Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
File: 03h3GhBvaw0FSld4U1aSLK8C40M.mft (raw, json)
Hash identifier: RIo54oHJF7F7pY3oor6KqWdxLOtRaUK31wmFfFhdrQ8=
Subject key identifier: B1:D6:03:37:E6:F9:86:41:5E:DA:24:75:40:80:E9:F5:21:C7:17:32
Authority key identifier: D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
Certificate issuer: /CN=d378771a106f6b0d054a57785356922caf02e343
Certificate serial: 019FA899DC68570CDB8E7521A9D326E22487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
Manifest number: 0D7C
Signing time: Tue 28 Jul 2026 12:01:23 +0000
Manifest this update: Tue 28 Jul 2026 12:01:23 +0000
Manifest next update: Wed 29 Jul 2026 12:01:23 +0000
Files and hashes: 1: 03h3GhBvaw0FSld4U1aSLK8C40M.crl (hash: 6U4sJVv2Ohba9Qs/65roC54S91c1iWpI7vczVc+1nH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:dc:68:57:0c:db:8e:75:21:a9:d3:26:e2:24:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d378771a106f6b0d054a57785356922caf02e343
Validity
Not Before: Jul 28 12:01:23 2026 GMT
Not After : Jul 29 12:01:23 2026 GMT
Subject: CN=b1d60337e6f986415eda24754080e9f521c71732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:17:e5:ea:31:78:5f:cf:6d:f2:9a:99:6a:
bf:94:d6:24:ce:38:06:ed:f0:05:b4:d3:b8:b6:70:
8e:48:75:8e:12:04:24:33:9b:76:05:d9:c7:e8:9b:
fa:38:7c:6d:10:9f:7c:13:fc:d7:5d:2a:34:f4:e4:
05:30:8b:72:80:cd:89:ee:11:9c:7c:db:da:e1:4a:
f3:be:12:24:81:ba:f6:e8:d3:36:3b:7b:6a:c9:6c:
07:38:0e:93:25:bc:4e:92:59:69:a0:50:65:03:ef:
ad:b7:39:31:ca:5a:db:d3:e4:42:af:6e:dd:bb:92:
17:04:09:38:53:d0:e3:51:cd:cd:11:78:52:08:4a:
62:de:5f:fa:b8:93:d2:e7:89:ac:cd:c1:2a:2e:58:
ab:8c:01:7c:e5:c4:62:df:31:a2:56:ba:61:74:2d:
68:ac:e9:76:02:de:e5:ba:9f:e5:b4:31:93:42:71:
fd:f3:89:35:16:af:88:c7:72:3c:6b:8e:5c:21:47:
c6:fd:fe:68:ed:0a:a3:b2:ed:cd:c1:fa:18:51:51:
68:0f:4e:e2:34:a3:67:2e:16:42:c3:02:b4:31:22:
5d:40:a8:5f:72:28:ce:cf:9e:67:88:1a:21:b2:4a:
2f:32:ff:d9:1f:f8:e4:5b:b4:46:48:5b:7e:95:c7:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D6:03:37:E6:F9:86:41:5E:DA:24:75:40:80:E9:F5:21:C7:17:32
X509v3 Authority Key Identifier:
keyid:D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:17:c3:41:f1:e2:9f:e8:e8:7d:e0:4a:75:b8:97:eb:b6:b9:
44:0a:1a:45:a9:7e:e5:b2:48:35:a1:ce:03:89:ff:a3:b8:33:
70:67:53:83:75:7c:7d:e5:ff:1b:52:98:b7:b4:e2:14:22:6d:
af:c2:f3:44:5f:5d:2d:90:ec:bf:03:6b:23:4a:0b:70:af:70:
5c:20:b7:a7:3f:52:53:a2:de:4b:76:16:7c:be:08:3e:a4:62:
93:ee:de:8d:77:c9:5f:19:cb:2a:8b:e1:07:3b:3c:4a:8c:9c:
b3:7e:25:e3:40:28:dd:ca:04:67:f4:6a:28:39:e4:37:1e:f7:
ab:51:74:1d:5e:50:e8:0a:35:75:2a:bb:e0:6d:9b:12:7c:94:
e9:d1:ad:19:bf:44:35:e1:08:04:e1:e1:f6:ca:2d:4a:3e:b7:
bd:05:2a:bd:49:a7:5a:e4:0c:9b:4b:8f:a0:75:5d:ab:57:f5:
13:4c:e9:63:43:68:87:00:56:62:47:df:52:ae:58:03:c9:79:
21:a7:d6:dc:77:f7:05:bf:1a:f7:e8:ec:02:15:82:5d:9f:cf:
fd:2c:5f:8d:1a:b6:d1:5b:39:b2:2e:88:14:23:a1:3a:b9:10:
3c:32:af:9c:bc:dd:3b:36:99:16:18:eb:ed:fe:40:50:f6:a2:
96:f3:41:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:42 2026 by rpki-client