Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: A09tMyFtwxG+mU9MFoIujx7Uahr/T+1FGYTVV22+nyg=
Subject key identifier: 7B:76:35:F4:F7:C4:83:68:69:B1:39:8A:30:14:85:39:88:44:6F:B8
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 019D9B50EA2A5B1D7E06666ED170D1BE0A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 07F9
Signing time: Fri 17 Apr 2026 12:01:04 +0000
Manifest this update: Fri 17 Apr 2026 12:01:04 +0000
Manifest next update: Sat 18 Apr 2026 12:01:04 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: KYfDGRtjMrZD9g6qdJTgbanSz10pmVEyFUVz4pw67M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:ea:2a:5b:1d:7e:06:66:6e:d1:70:d1:be:0a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Apr 17 12:01:04 2026 GMT
Not After : Apr 18 12:01:04 2026 GMT
Subject: CN=7b7635f4f7c4836869b1398a3014853988446fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:bf:a6:a0:a2:3d:c9:47:90:2b:02:bf:51:
c8:81:de:31:ee:2b:4a:64:03:d2:4b:38:61:3d:e4:
60:77:a0:7d:b3:35:d0:bf:a8:c7:29:33:58:7a:34:
e6:e0:5c:a3:51:ca:1e:79:27:ad:6e:a7:86:c6:c4:
77:33:26:83:8d:bb:1f:74:77:8f:45:bb:32:16:7f:
0f:42:99:a8:b8:ef:51:c5:3f:00:53:2b:3f:9a:7c:
b4:41:c4:8f:ac:78:f5:f7:4f:69:a2:44:9d:e3:b8:
64:11:d6:93:a8:de:bf:e2:f2:4a:b8:cd:f5:52:c9:
98:dd:c7:f9:8d:19:64:64:1c:14:c8:fc:11:1b:2d:
bb:51:8f:c8:97:e6:55:04:c1:5c:42:48:97:40:4a:
8b:0a:f6:30:ee:b0:cb:dc:3b:e9:29:7f:4e:ca:63:
66:27:d1:a0:99:a9:f0:ba:cb:5f:23:d4:72:9f:2f:
74:33:8a:09:c9:69:eb:aa:6f:c9:08:67:b2:56:c2:
4e:d8:77:b2:7f:05:b4:83:83:7e:bd:e5:dc:14:dc:
f5:23:5e:8e:22:39:a6:57:46:12:35:cd:73:20:46:
8f:40:8d:64:6b:80:a7:39:1d:9d:4e:95:1f:2d:f5:
68:44:17:03:32:c2:e0:b9:b3:fe:f9:aa:ae:6d:bb:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:76:35:F4:F7:C4:83:68:69:B1:39:8A:30:14:85:39:88:44:6F:B8
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e0:8d:b7:e0:ec:7a:06:12:c0:3e:42:7b:4e:56:40:c6:ae:
f5:6b:4f:c9:29:6f:37:a1:0f:9a:b0:fd:3c:56:18:84:a7:61:
ee:dc:5d:ff:53:11:d4:1d:39:47:f9:f6:8b:09:59:79:69:18:
7c:d5:c5:0d:ac:98:ae:f4:be:9e:83:5e:13:80:7d:6b:30:10:
80:7d:1a:0a:f9:26:66:9b:3f:57:ca:b4:e9:4f:bd:d2:4f:cd:
f5:92:29:38:60:c5:48:c4:5e:44:30:ad:bd:b0:3d:51:4f:b2:
98:1e:9c:34:40:83:af:54:be:fe:cf:e6:14:e8:9f:35:f1:0b:
62:7d:2c:46:67:6f:f2:b9:84:25:8d:f6:50:a8:38:71:19:3f:
66:9c:0f:12:e6:a0:ff:ff:b7:87:4a:33:47:4f:bf:19:c1:6f:
63:32:48:e7:8d:2c:1e:67:62:7d:da:f5:30:23:37:51:8f:30:
96:27:d9:07:69:f5:89:5a:8e:db:ba:23:9e:6c:14:e6:99:a2:
d9:e5:48:65:65:08:88:01:c0:8a:35:88:d8:e2:3b:23:c1:e3:
8e:45:fc:08:1d:3f:85:91:a1:e0:53:93:28:57:5a:97:f5:ee:
16:24:ee:ac:43:72:bf:e9:2f:2f:0b:c8:ce:9f:25:bd:4d:a1:
79:9c:96:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:34:11 2026 by rpki-client