Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: kHo1l3wvYXc+U5cK1xUsskEjM+cYZxrwrMSFl/HPe5k=
Subject key identifier: 12:B3:5C:6B:E8:2F:8B:58:FC:BA:C3:BF:FB:1F:B8:39:B6:39:3F:BB
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 019FA9752ECF0181110887282D25AAC0C4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 1061
Signing time: Tue 28 Jul 2026 16:00:56 +0000
Manifest this update: Tue 28 Jul 2026 16:00:56 +0000
Manifest next update: Wed 29 Jul 2026 16:00:56 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: VODjwUXsWFQtbGR/ZQTEEtfbMVfi0969CrCCvK7SU1E=)
2: ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa (hash: lyxkrW/UqVG023E4rkiQmolfszYoshoVE4T/qdnjtKM=)
3: Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa (hash: Dq+bYU+W7cSYjUMeWCs5QEHpiuPHvRD8GOeB0Afw45M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:2e:cf:01:81:11:08:87:28:2d:25:aa:c0:c4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Jul 28 16:00:56 2026 GMT
Not After : Jul 29 16:00:56 2026 GMT
Subject: CN=12b35c6be82f8b58fcbac3bffb1fb839b6393fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:fe:af:93:b7:5b:3c:5a:8b:c2:92:d3:aa:
f8:2a:45:15:3f:e0:91:bd:8a:00:d7:c6:64:55:98:
c6:87:ca:df:1f:cd:8d:a7:32:88:f5:70:8e:b6:db:
8c:76:3c:bb:02:8d:d1:54:88:d6:d0:e2:3a:c1:85:
5d:43:b7:b5:7a:77:2b:e4:7b:41:50:aa:d2:ce:64:
11:be:db:09:21:7e:fc:bc:b8:90:76:50:71:fe:39:
83:b4:25:e4:1e:11:16:24:68:4f:06:dc:0e:9f:7a:
e2:49:5f:da:55:ca:c0:d2:4c:31:e8:92:fc:1b:d5:
6a:e1:19:d9:aa:b1:01:b7:60:b8:b2:47:6c:2d:9d:
a9:72:c6:29:1c:95:b3:40:c6:5e:13:4e:36:e3:8a:
a9:e5:2d:d4:be:ad:2f:b2:da:d0:9e:05:64:5a:77:
72:58:a7:99:8e:23:cb:93:62:e4:cf:ce:23:00:a1:
8a:d9:0c:3f:51:c9:9f:28:6d:8d:2d:49:b1:05:de:
c9:7f:26:9d:06:a3:0e:78:51:e5:15:3b:f1:dd:25:
b2:76:f6:a2:67:d4:6f:69:87:e8:29:95:51:ff:d9:
bb:b5:09:56:68:b3:ce:f3:04:2f:e7:2d:93:dd:40:
66:d3:ba:3a:c7:84:39:e7:8b:df:a1:74:c0:2a:f9:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B3:5C:6B:E8:2F:8B:58:FC:BA:C3:BF:FB:1F:B8:39:B6:39:3F:BB
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fe:7d:0e:4a:98:72:54:af:a2:76:87:f2:18:81:3e:3c:02:
11:3a:2b:f4:88:d0:35:39:6c:33:6f:ef:38:3d:a8:cd:5d:ce:
1e:13:cc:ad:c3:c8:3d:f2:3b:50:a4:62:0c:f7:91:4b:b1:67:
5e:c6:96:d0:6a:bb:be:16:d6:ae:03:3b:97:63:13:dc:bc:2b:
c5:a5:57:b1:fa:7f:e3:f3:1f:aa:a1:c5:14:75:b2:4e:ab:7c:
2a:cd:21:40:97:f6:46:4e:44:75:5d:1b:07:cd:49:76:74:8d:
83:0c:d1:ce:3d:71:68:75:3a:1d:db:26:ad:34:02:03:01:3b:
52:ea:16:c5:2d:f3:0e:92:aa:22:7e:3b:90:ac:8f:d2:7f:ba:
96:b3:8f:8b:7c:83:54:92:00:3d:c3:8c:6b:61:3c:fb:82:60:
ca:e9:dd:cb:90:11:0a:8d:73:95:41:c8:2e:f5:2e:e2:f3:76:
f8:d9:1a:0c:4c:d0:ef:00:88:55:20:8a:1b:2a:d9:05:04:b2:
e6:fd:65:1e:21:94:12:56:88:14:e1:5f:f3:33:98:fc:c0:2a:
56:2a:e8:fb:71:f2:90:80:f5:a4:a8:2d:3f:17:65:77:ff:48:
57:fb:5b:7c:be:ba:60:f5:b1:fd:d7:e0:43:0a:1b:14:89:21:
70:94:0f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:34:51 2026 by rpki-client