Authority Key Identifier:
keyid:DD:FA:ED:4B:40:32:36:E2:CA:8B:EB:70:91:CB:A0:E0:6A:54:3D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ef:c5:81:6d:7b:82:93:62:b8:a6:04:8a:4e:57:20:b6:65:
c2:df:8f:67:8d:05:2b:2d:28:d6:52:f9:05:21:4a:77:bf:cf:
61:02:cd:78:42:db:0b:43:5a:af:81:e1:14:53:1b:c0:0e:cc:
d9:65:37:36:00:ce:ba:a2:34:a8:84:c6:d7:a1:10:ec:56:9f:
d9:b3:be:d4:38:87:a6:09:b9:98:e4:3c:2e:39:73:72:13:9c:
5f:aa:97:f5:08:30:e3:3f:c7:d0:78:48:94:e4:e7:36:eb:2d:
d4:8f:64:5e:e7:9f:60:c1:da:a9:02:80:e1:49:d4:43:bd:92:
06:33:61:89:56:b1:1b:61:2c:c3:f1:98:2c:28:c8:20:8b:fb:
00:8d:e1:5e:17:d7:68:ac:35:cc:9f:fa:56:55:3e:ff:00:2c:
0c:dc:ff:5d:e1:75:cb:32:50:82:0f:de:f1:35:b9:19:fd:c5:
c7:52:13:ec:99:2e:33:fc:30:97:1e:42:ea:dc:a0:6b:d7:0d:
53:c0:61:aa:2a:ce:fd:a9:ae:87:64:27:8d:52:2a:8d:db:fc:
8f:4b:e2:43:31:34:aa:56:b1:c4:c5:be:93:f1:db:38:46:26:
d8:45:97:be:85:eb:e7:f3:16:1c:64:ca:db:f7:99:f8:e3:12:
5a:5d:84:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:39 2026 by rpki-client