Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: 4h3V3GQw0CVMKDMfadKDPADtUKHuB+ZdWTXRAqR0siM=
Subject key identifier: F9:03:AF:1B:2C:39:3A:A2:2C:E3:AF:50:9B:3D:0C:2F:E3:8B:45:6C
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 019FA8D0081E2B144C47526E226F74AE6130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 1067
Signing time: Tue 28 Jul 2026 13:00:33 +0000
Manifest this update: Tue 28 Jul 2026 13:00:33 +0000
Manifest next update: Wed 29 Jul 2026 13:00:33 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: ThsqilHnSUzT14EvDkMBfA/uj1+JlRtPnApRnIvRozI=)
2: QFEuDeeu4X6RvqTM-9j-vL-jCec.roa (hash: enIY13X+DtKSJonUyur86EMN51RX0wJhm2ZaFev3lAE=)
3: lGfy-skAnLgxdiq51q1vJk9OXZg.roa (hash: 905M+SG71AWuwma3AVwJNMrg+VeownsgNGw18kPIIEs=)
4: shwWHH59CwEK5l3nYzgvrpyDADs.roa (hash: Xxgj4+MGImPO/BRjCoJfEL8QyT6UC4SQ9MovxKsATjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:08:1e:2b:14:4c:47:52:6e:22:6f:74:ae:61:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Jul 28 13:00:33 2026 GMT
Not After : Jul 29 13:00:33 2026 GMT
Subject: CN=f903af1b2c393aa22ce3af509b3d0c2fe38b456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:e9:d6:6d:db:8b:19:39:37:7f:c6:34:c5:
f3:b2:35:46:26:63:72:aa:30:27:fa:ec:48:a6:34:
23:0b:ee:dc:c1:d1:92:b3:28:90:50:b4:4b:c3:c3:
25:d8:8b:eb:59:2a:09:8c:54:c3:1b:d7:11:62:ef:
9e:5c:e3:b8:77:a1:cb:c2:e1:c0:d1:67:77:36:8d:
b6:7c:23:be:e5:87:44:cf:8c:d6:38:66:f1:30:1f:
8f:8d:79:16:5e:99:ab:3e:6b:be:74:64:0e:be:f2:
61:91:c4:eb:10:71:93:cd:2c:1c:69:ef:47:26:cd:
34:7d:45:76:f9:ab:22:94:9b:29:5b:62:65:66:ad:
8c:8f:ee:eb:b5:f4:0c:b5:7a:eb:ef:da:60:27:1e:
68:20:84:d3:2a:76:f8:ae:0d:ec:71:2b:c9:4b:cd:
d5:a0:d0:11:33:6d:40:71:92:3c:eb:5d:22:ce:96:
32:cf:0b:8e:7f:9b:e0:82:d4:b4:ef:9b:b1:63:a4:
7f:6e:74:3a:07:e9:88:99:c5:c5:a6:e3:66:cc:4e:
30:45:c5:e8:2c:bd:a8:2c:f0:7e:71:43:bf:ff:27:
b3:2e:14:08:79:40:f5:10:63:8f:f6:65:38:b9:7e:
7e:b5:df:91:05:3d:4d:a7:37:92:ce:ed:ce:7f:d2:
e2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:03:AF:1B:2C:39:3A:A2:2C:E3:AF:50:9B:3D:0C:2F:E3:8B:45:6C
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:44:85:93:2f:40:ae:22:c3:00:b0:70:64:fc:3b:54:2b:0e:
46:eb:e7:07:94:3a:9a:d3:e3:42:d6:75:9e:9e:3c:2e:1c:52:
36:22:c3:e5:c4:29:da:9c:71:67:b8:d6:08:82:a5:18:ff:ac:
90:3d:d6:45:a2:94:ab:94:87:3e:3c:44:26:7b:ef:30:b7:9d:
1f:b8:15:4a:75:33:af:5c:6d:0a:a9:94:7e:ac:de:5e:01:1d:
b1:4d:6b:e3:f1:bd:4b:1c:e8:56:b5:94:22:05:fb:35:06:28:
1e:5e:a6:36:be:5f:d0:60:57:ef:49:30:14:ba:27:67:bb:43:
6c:f0:9b:d1:c5:00:73:e8:f0:07:98:ea:1a:df:81:e5:26:32:
17:11:69:6c:8b:e9:55:bf:1b:24:af:a6:4e:8c:3b:24:b5:6b:
90:2f:3b:da:dc:03:e1:99:38:4c:89:6a:78:d8:be:42:43:ac:
22:ec:5c:a6:56:e5:12:4a:d0:7a:5b:80:de:90:51:d8:13:c8:
05:41:36:42:5f:3b:be:24:1b:88:6d:d3:f0:d4:30:9e:20:d1:
96:ca:a3:94:fa:64:d2:f9:6f:97:78:a4:9b:39:2b:5c:26:85:
cd:f7:12:87:63:a9:d8:76:3e:5e:3f:df:7e:83:72:36:3f:53:
72:d1:2a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:57 2026 by rpki-client