Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
File: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft (raw, json)
Hash identifier: MnQeu74VxoUN75evYjAstuOOddJhlp68I/wN6zregdI=
Subject key identifier: 73:9D:42:67:CE:A0:0F:E6:8C:3A:BA:B3:CE:D2:1D:C8:EC:6F:83:BF
Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
Certificate issuer: /CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Certificate serial: 019FA9AC560563EC4439A9A3724F8D395FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
Manifest number: 0DD8
Signing time: Tue 28 Jul 2026 17:01:11 +0000
Manifest this update: Tue 28 Jul 2026 17:01:11 +0000
Manifest next update: Wed 29 Jul 2026 17:01:11 +0000
Files and hashes: 1: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl (hash: pL9UpZIv0xdmSm1MCIDa48K4KNMRM/pxqALIZjmwe2Q=)
2: EpYfEYO_PBauG2EManfF8FgFl1Q.roa (hash: cXvNIHvNyPlxk30rEJGQL1sdKxLXm0Gvh2LNp2Lvi3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:56:05:63:ec:44:39:a9:a3:72:4f:8d:39:5f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Validity
Not Before: Jul 28 17:01:11 2026 GMT
Not After : Jul 29 17:01:11 2026 GMT
Subject: CN=739d4267cea00fe68c3abab3ced21dc8ec6f83bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:56:1f:e7:4b:d4:9a:2a:72:7a:2b:ce:a3:
28:de:f6:aa:bb:b3:2d:cb:93:7a:23:25:04:e0:d5:
9b:fa:24:fa:a1:e5:ec:73:fe:0b:6a:60:11:82:06:
11:82:ff:67:a1:7c:59:51:73:54:41:9c:ac:95:2f:
90:0b:8a:1b:24:41:9f:6d:20:ce:bb:62:fc:a9:5a:
e9:63:b9:52:0b:e5:b0:00:db:04:68:e9:9b:a0:4b:
8e:8d:c6:33:cc:73:04:64:ba:c2:26:4f:67:a4:c2:
db:31:35:a6:e2:37:0e:d5:10:96:b3:f3:88:ec:b3:
02:6d:0f:95:3f:30:0e:3c:88:a0:ba:ba:c3:87:ec:
25:2b:95:81:7f:79:d3:88:73:7e:0c:82:2b:a7:17:
71:a2:df:49:f1:8e:b0:b9:fe:a5:d4:b0:42:87:61:
87:a0:b2:56:61:9e:3e:01:78:84:df:01:dd:74:b5:
cd:e0:e7:0c:c0:56:68:fd:dd:21:ad:f1:74:f1:f4:
19:93:2f:d3:11:35:bb:47:96:0c:56:a6:05:fe:5f:
48:1d:d9:45:03:4e:14:c5:6f:2f:96:39:0f:4b:9e:
4f:ec:b9:d8:56:66:7e:5e:c4:dc:99:65:e3:4f:f4:
ab:4a:6e:77:a9:b6:3a:05:00:80:65:88:45:bc:e2:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9D:42:67:CE:A0:0F:E6:8C:3A:BA:B3:CE:D2:1D:C8:EC:6F:83:BF
X509v3 Authority Key Identifier:
keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:90:77:5d:27:3e:94:c2:2e:27:a9:55:1d:75:4c:50:f1:4d:
ee:1c:f3:2f:08:68:58:db:21:de:3e:ec:b2:98:29:db:58:e3:
a4:ac:5d:dd:de:51:06:93:7e:d8:c7:a1:f0:4d:14:5a:5f:35:
57:a9:88:44:16:0e:cb:2c:bd:5a:ff:56:a4:39:7d:89:41:40:
26:8e:2f:9e:eb:bc:52:71:88:21:2b:23:e0:49:b3:d9:0d:a4:
7e:38:16:1c:b5:fd:84:1c:c0:8c:81:8c:34:29:53:5b:2e:70:
1b:b6:4e:66:35:56:a9:fb:ab:e4:9c:8f:69:6c:92:32:ee:85:
a4:12:35:b1:30:38:69:26:0c:a3:16:6b:56:8b:7f:fa:3c:df:
46:fd:14:ea:48:3e:11:a3:5d:f6:ba:1c:c9:dd:f2:44:e9:b7:
cd:dd:60:7b:ab:e2:e0:9b:12:17:86:b9:cf:ae:6f:af:80:f1:
46:59:11:f2:3d:6b:ca:66:da:e7:26:3e:25:71:73:af:5b:69:
8c:51:7c:b4:69:e8:7f:4e:67:50:73:39:40:92:1e:21:20:9c:
11:db:0f:ad:6c:f6:40:19:ea:79:f5:35:5e:1e:c4:52:12:d8:
3d:be:53:1b:c5:24:a4:9e:80:10:5f:1d:f7:a6:2f:1c:63:44:
30:85:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:27 2026 by rpki-client