Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: OGonwhGhnib8f3lWtMGepYSW3PRxmBOsIGOKQUlt/dc=
Subject key identifier: 49:FD:F1:74:12:C1:97:C6:4B:C5:45:BA:DD:65:6E:4C:74:FD:BA:23
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 019FAAF58C35AF844E3DBCCA8B38B69482BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 1388
Signing time: Tue 28 Jul 2026 23:00:46 +0000
Manifest this update: Tue 28 Jul 2026 23:00:46 +0000
Manifest next update: Wed 29 Jul 2026 23:00:46 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: 90C7+2kY9dvHQPVeIae91tBgE4EjuVfBeU2tHR0u+co=)
2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:8c:35:af:84:4e:3d:bc:ca:8b:38:b6:94:82:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Jul 28 23:00:46 2026 GMT
Not After : Jul 29 23:00:46 2026 GMT
Subject: CN=49fdf17412c197c64bc545badd656e4c74fdba23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:09:5f:a0:6d:4d:bd:9a:cc:cf:ba:7d:65:
69:55:79:81:56:73:4d:a2:f5:e2:03:b5:9d:5f:a0:
22:54:c3:eb:56:04:44:a1:51:1c:0a:7d:f0:ea:2a:
ce:b0:20:67:60:3a:92:91:4f:52:c3:fe:cf:7a:5e:
e8:4d:1e:e0:6b:5a:17:ca:16:8b:cf:25:21:f3:fb:
62:0f:01:42:7d:44:d3:0d:b8:a7:cd:35:5f:0a:90:
aa:95:de:c7:99:bf:b4:2c:08:70:4a:fa:cc:84:c9:
97:61:c2:77:12:10:de:43:5a:1d:d9:ad:a3:0e:35:
0f:fd:8d:9d:eb:4e:4d:ee:3e:c3:4d:c4:1c:c6:30:
cb:18:46:5a:27:56:99:0a:7e:46:3a:74:18:fe:42:
53:2f:56:c3:b4:a7:9f:24:ff:d8:a2:78:36:19:3d:
a7:9a:c6:0f:94:fc:b6:aa:aa:44:e6:c9:3c:00:d6:
94:99:94:21:ac:dd:dc:2c:4c:8a:a7:ab:eb:c2:32:
8c:48:aa:11:b7:4e:06:55:5a:4c:ef:89:a4:85:15:
c8:5d:ba:4e:14:e5:26:95:f7:03:3f:0c:ff:ac:ab:
3e:db:6d:73:de:b7:6a:ea:58:f2:90:51:0d:a0:5d:
9c:c0:cc:1c:3b:09:10:b7:07:30:b7:41:0e:ef:75:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FD:F1:74:12:C1:97:C6:4B:C5:45:BA:DD:65:6E:4C:74:FD:BA:23
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fb:e2:cf:4a:4e:1a:b5:34:46:5f:88:18:1b:46:f0:70:fa:
11:58:4d:83:0b:40:dd:bf:c4:52:3d:23:ff:f8:95:f5:12:2e:
4d:f7:b8:07:ef:5b:af:dd:27:e4:0b:c7:78:6e:61:62:e1:fd:
4c:69:d5:16:c1:52:8a:f2:7f:d3:06:bb:df:55:c6:1b:83:37:
4d:c0:3d:05:34:5a:2f:1e:b8:a7:8e:5f:52:01:c5:9a:49:21:
d6:0c:1e:4f:ca:7b:10:d5:ad:18:2c:07:17:da:6e:bc:ab:9c:
7c:3c:9c:71:f7:ab:ed:39:cc:62:33:67:46:08:6a:19:71:58:
07:52:6b:60:86:28:f6:c4:79:11:ad:78:30:99:6e:dd:e4:7e:
7f:52:b6:1d:dd:e2:78:8c:99:55:07:b4:5e:93:08:96:6c:8a:
09:af:70:9f:7c:de:33:bc:da:5f:9e:3f:c5:69:77:58:1a:3a:
0c:14:81:1c:8f:0e:fd:80:81:31:db:5d:58:9e:f3:0e:af:e2:
00:17:e9:b7:fc:28:57:d9:48:ad:e5:03:96:7b:26:ed:12:ea:
2b:ac:6f:80:ac:63:87:b2:8b:ef:c1:e6:f2:0f:b1:b4:f5:9f:
6b:be:be:73:b5:1a:38:e7:b1:05:f1:fe:da:ab:39:0f:21:5b:
29:56:f9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:30:20 2026 by rpki-client