Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: LY0YPLlvgGTKpIndJHwQlKB6Eyf6X7aNtqK4ntkY0A4=
Subject key identifier: 7A:10:76:44:9D:E0:89:B9:84:81:27:DC:F9:D4:8F:C6:FC:F7:12:1B
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 019FA9AC3F40D627ADE615EDE017152B443F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 1914
Signing time: Tue 28 Jul 2026 17:01:05 +0000
Manifest this update: Tue 28 Jul 2026 17:01:05 +0000
Manifest next update: Wed 29 Jul 2026 17:01:05 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: Iq5wdZ5IwmUQFWwwdtCCmn68Iyq+GY6DBah3YTgY4eE=)
2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:3f:40:d6:27:ad:e6:15:ed:e0:17:15:2b:44:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Jul 28 17:01:05 2026 GMT
Not After : Jul 29 17:01:05 2026 GMT
Subject: CN=7a1076449de089b9848127dcf9d48fc6fcf7121b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:82:cb:7b:81:03:93:e0:3e:8f:24:4f:11:
42:a2:59:de:08:11:d8:3a:2f:e1:58:78:21:85:b2:
47:7b:cc:e0:5d:0c:2e:b4:b2:a4:cb:3e:bd:cb:d5:
f5:c5:5f:b3:a7:a2:ec:ca:d4:76:f5:96:0b:e7:25:
28:ed:fc:50:6a:ae:2d:a2:35:fc:32:1c:85:76:e9:
54:9c:28:67:28:e1:86:7c:c6:3b:92:33:0f:5e:4c:
ce:bb:13:03:db:0d:84:fa:8b:2e:a8:86:01:36:ac:
82:0e:2b:9e:37:b9:5b:66:95:56:a7:a5:f6:68:de:
69:7e:ff:e2:81:f0:a9:34:5f:ae:19:81:83:99:3f:
96:17:50:83:18:f9:a1:a9:25:0d:28:96:e0:16:9f:
3d:27:8f:17:68:10:f0:73:46:82:39:b2:b9:77:f4:
5b:a2:d9:59:a5:84:c1:db:a1:fc:ae:a5:0d:bd:9a:
86:7e:3a:9e:28:e0:d9:a0:86:9a:90:e3:de:04:ff:
ee:fb:63:88:5c:fc:e9:1d:c2:3c:53:40:a8:27:55:
0b:83:4e:d1:df:a5:15:7f:0c:2e:c0:4d:70:b3:bd:
bc:f6:3c:f2:cd:dd:d4:b7:0a:89:d5:65:5f:3e:22:
7d:33:13:7c:2b:b9:b2:da:b8:28:7f:68:e0:d8:0f:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:10:76:44:9D:E0:89:B9:84:81:27:DC:F9:D4:8F:C6:FC:F7:12:1B
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:52:b1:36:95:8e:b6:15:a5:e0:01:ed:99:16:fd:f3:cc:f6:
ca:09:30:84:49:6f:ed:c6:e7:c9:0e:2b:a1:fc:81:a9:7f:23:
89:b6:20:73:5b:65:a0:e5:2e:98:22:89:77:b1:2c:57:b0:95:
30:fb:0d:02:75:3b:37:1d:27:d3:ad:71:a2:96:14:d3:61:4c:
f5:c5:6b:43:f3:f2:95:dd:68:88:c5:cf:7f:d7:c8:f0:c7:c9:
30:d0:91:bd:36:99:9e:39:98:c0:e5:fb:2a:29:30:92:6e:95:
00:68:5d:53:8b:dd:76:7e:20:e6:c5:14:f4:99:e7:21:ff:9b:
b6:31:aa:11:db:74:2b:69:0c:47:cc:e0:fc:7e:53:32:38:03:
08:ce:83:39:f1:00:d1:e6:dd:12:0a:7b:da:a5:6a:39:01:c8:
24:a6:de:fe:46:c2:89:e4:39:98:03:90:84:35:27:24:93:f0:
9c:cb:8b:f4:cc:07:1d:cb:28:38:7d:89:56:f3:0a:d8:b5:b3:
27:61:47:dd:79:68:f5:c6:c6:e6:9f:05:86:77:6a:ef:cb:bd:
72:87:91:d2:7e:ec:dc:77:00:6c:e7:9e:28:fa:9b:11:e0:c1:
aa:e2:4f:df:32:cb:fc:87:f1:3e:26:29:16:20:93:39:ab:fb:
3c:b8:df:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:49 2026 by rpki-client