Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier: x1cq2xHfxQsVp9z9k2NSmx9Lum1xl8gsCrCsFVevDis=
Subject key identifier: 06:E8:92:F0:D8:79:86:3C:33:02:12:97:2E:69:0F:A9:84:3D:65:D5
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial: 019FA9E2823F6F59BEF1128A39FCB14A741A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number: 0C7E
Signing time: Tue 28 Jul 2026 18:00:21 +0000
Manifest this update: Tue 28 Jul 2026 18:00:21 +0000
Manifest next update: Wed 29 Jul 2026 18:00:21 +0000
Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: 3Pi67O6XfPUFRS0RemmkWvHQAa6ZtBYLB/IVha6/aZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:82:3f:6f:59:be:f1:12:8a:39:fc:b1:4a:74:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Validity
Not Before: Jul 28 18:00:21 2026 GMT
Not After : Jul 29 18:00:21 2026 GMT
Subject: CN=06e892f0d879863c330212972e690fa9843d65d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:16:f1:4a:9b:0b:ad:62:36:51:4c:2f:79:
ea:fe:65:39:00:57:3e:92:f0:27:e2:3d:0d:c8:2e:
58:57:9e:0b:d4:60:8d:e4:3e:46:59:f4:aa:25:a8:
22:82:87:b8:e0:6d:26:5c:6d:c8:df:a2:5f:92:55:
e5:e5:41:b5:ca:16:23:bf:b7:c9:f2:24:ac:fc:74:
90:69:a3:bb:7c:ad:50:b4:b1:c9:93:3b:25:0a:ed:
7b:bb:72:1b:9c:e2:41:70:2d:0b:d6:e9:79:8c:f4:
62:0e:cf:3d:92:c4:a8:0b:b5:1f:e5:71:64:72:6c:
89:1a:58:33:75:2d:17:5c:53:13:4c:38:b3:5e:0e:
48:85:60:aa:ed:97:d4:1b:27:01:d9:83:37:90:0e:
e0:21:74:3b:fd:49:ef:e9:ea:00:7f:04:40:c2:ab:
d6:15:8a:da:41:71:cd:6e:52:4b:c6:dd:ef:2d:c9:
89:60:7b:49:ce:3f:1c:c3:1f:1a:6c:6a:77:cb:37:
24:42:e7:90:c9:e0:ed:06:e0:09:7a:92:77:c6:fe:
27:35:eb:30:90:82:4d:20:fb:72:d5:7f:3c:53:69:
3b:70:4c:54:67:1f:9f:27:64:fb:f9:32:0f:f8:88:
cd:4a:9a:00:af:7c:b2:8c:3c:44:a4:1f:e2:19:b9:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E8:92:F0:D8:79:86:3C:33:02:12:97:2E:69:0F:A9:84:3D:65:D5
X509v3 Authority Key Identifier:
keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f1:bd:9c:5a:1c:dc:a9:2c:a8:1d:c6:f6:f0:de:22:65:67:
3c:70:69:f6:e4:b1:c1:df:55:9f:76:6c:b9:05:ec:15:02:f7:
8f:d2:a6:7d:5a:ab:01:e5:08:76:72:33:26:96:a8:2e:24:d1:
c9:56:d3:11:62:be:47:a7:3a:08:9b:45:e0:ff:52:92:6d:c0:
0f:7a:44:ff:b5:ce:d1:24:5e:19:78:ed:4b:0b:a4:c0:89:05:
9c:12:a4:0a:93:4a:8b:c0:29:a1:e5:62:19:da:16:61:ee:38:
ab:d1:7b:73:b3:a2:5d:03:7e:ae:a1:d9:24:b7:80:b6:ac:c5:
50:dc:26:e2:3a:06:f7:0e:6b:f9:ac:f7:ed:54:95:ba:39:bd:
c5:71:91:67:81:b7:6e:a0:a6:5c:ee:04:27:e7:63:48:68:03:
59:49:81:46:3b:dd:bc:12:ed:9e:76:2e:08:09:69:d1:11:18:
c6:7d:62:61:66:48:d8:23:19:24:e4:8a:37:ca:40:7e:7e:33:
0c:9f:cd:66:af:c6:a6:2d:53:2c:4c:f9:2e:13:51:c7:2b:e0:
7b:c6:55:30:d4:ff:0d:9d:c0:50:8e:b0:09:88:a9:84:9b:cb:
a3:49:f2:6f:9c:3d:ef:6a:b7:67:68:7a:97:80:d4:c3:5d:28:
d0:87:c5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:25:56 2026 by rpki-client