Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: FlkaH9ctSU9Cy1Y+NCgUq6/kDTaJ7mPIloz0d3n95L4=
Subject key identifier: 7D:83:1E:AA:2C:99:0E:E4:C7:C5:6C:08:A3:B4:15:B5:B4:04:32:FC
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 019EBEECBFFA0D720A1A9E2AECF1E3D4FB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 0890
Signing time: Sat 13 Jun 2026 03:00:47 +0000
Manifest this update: Sat 13 Jun 2026 03:00:47 +0000
Manifest next update: Sun 14 Jun 2026 03:00:47 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: EJz37PzJYlG1aryVo7LV6Br6yjHN8AUxb0VuCMxAnU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:bf:fa:0d:72:0a:1a:9e:2a:ec:f1:e3:d4:fb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Jun 13 03:00:47 2026 GMT
Not After : Jun 14 03:00:47 2026 GMT
Subject: CN=7d831eaa2c990ee4c7c56c08a3b415b5b40432fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:18:5a:eb:bf:8a:cb:a2:8a:35:f5:bc:ad:
36:87:87:23:4d:e0:7c:b5:ce:ff:18:8a:e0:3b:ba:
1b:4c:69:25:b0:6f:14:3d:93:d3:d5:05:df:96:81:
2c:7b:00:30:31:ac:96:0e:ad:96:cc:ca:7c:47:48:
b5:d3:4b:86:30:c2:83:6a:e1:26:80:dc:4a:d7:7e:
42:da:13:38:d4:be:c2:2a:a4:1d:5e:a5:20:90:77:
4b:b7:23:a4:cc:b4:2d:78:bc:d3:80:a7:a8:9d:fa:
18:0f:9f:68:64:8c:4c:59:6c:bf:c3:64:9f:0c:0c:
04:a4:0f:60:89:8f:63:e8:18:8d:04:2e:da:00:2d:
3f:f9:1b:dd:16:00:5c:05:f4:22:5c:df:d0:ef:5e:
9b:f0:db:ce:23:3d:76:5a:a8:03:9b:b6:d3:3b:5d:
a1:39:8b:68:e9:f3:72:dc:4d:8f:4f:c9:77:0c:d0:
59:74:e8:90:48:0a:f5:0f:df:e0:46:94:6a:d5:e5:
53:92:a4:b9:31:63:c8:9b:07:cb:8a:a6:14:9b:e6:
5d:83:42:1d:64:4a:78:9b:04:30:60:da:f2:42:11:
69:b9:46:fb:d2:52:cd:b5:b7:b6:eb:0d:af:a0:07:
5c:5b:32:3a:b6:ea:cc:2a:13:0a:c8:ab:2d:c3:37:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:83:1E:AA:2C:99:0E:E4:C7:C5:6C:08:A3:B4:15:B5:B4:04:32:FC
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1e:7e:ec:c9:19:c2:4a:10:8d:89:af:fb:63:76:e8:f5:27:
55:f7:6d:80:c4:a2:78:44:0c:10:b0:d0:ea:ff:d3:89:92:47:
9f:14:68:af:d7:1a:1e:d5:cf:1b:d2:74:27:9f:36:1c:8a:dc:
f5:a0:4c:c0:6a:08:67:1a:b5:70:db:b2:f4:c5:76:49:c7:d2:
e1:a8:19:41:1e:ea:d4:7d:c4:d9:9f:e9:7b:06:5e:04:3d:1c:
a1:04:33:d7:40:c1:5f:2c:43:c0:ef:d8:8d:59:41:5b:4d:6d:
86:49:f0:1b:14:b4:cd:cd:21:75:e5:3e:b0:fd:a9:3c:d2:4a:
b3:4e:6f:ed:b0:89:58:50:d2:d0:c4:84:03:e1:cb:bf:e8:af:
4f:05:54:56:a5:90:91:ee:70:41:84:88:f3:2b:a5:4c:8e:f7:
bf:30:08:95:63:86:30:c2:07:e5:31:db:5a:ce:a7:73:9f:7f:
cf:ce:78:79:24:1c:08:22:b5:58:8c:3a:2d:60:21:4b:6f:20:
be:7b:0e:31:8c:2a:b3:5a:be:2e:c2:1b:c8:d6:1c:a4:51:26:
ea:88:54:de:f8:be:60:68:b2:ed:38:08:a0:de:a8:19:61:db:
5b:b2:27:b0:7f:9f:37:29:73:02:45:9f:75:55:e6:73:44:9c:
f1:70:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:58 2026 by rpki-client