Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier: OUQVXlEjQJ2Vk2VZ8CAdFnXiXpAJHRYBBiL0+YOUwiM=
Subject key identifier: EF:A4:4E:81:BA:57:76:17:D1:09:FA:AB:25:35:F5:8B:04:48:1F:73
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial: 019FAA50A00AC08C77484FFD9BB78F46C116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number: 065C
Signing time: Tue 28 Jul 2026 20:00:38 +0000
Manifest this update: Tue 28 Jul 2026 20:00:38 +0000
Manifest next update: Wed 29 Jul 2026 20:00:38 +0000
Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: xcqJuEsBhRuwts9hgPLsq2tBXM/IbsIVhZJDSnjC7kk=)
2: RPnqpd4QiTnwCz1MgHARgUiKRfA.roa (hash: EMQ9uAHdxhy6q4kC92RKeDGjFCm7FDg8EbfwYcj/lNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:a0:0a:c0:8c:77:48:4f:fd:9b:b7:8f:46:c1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Validity
Not Before: Jul 28 20:00:38 2026 GMT
Not After : Jul 29 20:00:38 2026 GMT
Subject: CN=efa44e81ba577617d109faab2535f58b04481f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:bd:83:0d:9d:e2:73:f3:de:ec:40:6f:2d:
c6:58:db:f0:e0:d1:ba:91:6d:46:71:55:8b:99:02:
ab:b0:33:0d:0b:59:c8:b1:86:79:34:f3:31:03:b1:
a7:1e:09:9b:62:2e:16:eb:aa:06:fd:f8:c4:7c:6b:
a2:6f:32:57:6d:fb:69:61:71:76:d3:ec:77:55:80:
11:ba:c8:30:f2:83:30:04:31:b5:e3:d1:94:6b:3c:
d0:bd:6c:33:58:28:a4:39:7d:e4:8f:7f:a6:e2:70:
00:09:45:a9:b7:c7:08:66:54:16:ca:c6:80:85:da:
13:3e:03:d3:03:e6:56:79:aa:a0:ef:f6:2d:6c:d1:
2b:4a:66:f7:9f:87:da:e2:eb:1a:df:85:eb:05:7d:
f1:13:20:f9:89:63:31:79:87:ff:63:91:c4:99:02:
5a:ad:b8:1b:40:b2:04:ba:2e:3f:db:ba:28:19:61:
ba:8b:6c:6b:3b:28:63:b7:bc:bd:97:c9:5d:1c:d8:
32:36:06:12:12:4b:e1:27:63:3e:b5:a4:1b:ad:9a:
d2:9b:48:f7:cb:59:bc:4d:74:d4:13:41:8d:d1:db:
94:a0:0a:66:a2:33:df:ac:e6:9a:ce:a7:22:05:dc:
ee:2b:0d:c9:21:1a:36:64:df:04:71:df:a8:f0:1e:
83:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A4:4E:81:BA:57:76:17:D1:09:FA:AB:25:35:F5:8B:04:48:1F:73
X509v3 Authority Key Identifier:
keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c3:5e:a9:e1:28:57:b6:2f:42:07:99:9f:eb:e4:86:c8:45:
be:9a:40:ed:95:1c:57:98:21:5c:6c:dd:6c:76:b7:68:cb:9e:
ee:d1:78:15:d8:20:82:27:cd:c3:b9:21:1a:07:9b:ed:db:d7:
00:bf:a6:c9:7f:3e:6e:c8:91:b2:45:e5:9d:ae:a8:b1:88:2b:
44:6e:c4:72:d5:38:e6:32:d0:be:cb:d0:73:13:55:64:6d:d4:
81:48:e5:8f:28:59:19:3c:9a:e5:18:52:f7:9e:db:78:8a:1f:
7b:33:93:43:9f:2b:03:63:be:60:f9:9c:73:2e:9e:4b:a7:f9:
6d:0f:5f:5b:15:51:7d:18:1a:f4:ce:09:c9:e0:ad:47:ae:3a:
b9:af:f5:18:ad:55:0b:14:1f:5d:27:7e:20:54:b4:63:c4:e2:
3c:48:8e:a8:aa:db:7d:cb:da:56:78:39:7a:05:62:93:4f:74:
b6:f9:8b:08:17:1b:0e:0a:0b:7a:ef:5a:d4:96:c0:92:83:ee:
b3:18:c1:a0:ad:a5:8e:a9:dc:b1:8d:d1:51:9c:9d:1f:6d:ee:
99:43:f1:62:98:f6:5b:85:e1:1b:03:b5:a3:fc:d6:fc:d9:04:
94:8e:56:1d:34:49:99:09:63:34:7d:dd:3e:4c:53:9d:8d:22:
2f:98:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:07 2026 by rpki-client