Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
File: 3Rc4MRWBIorSh1OUS-i88hafq6k.mft (raw, json)
Hash identifier: RB3dTxPVugefZIuIb9FRVKXzzE6oeoAjlB+M2rIE0Gk=
Subject key identifier: B9:91:3C:78:5D:F3:8C:55:53:08:79:20:42:B4:EB:E0:38:20:A8:A0
Authority key identifier: DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
Certificate issuer: /CN=dd1738311581228ad28753944be8bcf2169faba9
Certificate serial: 019FA82B8FC62E90E58519843D036A8D4508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
Manifest number: 1173
Signing time: Tue 28 Jul 2026 10:00:54 +0000
Manifest this update: Tue 28 Jul 2026 10:00:54 +0000
Manifest next update: Wed 29 Jul 2026 10:00:54 +0000
Files and hashes: 1: 3Rc4MRWBIorSh1OUS-i88hafq6k.crl (hash: g16N0fSR0NssvJWWk37rm2NRwK8De1jAibLg24g5LqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:8f:c6:2e:90:e5:85:19:84:3d:03:6a:8d:45:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1738311581228ad28753944be8bcf2169faba9
Validity
Not Before: Jul 28 10:00:54 2026 GMT
Not After : Jul 29 10:00:54 2026 GMT
Subject: CN=b9913c785df38c555308792042b4ebe03820a8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6b:d7:e8:81:de:d2:6d:58:04:e2:b9:b9:6e:
9f:da:ca:04:b4:1a:9c:91:e5:06:b1:8a:a4:98:e2:
78:11:bd:d7:b5:61:e0:2c:8b:81:78:60:40:3b:e3:
d1:c8:53:c0:85:14:2e:f2:2c:f6:1f:08:e9:91:4a:
12:f9:9b:d4:66:9c:49:21:80:7f:9f:b2:4f:10:0e:
b7:e8:8b:7b:fc:88:72:f4:63:65:a6:4c:6a:1a:f3:
e9:80:8a:2f:3b:bb:fc:a7:c9:c4:8f:fb:f9:ef:20:
fb:de:ab:59:92:51:44:08:1a:3a:24:ec:34:b1:fe:
4a:09:ec:87:8d:1e:f7:59:28:f1:83:36:e4:d2:29:
ec:f4:69:ad:95:48:8f:65:e9:95:5a:3f:3a:ef:09:
e4:28:7e:28:1c:f7:1c:ab:fe:be:c2:dc:ec:a0:53:
38:44:4e:6d:9f:a7:41:09:57:ca:ad:25:52:f0:c8:
1f:f8:3a:e8:18:23:90:49:f3:1b:9c:6e:4a:c2:2b:
0f:39:f3:44:a4:db:8a:2b:3a:6c:01:f7:69:50:43:
ce:79:1a:cc:6e:b4:76:1b:02:b3:af:3f:50:43:96:
4a:99:73:37:27:f8:7e:d4:80:e2:3b:0f:7f:6c:f4:
f3:52:93:3c:22:b4:8a:5b:30:57:21:b1:65:5d:b1:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:91:3C:78:5D:F3:8C:55:53:08:79:20:42:B4:EB:E0:38:20:A8:A0
X509v3 Authority Key Identifier:
keyid:DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:6e:8c:92:0c:a8:b0:ef:9c:eb:43:68:70:ee:4a:8e:c4:a3:
73:47:14:89:a9:f9:b4:c4:64:22:9f:73:2d:83:01:6b:6c:3b:
76:a4:d8:56:f8:55:5b:b1:87:ba:2f:08:f6:bd:84:97:f6:b6:
66:43:bc:96:f4:17:0d:d5:77:48:52:75:00:42:a4:ee:85:d9:
4c:64:b8:a4:02:f4:5d:a5:f9:c7:e1:36:fb:14:75:84:ab:8b:
ca:53:4d:95:0f:90:cd:dd:a6:f4:09:d1:55:26:a2:a4:83:d0:
66:47:8d:7c:40:30:91:a7:56:12:b6:d8:07:35:c4:71:69:f5:
f8:bb:08:65:91:6b:14:41:3d:b3:be:09:2a:05:d1:10:71:85:
85:9e:84:62:68:5e:7b:ae:e8:5d:0b:da:54:0a:f2:0f:0e:2f:
74:c3:44:23:dd:00:4c:18:6a:24:17:f8:f6:bc:88:71:3b:29:
e5:6b:11:17:40:91:c4:72:a1:42:b4:c0:30:32:5a:db:24:2f:
b6:d9:0e:3f:5d:b6:47:4c:5c:2e:b7:85:7f:0f:f8:4f:a4:b3:
0c:fb:8c:c6:cb:2a:b5:81:54:0e:b0:57:23:17:c5:82:6f:2d:
a7:80:9f:86:f0:72:67:3a:c5:0a:e6:8f:f0:4f:6b:d1:44:54:
cd:fc:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:31:50 2026 by rpki-client