Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier: oFDEDWJ7UaZ8G0kYjTGEYMRZJJU1uNsGdsZFrsct+/0=
Subject key identifier: 49:BF:C1:C5:63:7F:53:4C:FF:D4:27:D5:76:99:ED:C6:69:39:4E:D4
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial: 019FA9E2B92073360B029A0C5922173CA496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number: 1330
Signing time: Tue 28 Jul 2026 18:00:35 +0000
Manifest this update: Tue 28 Jul 2026 18:00:35 +0000
Manifest next update: Wed 29 Jul 2026 18:00:35 +0000
Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: e9UeTzlzTbMjCaO8vBWDn4AyOKGIw5mrpxts/A1qKB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:b9:20:73:36:0b:02:9a:0c:59:22:17:3c:a4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de122d172c13b15291e41f945681525826fef892
Validity
Not Before: Jul 28 18:00:35 2026 GMT
Not After : Jul 29 18:00:35 2026 GMT
Subject: CN=49bfc1c5637f534cffd427d57699edc669394ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:70:1c:c0:76:0b:06:cf:ea:7c:69:2e:97:
99:db:54:74:eb:f8:62:58:f4:cf:13:93:b1:b2:51:
81:53:d0:88:45:78:6b:2b:ac:cc:53:00:d3:b3:1b:
ce:97:3a:c5:64:f1:bd:ab:e8:54:61:6e:19:53:d1:
45:67:70:cb:8b:b4:ea:96:ae:8b:32:06:47:fa:8a:
7a:d7:99:88:78:4e:4a:06:61:d9:ea:89:e8:aa:d4:
86:d2:8a:b1:e8:89:53:ad:f7:8b:41:1b:03:0e:2d:
df:90:76:c1:19:49:a9:cf:4b:9b:ee:1e:16:e4:ea:
c3:e3:9a:5c:da:5a:82:19:b0:14:cc:3b:8e:20:2d:
f3:55:0d:08:43:19:85:23:59:76:b2:3d:0f:a8:0e:
70:3b:78:69:91:ed:a9:fb:68:37:6b:bd:7a:65:a5:
0a:a5:dc:9f:04:a1:e1:de:cd:5a:1a:78:9d:be:75:
43:a0:81:cd:96:09:fe:5e:02:30:30:ec:ce:f7:62:
30:04:96:5c:7d:41:41:8c:f8:56:37:d5:8c:78:f8:
28:c4:2e:04:30:b9:a1:93:48:44:ca:14:a3:8c:b6:
2b:5c:82:74:00:52:e4:11:e9:08:0b:57:d2:57:a2:
94:27:e3:47:52:33:cb:57:a5:3b:96:df:fb:cd:66:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BF:C1:C5:63:7F:53:4C:FF:D4:27:D5:76:99:ED:C6:69:39:4E:D4
X509v3 Authority Key Identifier:
keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c2:c2:88:02:70:d3:af:4a:35:13:57:f0:ee:c9:87:db:43:
26:36:4d:a2:c3:b6:5a:c4:08:7e:37:63:b9:f6:ce:5c:11:fe:
46:5d:f6:f9:d1:d2:77:4c:12:5b:77:59:bc:8a:2e:93:17:54:
14:b2:b4:cd:ba:71:c1:a6:9b:37:97:eb:da:ad:f1:59:55:fe:
dc:88:79:eb:f9:42:c3:9c:fd:0a:7d:1c:1b:17:01:28:fa:0f:
15:a5:b2:8f:9e:d9:25:56:3c:6e:81:93:39:a7:86:e9:38:f4:
7d:83:75:5c:a5:6b:ac:cb:50:61:78:c7:f7:d9:18:de:18:ca:
14:2e:cb:bb:19:29:d8:8c:5f:e3:18:b1:6c:f5:18:9c:ab:06:
20:09:b7:07:19:e2:74:85:98:07:63:7d:48:0e:9e:a3:ed:d4:
20:af:01:04:a2:1f:a5:61:c8:ca:0c:c9:1c:24:7d:48:ba:80:
a2:6c:75:b1:19:e5:0d:4a:11:88:dc:85:f5:1e:0b:2e:b3:27:
fc:55:ef:94:3a:65:3e:7e:f3:49:96:3e:39:c9:76:ea:6f:08:
a3:01:e9:ed:6a:d9:01:07:26:0d:ef:d3:76:bc:be:66:37:23:
39:f3:20:39:1e:2d:7f:b3:d0:ae:f1:f5:b5:6b:76:ae:03:78:
51:25:29:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:32 2026 by rpki-client