Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
File: 3f20crHtWewvNw8g-rSHlDnFMY8.mft (raw, json)
Hash identifier: 2tJ5t+vp0iPrSxjxpNhd3eQbIvv7zgb/wSj82zCPfoc=
Subject key identifier: 00:26:8B:74:42:B5:DA:0A:84:63:45:9B:58:63:02:88:16:0E:18:D4
Authority key identifier: DD:FD:B4:72:B1:ED:59:EC:2F:37:0F:20:FA:B4:87:94:39:C5:31:8F
Certificate issuer: /CN=ddfdb472b1ed59ec2f370f20fab4879439c5318f
Certificate serial: 019F90FEB58636729F5B042EDF1F8C7471DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
Manifest number: 01DE
Signing time: Thu 23 Jul 2026 22:00:39 +0000
Manifest this update: Thu 23 Jul 2026 22:00:39 +0000
Manifest next update: Fri 24 Jul 2026 22:00:39 +0000
Files and hashes: 1: 3f20crHtWewvNw8g-rSHlDnFMY8.crl (hash: WfSUJ36BXOhKXzXYJReBj+kX/CaC1b8ItcOgmmoQeJI=)
2: ZMQkud9K3mvXdpjh-yoqav-Fm2A.roa (hash: rezLl6nocyRRaT4FpZnJ5CHwHhiv5ot72qwHgOZEFQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:b5:86:36:72:9f:5b:04:2e:df:1f:8c:74:71:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfdb472b1ed59ec2f370f20fab4879439c5318f
Validity
Not Before: Jul 23 22:00:39 2026 GMT
Not After : Jul 24 22:00:39 2026 GMT
Subject: CN=00268b7442b5da0a8463459b58630288160e18d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:f8:cc:77:e0:ad:6a:64:1c:b6:c6:38:06:
32:26:03:ca:4a:63:c7:8b:63:44:d9:aa:32:74:cf:
6f:e6:1c:6f:18:d8:c8:d7:44:76:bd:15:de:65:bb:
b4:bd:f1:ed:d3:31:e9:22:0b:16:c1:75:e8:9d:b1:
17:4a:be:8a:28:02:4d:c2:a2:da:91:f0:4d:a3:c7:
58:de:8a:47:43:d9:14:2f:38:4a:77:6a:35:9f:fe:
ce:99:97:97:c6:24:50:5e:7c:34:bb:95:82:62:4e:
80:8a:ef:c2:5f:ad:80:48:84:95:da:97:ef:da:cb:
ba:eb:0b:33:42:24:50:c6:b1:ed:a8:3f:c9:b6:35:
c8:d7:d8:a9:cc:ee:41:6e:5c:fb:15:2c:a8:cb:1b:
3c:d3:27:73:64:9d:3c:ec:32:ae:13:39:a7:b0:e3:
2c:9c:4f:d1:b5:08:40:f2:1a:a2:4a:4f:6a:08:a5:
fe:2d:ef:cb:4e:12:41:c2:2a:45:ec:00:ad:fc:63:
45:cc:ed:59:51:27:47:e6:cb:67:44:f0:65:ff:17:
b2:67:c6:a8:55:54:e8:2c:e0:1d:5c:50:9c:c1:63:
2b:21:a7:a3:59:b7:fd:79:3b:98:84:e0:d5:15:d2:
99:97:d1:0a:94:6a:d2:28:04:1c:f5:c5:f6:a7:a0:
f1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:26:8B:74:42:B5:DA:0A:84:63:45:9B:58:63:02:88:16:0E:18:D4
X509v3 Authority Key Identifier:
keyid:DD:FD:B4:72:B1:ED:59:EC:2F:37:0F:20:FA:B4:87:94:39:C5:31:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:56:23:5f:19:eb:16:90:75:7f:28:cd:46:32:b5:62:e5:55:
af:89:9d:aa:a2:66:65:43:85:9e:60:40:b8:9c:b8:70:35:bb:
89:fa:be:50:bb:78:64:a2:22:3e:81:50:c3:4c:85:cc:96:70:
c0:07:e2:50:26:c5:3d:1b:e6:41:7a:2b:c7:9d:0e:93:f4:53:
86:10:db:0e:c8:60:83:bb:7d:0b:87:e4:41:75:4d:b1:45:b6:
58:5a:52:f5:bc:d5:08:7f:0f:f4:d5:85:6e:2a:e8:52:87:c4:
32:43:c8:70:3c:9a:ed:63:45:4a:ac:dd:b8:30:23:dd:0a:da:
0a:9b:88:1d:87:44:9e:f7:6b:85:71:63:2a:ab:64:6a:02:08:
09:97:b8:47:75:7e:23:c8:21:2a:61:26:40:7c:30:53:e1:de:
17:09:06:83:78:df:59:ce:df:fc:f1:af:98:47:c3:ee:5d:d8:
72:2b:56:58:16:7b:bd:e1:23:a5:43:b1:23:5b:ea:16:54:07:
04:bb:df:b1:18:19:75:35:3c:16:f5:2f:1f:d5:1d:56:d0:8e:
ff:23:06:41:e4:1a:90:3b:9f:7c:52:0e:9f:63:93:31:55:7d:
7b:15:f5:99:c6:74:29:d9:32:53:1a:88:de:c3:c3:94:47:29:
17:a3:af:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:41 2026 by rpki-client