Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
File: 3VShBsGZ81M-VritvPpLGsPmkJ8.mft (raw, json)
Hash identifier: WpCKapSsm98xAmjflpQlnxYPYj3BzjZ8t87zjOx6pTE=
Subject key identifier: B9:0F:E4:2A:4B:44:EF:1F:F8:F0:AB:B6:11:A8:3D:7C:C6:73:71:97
Authority key identifier: DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F
Certificate issuer: /CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f
Certificate serial: 019FAA195DB00E97FBD446FCE2C1216A524F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
Manifest number: 0C9F
Signing time: Tue 28 Jul 2026 19:00:16 +0000
Manifest this update: Tue 28 Jul 2026 19:00:16 +0000
Manifest next update: Wed 29 Jul 2026 19:00:16 +0000
Files and hashes: 1: 3VShBsGZ81M-VritvPpLGsPmkJ8.crl (hash: NHoQtuTprJWgVq5HT2oOCs820rMVAoeFx3L7ZvSXkSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:5d:b0:0e:97:fb:d4:46:fc:e2:c1:21:6a:52:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f
Validity
Not Before: Jul 28 19:00:16 2026 GMT
Not After : Jul 29 19:00:16 2026 GMT
Subject: CN=b90fe42a4b44ef1ff8f0abb611a83d7cc6737197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:1a:1a:7a:db:b8:b3:39:9a:6d:07:88:b2:
11:c8:ac:c6:15:e2:f5:30:24:12:d1:5e:9e:62:62:
ec:ea:0b:a4:fb:6c:b1:ed:75:db:f1:fb:46:d2:73:
6a:06:25:cb:4c:1c:b4:af:2a:2e:99:0f:40:80:3c:
d3:92:d1:0e:22:80:91:4f:46:3a:85:71:0b:85:d7:
d6:30:5a:15:c2:e5:27:b7:a5:4b:e9:26:8a:71:ed:
21:41:f9:6b:28:3d:f6:61:95:f3:57:c3:90:cf:bd:
9a:4d:45:06:06:a5:73:87:cc:90:c6:ce:b6:8b:81:
8b:57:43:0a:8b:ee:1c:01:2a:fc:7e:3a:ac:5f:b6:
4d:8a:32:30:63:ad:b3:5a:35:a7:27:aa:3f:74:b8:
86:2b:7a:ff:21:01:4b:48:c0:4a:00:1d:fd:5a:e4:
f4:a1:63:ea:2f:fb:77:1c:85:fa:92:e0:6d:b0:53:
32:fb:d6:51:2a:ad:2a:22:92:b9:b7:6b:7e:6e:cd:
c5:f2:7e:11:79:ec:2c:f4:b0:08:18:9e:c9:2d:d8:
f1:54:a8:b7:fd:3b:16:29:ff:91:ce:b3:a7:01:f5:
29:67:22:da:8c:a6:70:22:df:ad:df:50:44:32:36:
c9:6a:79:21:9f:c9:c2:93:e0:ff:53:e3:26:aa:3c:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:E4:2A:4B:44:EF:1F:F8:F0:AB:B6:11:A8:3D:7C:C6:73:71:97
X509v3 Authority Key Identifier:
keyid:DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8e:6d:bf:44:fb:5a:15:7e:b5:e1:60:a7:ce:43:fd:62:c6:
53:76:d3:6d:3c:60:6e:ca:c7:d5:41:e3:c1:e6:6e:eb:b0:1a:
7e:cd:f3:2a:4d:d5:89:a2:b4:89:11:fe:7a:67:f7:03:8d:9b:
da:df:a3:ff:41:e4:b5:89:ad:f3:a7:60:42:99:08:34:26:46:
26:04:90:d4:c7:f1:ca:4f:a4:65:88:94:a2:8e:27:48:4e:62:
41:7a:95:0a:c1:58:20:93:94:d8:d7:64:cb:3c:66:45:45:cc:
df:c5:65:1f:99:1a:3c:a6:00:aa:65:2a:b7:a7:8d:f8:55:d2:
bb:f7:bb:c3:d0:95:22:9f:cd:51:1d:91:a0:74:b4:78:b1:db:
a1:c0:7e:83:58:93:7c:d6:d3:2f:11:c9:d2:0a:73:f7:d4:21:
07:24:af:c5:8c:fc:fe:02:9d:fa:70:2c:fc:18:df:46:ab:1a:
b4:cd:c7:1a:d2:7e:e4:c8:63:24:99:a2:16:76:30:73:6b:9c:
c6:5a:e3:51:85:b6:7c:83:03:9b:a0:c3:de:2f:db:53:c7:61:
cf:25:df:88:c6:4f:14:9f:8b:8b:72:f3:a6:3d:38:ce:e2:4a:
41:99:ab:a1:03:ff:f7:36:e3:41:e1:f0:fa:80:4a:95:66:a2:
fb:2d:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:21:38 2026 by rpki-client