Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
File: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json)
Hash identifier: Fe3+trkIhYfrodn3Xwr8/Tn2IpV1N3akjJ8tyWbg2Kk=
Subject key identifier: EF:39:46:27:E2:B0:5A:DA:ED:29:8C:FE:52:F0:2A:07:A1:1D:E3:0E
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial: 019FA8995765ECC34C10DE1474B26BB42EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
Manifest number: 18F4
Signing time: Tue 28 Jul 2026 12:00:49 +0000
Manifest this update: Tue 28 Jul 2026 12:00:49 +0000
Manifest next update: Wed 29 Jul 2026 12:00:49 +0000
Files and hashes: 1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: 2eDHtPlRs6mPewVy14cHkO1XGWQY3iJYbxuJ1qozwMY=)
2: dypMPP_xvoxJHktjo8O416uma_g.roa (hash: f+g0dUATJyTuyFHPoe+0S/etj6BvEAVqOF7MMl9w8nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:57:65:ec:c3:4c:10:de:14:74:b2:6b:b4:2e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Validity
Not Before: Jul 28 12:00:49 2026 GMT
Not After : Jul 29 12:00:49 2026 GMT
Subject: CN=ef394627e2b05adaed298cfe52f02a07a11de30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:0d:2b:aa:f5:1d:97:16:8b:cb:d0:28:a3:
ad:80:d2:9f:5f:65:c9:cb:06:41:23:17:c3:b8:0c:
d2:4a:cc:9c:da:fb:13:5e:45:d5:74:41:b1:9b:7d:
37:7c:33:d4:aa:e1:f7:3a:a5:bf:ef:c5:66:22:54:
94:4a:23:17:38:d2:13:c8:e4:7e:b3:e7:56:bc:7a:
50:4a:fa:df:61:bc:03:60:65:4c:37:40:a2:e6:bf:
55:9f:e7:f9:0e:48:e9:8d:aa:e2:c9:f5:05:6f:04:
7b:7c:03:ea:cf:45:19:5e:b1:02:51:54:89:e8:a7:
af:0c:a8:2d:1c:db:e6:7b:ed:32:5c:28:70:c8:0c:
89:bd:b3:b6:fa:e8:39:3e:7d:22:7b:60:60:bb:30:
8e:ac:2b:c1:b7:84:76:1f:e3:1f:91:76:d7:dc:f5:
66:e7:54:e1:cd:96:6c:89:79:33:2d:2b:06:2d:fa:
2b:b2:bb:3e:5b:e0:2d:da:10:a9:6b:a8:38:d7:73:
48:ee:3c:69:3b:f0:c3:11:4d:d8:c2:ee:60:a9:20:
4c:e5:ef:a6:15:e3:ac:bb:5f:2e:b9:bd:14:41:94:
53:27:05:47:a3:69:fa:2f:19:b3:68:a0:ea:87:78:
90:af:22:a0:22:e5:d6:75:43:49:8a:1c:43:0c:d8:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:39:46:27:E2:B0:5A:DA:ED:29:8C:FE:52:F0:2A:07:A1:1D:E3:0E
X509v3 Authority Key Identifier:
keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2b:15:ce:db:d7:6e:db:e2:b1:c2:ac:82:b6:2a:94:4e:35:
1a:83:50:62:c1:80:a7:9c:4b:f3:22:1e:0b:1e:a3:55:00:47:
19:3e:2d:a8:18:0a:35:ae:6c:6a:4b:63:c7:d1:c6:a5:6b:17:
c9:83:2e:11:63:9c:91:80:42:a1:bd:89:db:43:8b:89:40:75:
93:a3:95:2e:a9:3a:a1:f3:46:90:a2:9d:3c:c7:f9:cf:15:28:
f1:fb:79:5e:73:c5:dc:3c:2e:7f:6b:47:54:7a:90:10:16:13:
69:c9:82:63:88:c0:b0:ec:7f:4c:ca:a2:6e:25:c7:b7:d9:f3:
4c:8d:53:f5:27:94:7f:34:8a:8f:4a:21:77:03:da:cb:df:a7:
0f:5e:01:8b:82:31:44:7f:12:dc:34:86:dc:2b:a4:fd:31:39:
4f:8f:86:02:57:65:41:e9:bb:9c:6e:f7:e1:4a:f1:73:cb:ed:
9b:e8:8f:49:06:de:af:6e:58:ae:4c:f5:d9:71:0c:ca:05:02:
a5:da:f9:3f:71:0d:28:be:e9:41:0b:15:cd:7e:cc:df:2b:4c:
75:23:8a:44:cc:9e:a4:2b:8f:24:95:c5:e3:cd:f8:0d:6a:ec:
bf:9e:5e:96:9f:67:57:52:fb:02:5d:7c:a1:de:59:24:b4:b0:
e9:d6:72:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:16 2026 by rpki-client