Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: Ke+3VZ/zstKzZGVTB6RuVpOHssf7xY243w9YEnYGqI0=
Subject key identifier: 41:D4:AD:FF:FA:64:6B:90:58:DD:44:0D:8A:A8:05:FC:BB:A8:C9:A0
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019FAA50611E9CDF4803264EA21D7E05A763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 19E0
Signing time: Tue 28 Jul 2026 20:00:22 +0000
Manifest this update: Tue 28 Jul 2026 20:00:22 +0000
Manifest next update: Wed 29 Jul 2026 20:00:22 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: dJzXNkw8fJTyghIE7wE5HNxk6e1HBC9aAbjya7rNqv8=)
2: W5GHuBmScEfpIPAhuqgylrz1a6Q.roa (hash: iVf+MqYMn6D3or0TDUJHTOHK/dGQL5UOldNHGxN0jow=)
3: tH4NdKGms5TfcW6T3wq-xPP5lao.roa (hash: RAFP/ByUPYbvzL7CQ6hq0JZ4+gFCb5J71aCNcV4HRvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:61:1e:9c:df:48:03:26:4e:a2:1d:7e:05:a7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Jul 28 20:00:22 2026 GMT
Not After : Jul 29 20:00:22 2026 GMT
Subject: CN=41d4adfffa646b9058dd440d8aa805fcbba8c9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:69:26:5c:2f:32:38:61:4f:73:75:7d:07:
ef:f4:66:26:0f:f2:54:a4:ae:7b:ff:88:0d:72:71:
61:48:25:36:8c:c4:1a:7b:e3:75:ec:4c:05:e2:cb:
82:a2:06:c0:00:88:da:32:03:66:d3:0f:83:82:73:
89:e5:24:9d:f6:f5:be:2a:28:2d:26:e3:01:e6:d4:
64:40:d1:48:6c:6f:17:28:70:be:98:16:65:fb:68:
09:2f:d0:ad:74:1c:84:2a:5d:43:4f:ff:08:1a:a6:
22:29:04:f5:6c:d6:f8:ad:cf:38:84:f9:48:e2:c4:
4a:5a:db:ff:6f:7d:8e:84:07:2b:19:e4:a7:83:5a:
82:21:7c:3c:c9:be:7d:ea:b1:55:f1:5a:e1:bb:00:
89:53:f3:c7:1c:d9:e3:ac:25:b4:84:8b:91:70:e5:
c1:61:93:19:e8:09:90:88:37:22:5c:29:04:50:63:
f3:91:77:c9:3f:4c:78:b0:7a:ad:48:35:72:b6:b9:
e7:ee:1a:e2:7f:d1:f3:d2:81:ed:5f:37:6f:d0:9a:
12:59:4b:6f:68:c7:2b:38:fa:9d:aa:1b:9f:9e:4c:
8a:a2:8f:91:45:05:4a:f4:71:ed:6d:ea:a0:80:85:
c9:74:af:e7:42:09:41:c4:98:44:7a:0c:33:10:ef:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D4:AD:FF:FA:64:6B:90:58:DD:44:0D:8A:A8:05:FC:BB:A8:C9:A0
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:41:59:49:30:b8:fe:c6:3f:fd:14:18:f5:ab:24:c5:00:9a:
08:05:2b:54:d8:5e:bc:85:8e:f7:1a:b5:e3:6a:e2:68:1a:d8:
3b:58:8c:b2:39:c6:30:78:12:e1:13:22:5a:1b:38:9f:70:f6:
b5:c1:f7:b0:87:85:a4:db:5b:53:3b:b4:36:9d:7d:a8:83:ca:
1e:9c:29:f7:86:30:6d:5b:a8:ad:7c:60:b5:75:3c:dc:01:16:
a6:a0:4b:91:78:94:d6:48:95:05:9b:cd:d2:6c:7c:51:c2:c6:
81:0f:da:dc:7b:f8:a6:32:3b:ef:7e:49:d2:a1:24:6f:dd:bd:
2c:5d:9b:3b:98:1e:d0:69:15:01:0e:4e:3a:7f:bc:72:bb:65:
e0:fc:eb:5c:34:17:17:1d:5c:03:1a:b7:bf:8b:5f:6f:b3:d0:
ff:78:7b:d7:2f:f9:28:11:a6:c9:b5:1f:10:53:1b:42:d8:00:
66:42:07:b8:0d:78:4c:56:c8:36:38:bc:de:f6:1f:06:be:28:
1a:40:ef:ea:90:dd:fc:e5:de:f4:01:b9:92:a0:c8:c7:af:60:
16:0c:64:fa:5d:7c:30:0a:ce:5e:38:ba:81:2e:c4:d6:dc:7b:
b1:c5:9e:7d:4f:cb:19:d0:2d:95:8c:6f:25:68:9b:46:3b:57:
9e:3b:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:26 2026 by rpki-client