Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: K5LE79TR77D47bCJr08zCpVle15JQUrQ+Co/Ly9BQAg=
Subject key identifier: CE:B7:78:E2:3E:87:3C:A8:C7:A5:70:AD:20:CD:8A:89:46:5D:49:1B
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 019FAD51FA294851024FB02BD8C0A93136B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 08C4
Signing time: Wed 29 Jul 2026 10:00:58 +0000
Manifest this update: Wed 29 Jul 2026 10:00:58 +0000
Manifest next update: Thu 30 Jul 2026 10:00:58 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: kOrb+fpWQxCdvjGiGjMxwMlQHw/qKs42Q7mMkxy18hQ=)
2: TTHpThh0WFBegnNfmmfbon5C7Nk.roa (hash: XL1bQibK3g0HnLkkJsFNT1Xil79v588WbG0+6ygTsbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:fa:29:48:51:02:4f:b0:2b:d8:c0:a9:31:36:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: Jul 29 10:00:58 2026 GMT
Not After : Jul 30 10:00:58 2026 GMT
Subject: CN=ceb778e23e873ca8c7a570ad20cd8a89465d491b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:ff:a9:de:4f:57:f9:c6:99:04:e2:9b:fa:
0c:6b:f9:a2:a0:cb:04:4b:b9:cb:67:f1:f0:ad:8e:
ed:92:f2:b3:0b:27:77:20:b8:86:30:c2:85:b8:92:
14:57:1e:f7:b7:2c:6d:d2:07:ae:e8:2f:76:84:ac:
68:21:14:34:18:43:90:4a:46:35:be:04:c4:ae:78:
19:f8:63:ec:b9:19:38:3c:5a:37:f6:e0:df:d6:d0:
9f:70:62:c3:33:96:3b:3c:4f:6a:d7:9e:c1:de:e9:
f2:b9:24:32:cc:09:5a:7e:11:9e:ac:00:09:ca:d5:
66:77:62:da:2e:74:15:7c:9e:e8:78:8d:c9:73:ac:
b3:12:10:0f:87:62:5b:9e:29:cb:5e:e9:a8:00:4f:
b0:c4:24:7e:64:35:11:5a:fa:c4:3b:48:4f:bc:1b:
a2:d3:a6:a9:2c:23:24:85:96:4f:13:5a:13:98:66:
22:db:e0:e6:8b:68:7a:80:eb:a8:13:aa:91:b4:9d:
2e:eb:09:f3:06:49:f5:19:a3:c0:40:5d:6f:81:05:
1e:6b:d4:d8:79:d0:7d:96:df:84:f4:17:c3:4b:a1:
0f:9f:dd:a3:42:37:53:1b:a0:35:fc:40:bb:eb:2f:
66:b2:3f:2a:67:9b:83:04:a0:8a:23:e2:da:6c:46:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B7:78:E2:3E:87:3C:A8:C7:A5:70:AD:20:CD:8A:89:46:5D:49:1B
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:6f:24:3b:d1:0d:66:af:22:c4:c6:a9:3e:99:a2:3b:d4:d2:
d2:cc:f9:12:14:ae:00:ce:f5:06:33:08:76:c2:69:7f:72:c8:
cc:b0:96:14:32:a3:65:43:23:94:52:40:ce:e9:b2:a4:41:aa:
72:de:64:d6:63:c6:c2:40:ec:c7:ad:a5:94:0e:64:cb:4f:76:
c9:1d:15:7a:a3:76:3c:39:5a:ea:ea:a3:2a:6a:2b:48:30:0d:
4d:4b:bf:5a:15:88:e1:ca:8f:40:ff:db:9d:79:bc:99:7e:fa:
6d:cb:f9:34:e3:f5:ca:41:e3:b0:57:d1:8a:78:5c:a8:fc:f1:
bb:61:7c:7b:40:44:e1:11:4d:a9:81:47:94:4b:b3:1a:bb:9d:
a4:f1:eb:67:27:8d:39:5b:0a:5f:5e:9d:c8:2a:07:bf:c5:f7:
0c:d5:7d:b8:76:07:3c:73:49:c7:4a:11:45:62:fa:72:8a:70:
d4:32:74:5b:08:96:8c:11:a6:3c:ee:e2:b2:f0:35:b7:86:20:
4d:d1:76:46:e7:2a:1a:58:ff:22:3a:61:67:bd:62:be:07:47:
08:05:dc:db:55:17:b2:ee:16:cc:44:8f:5e:9a:14:5b:29:d1:
4d:60:dc:83:f7:6e:2b:05:ed:36:aa:bd:9f:96:eb:80:8d:f7:
b8:5a:c8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:02:13 2026 by rpki-client