Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: a73SUjvPPuRmsUoHx5pA46x0kQ6Lzb/3+qGOb5JUOYc=
Subject key identifier: 9C:F5:2B:7F:72:5A:E4:84:97:D6:A6:C6:1E:D6:A2:A5:FD:D9:B0:23
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 019FAC086D6E87EC2EB1291B7D2237612DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 1968
Signing time: Wed 29 Jul 2026 04:01:01 +0000
Manifest this update: Wed 29 Jul 2026 04:01:01 +0000
Manifest next update: Thu 30 Jul 2026 04:01:01 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: a3IFDRuPB/kip8dXBcMw64jv605nG7DwNeFuiA9Gtqo=)
2: O-gxnsHzDhdYKwTNHTFr-Ch9dJM.roa (hash: kVKhuC0dJOQWPqNSK7n1W9Bj9SrxDJpJnAeLYtUm8Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:6d:6e:87:ec:2e:b1:29:1b:7d:22:37:61:2d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Jul 29 04:01:01 2026 GMT
Not After : Jul 30 04:01:01 2026 GMT
Subject: CN=9cf52b7f725ae48497d6a6c61ed6a2a5fdd9b023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:13:b1:c2:b5:05:9a:b3:2e:29:41:d1:f5:
22:aa:17:c7:df:b1:0d:94:60:74:0f:a8:7c:ce:ef:
5a:b9:9a:3e:ed:7a:ed:41:cd:90:a8:f8:35:39:67:
4f:f0:da:48:5a:47:7d:8b:24:f2:8e:aa:fd:4e:11:
6e:56:5c:ba:2e:38:44:7b:18:4b:94:3f:3d:65:4b:
7c:0f:ea:f9:13:f0:03:c0:d5:83:d1:e5:b5:ed:89:
b2:b0:07:c2:fe:28:5a:52:d7:22:0a:0d:c3:05:f9:
f2:86:38:5e:22:cc:7d:d5:d1:7c:a4:b4:74:92:0a:
69:11:3e:94:44:d7:c0:7a:4d:0e:a1:29:91:87:8f:
09:18:69:75:00:b4:d9:c0:6b:e7:3e:f9:0b:7b:a7:
a7:f4:d6:cd:59:91:e0:b6:a7:ad:39:28:df:14:a8:
91:36:d9:6f:74:30:8d:36:30:8c:f3:35:96:0a:ba:
d8:a9:66:ed:41:be:72:51:f2:97:02:97:e8:50:54:
bf:a7:ca:95:9e:e9:ec:0f:40:71:cf:3e:11:d8:50:
ca:11:5e:e6:d6:18:b5:3b:ab:aa:72:f1:cd:1d:fd:
f2:df:82:fb:95:34:53:9e:3d:1d:5c:72:82:1f:54:
40:52:0f:a9:10:a3:65:8e:3f:cc:54:f2:43:d6:29:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F5:2B:7F:72:5A:E4:84:97:D6:A6:C6:1E:D6:A2:A5:FD:D9:B0:23
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bd:d7:d5:97:3e:ae:83:41:20:01:3a:ab:4b:d0:e1:98:28:
47:d1:e1:30:75:a3:0e:f3:fa:89:f3:80:8d:11:72:c1:19:70:
64:35:9a:0d:e7:83:7a:53:ad:7c:56:25:f3:dd:20:05:7a:75:
a9:c3:3a:a8:26:65:b3:5d:cf:d5:bb:98:99:33:e8:cd:36:84:
a4:0d:ea:05:53:5d:6f:79:91:2a:01:9e:90:86:af:ac:cd:10:
a6:c4:5d:f1:57:05:4a:17:a4:a9:80:dc:54:69:54:68:f5:ce:
31:26:f8:13:81:64:82:74:b9:86:a5:f3:69:eb:dc:cb:33:ad:
60:c6:d9:ce:84:83:91:dc:fc:be:78:05:3a:3a:17:28:5c:09:
9b:14:d1:34:7a:88:03:9e:53:db:9d:3b:02:58:ec:b2:61:fd:
00:b6:ec:bf:bc:fd:0b:85:dc:dc:ce:23:0c:57:c8:1f:a4:e4:
f1:83:9d:fb:96:fe:58:f8:bf:4f:38:01:85:71:17:de:17:b7:
9b:0a:8b:5d:a5:0d:d8:70:52:6a:5e:37:ee:12:58:d2:6d:7e:
ac:c4:21:7a:c8:1c:4e:82:a5:8f:8f:d0:11:35:64:4e:fd:f5:
5f:97:fa:07:94:c6:82:f9:94:78:c7:d0:f2:22:7e:28:0f:48:
c7:d0:e6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:44:53 2026 by rpki-client