Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
File: 3APMhzX27sAjqfI6BLLpDVOpIVI.mft (raw, json)
Hash identifier: cty92G/k9HEGU6YoL/NYx+Q+j6XHzcMH9VFUNM0J2AM=
Subject key identifier: B9:1B:23:4B:5E:A5:1E:24:BF:AC:1C:53:7E:1A:E7:E8:9B:37:E3:8E
Authority key identifier: DC:03:CC:87:35:F6:EE:C0:23:A9:F2:3A:04:B2:E9:0D:53:A9:21:52
Certificate issuer: /CN=dc03cc8735f6eec023a9f23a04b2e90d53a92152
Certificate serial: 019FAA197F3F7F201C2B275D7095E9EFD74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
Manifest number: 0A64
Signing time: Tue 28 Jul 2026 19:00:25 +0000
Manifest this update: Tue 28 Jul 2026 19:00:25 +0000
Manifest next update: Wed 29 Jul 2026 19:00:25 +0000
Files and hashes: 1: 3APMhzX27sAjqfI6BLLpDVOpIVI.crl (hash: M0ybQTrp+1q6XCfBGvyIMgOmKxZ9g3lROmvY1LWbVlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:7f:3f:7f:20:1c:2b:27:5d:70:95:e9:ef:d7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03cc8735f6eec023a9f23a04b2e90d53a92152
Validity
Not Before: Jul 28 19:00:25 2026 GMT
Not After : Jul 29 19:00:25 2026 GMT
Subject: CN=b91b234b5ea51e24bfac1c537e1ae7e89b37e38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:f7:00:43:b5:e2:d3:a2:2d:45:ed:ac:e0:
71:ff:63:cc:cf:6f:39:e1:69:0a:f4:05:77:fe:2f:
a1:76:b1:4e:a5:de:32:36:dc:d3:1f:15:09:81:22:
ba:b3:ca:54:fb:87:da:27:4a:12:73:ad:2e:2b:a3:
78:d2:fd:8a:3a:09:1d:c8:c8:12:35:ed:f0:07:0b:
f4:ba:7c:df:aa:79:35:5b:97:e5:6f:f4:fa:8f:00:
59:32:d7:1b:6d:b6:76:44:ea:e4:3d:9c:61:1d:c0:
2f:6b:eb:5b:39:29:87:fd:1b:89:2d:53:88:2e:3b:
a3:86:31:6a:2c:f8:36:9d:36:f5:4c:f8:d5:d0:e9:
bf:ed:54:00:71:89:e8:bf:b0:b9:c5:ab:3b:e4:80:
9d:62:60:cd:72:fb:92:ed:9c:be:89:6b:dc:c4:72:
0c:46:1d:74:82:f0:e2:18:4c:10:a4:7c:f4:7b:aa:
bd:d2:96:68:52:a6:b4:d5:89:64:3e:c6:6e:5b:34:
e7:cd:1f:d3:d4:e5:0a:a2:b3:c5:c5:3b:84:b5:5b:
9f:22:d1:37:d5:94:33:c7:71:2a:9f:eb:55:35:8d:
09:57:bb:78:6a:fa:ee:96:a5:14:24:53:3a:3b:4d:
1e:47:5a:65:89:aa:2e:12:9c:71:8a:5c:98:ae:35:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:23:4B:5E:A5:1E:24:BF:AC:1C:53:7E:1A:E7:E8:9B:37:E3:8E
X509v3 Authority Key Identifier:
keyid:DC:03:CC:87:35:F6:EE:C0:23:A9:F2:3A:04:B2:E9:0D:53:A9:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a1:9c:ec:5b:2e:f4:da:62:fc:1b:f7:f4:07:ab:bf:69:37:
59:c2:b1:e2:a7:10:f2:3b:ca:56:0b:14:c5:3b:f7:1f:7a:95:
9c:d9:fc:9a:a5:3a:50:3b:9a:7e:71:c0:df:98:8e:e4:3c:4e:
b0:56:b1:dc:8e:df:8e:2f:80:7b:9f:c2:f4:4a:8f:ea:79:e0:
05:95:c6:7d:13:f1:ce:ff:12:6c:55:64:ae:ce:80:f8:1b:db:
36:d8:09:f2:2c:ef:d0:62:f4:af:46:85:84:64:43:5c:fc:6c:
e4:74:c1:cf:34:16:de:db:c4:b9:d4:80:03:92:fe:b4:79:55:
4a:29:f7:6f:3a:6f:0f:37:46:b2:3d:56:23:ec:2b:34:93:08:
9b:06:ca:58:31:57:d8:ae:0b:7d:3b:b3:b2:4c:69:19:9d:33:
2e:8e:4a:27:9b:06:ae:f4:35:14:db:87:8f:5b:c1:83:77:34:
4d:a4:3e:d9:57:53:4a:46:54:f3:c4:80:30:09:a6:ec:71:cc:
6a:82:57:09:7a:27:42:e2:09:19:81:65:a2:7f:e4:57:51:d2:
6f:3f:e7:01:bc:4e:3b:60:48:25:59:79:6a:4e:61:60:1e:d7:
82:e2:87:d8:84:d4:46:e2:ba:63:00:a9:1f:9d:29:c2:e8:29:
dd:5e:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:50 2026 by rpki-client