Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: tkIoV79XZr2R73p2WwgZL44qUe6MmQacxhWRsBQjmdQ=
Subject key identifier: C9:F7:BC:75:C1:30:54:3E:BE:83:A6:07:4E:66:51:13:04:63:BA:2F
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 019FAA87AF5749969B83338F87EE598839C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 03F8
Signing time: Tue 28 Jul 2026 21:00:46 +0000
Manifest this update: Tue 28 Jul 2026 21:00:46 +0000
Manifest next update: Wed 29 Jul 2026 21:00:46 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: lUiarrdcS0+mdt3mDfIqrEs+qKFfmrAzsSU/9fsX4+4=)
2: UcfLZ7L91GVWjLGWEYmlJV2c10o.roa (hash: uVZ/PpG6ROCuILZTxmMA8qXeD47uyabcF2INsekoGNc=)
3: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (hash: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:af:57:49:96:9b:83:33:8f:87:ee:59:88:39:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Jul 28 21:00:46 2026 GMT
Not After : Jul 29 21:00:46 2026 GMT
Subject: CN=c9f7bc75c130543ebe83a6074e6651130463ba2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:0c:38:9f:ca:12:61:86:40:85:84:98:33:
9f:2a:07:28:eb:4f:f9:03:a1:ba:8e:40:67:e6:c6:
bc:32:91:b0:b2:86:d7:d3:85:da:35:8f:0e:93:98:
aa:15:a5:72:59:c8:7f:f1:37:18:a9:36:b4:1c:b0:
8f:64:55:a6:88:8c:72:48:82:85:97:26:5a:c8:63:
34:57:66:41:a3:bf:05:88:a1:11:87:b6:38:8d:99:
fe:47:b8:d6:6b:bd:93:ae:57:1e:c1:b7:19:d9:94:
71:c8:d3:07:bf:13:4f:bd:6b:64:58:47:8c:9e:2c:
d2:e2:fe:b6:46:7b:b1:42:2a:54:99:d4:d4:8f:35:
ff:e1:13:fa:13:29:85:73:61:c2:32:e1:35:e4:d6:
30:99:9c:a9:fe:1a:77:44:cc:00:18:16:bc:6d:62:
d8:a1:cb:3e:c6:10:3f:e0:e2:8d:f6:ab:a2:a3:af:
f5:1a:91:72:ff:12:fc:57:fe:40:b3:94:50:a3:cf:
16:b2:29:2f:c0:91:09:79:4c:f3:c5:78:09:fd:ab:
33:de:a1:da:6c:1f:fd:14:68:3b:46:99:32:4b:ea:
9b:18:43:ef:0d:7f:ce:37:6d:fb:bf:43:6c:ba:2e:
ec:c3:12:42:11:5e:7f:9f:15:a2:75:54:77:48:b2:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F7:BC:75:C1:30:54:3E:BE:83:A6:07:4E:66:51:13:04:63:BA:2F
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ea:51:ec:2c:ad:c3:e0:1b:5c:89:63:72:b2:06:cd:33:64:
aa:e8:47:82:73:2b:74:22:a6:28:d8:fe:7a:5c:67:88:14:45:
00:6b:9f:3d:39:12:d6:fe:d6:73:8e:5c:77:10:79:2d:06:58:
cc:e2:23:95:53:3f:d7:20:22:99:7d:d7:01:b6:52:b4:b5:03:
a0:14:1f:27:8d:c9:07:f3:01:4a:b2:81:d8:08:28:50:19:9b:
a4:6f:a3:f0:e4:e1:1b:6b:8a:46:ce:52:7e:94:f7:0b:9a:05:
3d:4d:6b:a6:bd:10:b6:67:f3:64:e6:9b:80:9a:37:27:f6:9b:
a6:24:01:ca:d1:c9:c8:2b:63:6e:50:fa:ef:73:04:58:71:cb:
1c:d1:c6:b4:a3:81:e3:88:19:65:ac:0b:9d:ff:ff:59:77:3e:
3e:6a:03:95:9e:3d:b4:f1:65:d6:bb:5a:8a:8a:f4:8f:71:13:
dd:76:df:18:da:98:8d:0d:a0:45:e7:42:5a:cb:e6:7f:0f:bd:
40:6c:8a:e1:02:de:4f:a8:2c:9d:ab:d3:5a:fe:8a:61:ba:be:
1b:bf:e1:eb:57:30:30:d6:1a:82:28:3a:89:5f:bb:80:42:2c:
1f:40:bc:cc:80:41:10:2f:cb:93:ec:42:01:93:dc:0a:e9:ff:
bf:92:5d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:30:39 2026 by rpki-client