Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
File: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft (raw, json)
Hash identifier: xb6kHUT44mzjq4BToluOUSiNeiL+YuTGHR83iK4M4DU=
Subject key identifier: 16:15:D2:0A:68:08:BC:B4:CD:38:C3:22:E1:9B:C2:61:AC:E2:EC:8E
Authority key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
Certificate issuer: /CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Certificate serial: 019FA906ECD2141F39D31396A5602F58DA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
Manifest number: 12D4
Signing time: Tue 28 Jul 2026 14:00:31 +0000
Manifest this update: Tue 28 Jul 2026 14:00:31 +0000
Manifest next update: Wed 29 Jul 2026 14:00:31 +0000
Files and hashes: 1: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl (hash: WM0xHogq8xLYwZHIGat8RI/H/rwW2czF2JmJ7ITMD2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:ec:d2:14:1f:39:d3:13:96:a5:60:2f:58:da:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Validity
Not Before: Jul 28 14:00:31 2026 GMT
Not After : Jul 29 14:00:31 2026 GMT
Subject: CN=1615d20a6808bcb4cd38c322e19bc261ace2ec8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:fd:2f:89:37:63:38:a5:76:86:85:1c:af:
60:46:2d:8a:14:d9:ff:8c:1e:a4:5b:b2:37:0b:78:
4d:d2:ab:bc:72:c3:ae:21:51:e4:14:91:87:1e:76:
9b:99:28:21:d1:fd:ac:ae:c0:84:86:63:a5:3d:54:
dc:cb:52:c7:55:62:bd:40:b5:b4:b0:57:3a:30:4f:
ce:27:07:ab:5c:a8:8e:d9:bd:ab:3d:d0:09:d1:62:
e9:05:53:95:b3:8b:93:b8:5f:4c:34:20:36:5c:64:
93:32:7a:2d:e3:88:24:27:7f:bb:9f:e4:72:a9:9f:
2d:89:4d:c4:5e:01:f5:9b:fc:6b:d9:34:41:21:4c:
78:f4:fc:12:fa:4f:25:90:d7:c1:b8:88:67:a2:e8:
7f:8a:6b:fb:f9:1b:bd:3b:cf:34:1e:c9:fe:34:85:
2e:be:c7:cc:d1:91:ee:63:2a:f8:21:cf:f7:4d:4c:
a8:8d:ce:7b:5b:99:9f:6d:5e:6d:60:3f:eb:f9:38:
59:98:1f:65:a7:50:f7:3c:e4:89:57:fe:e7:24:e8:
a4:c6:a9:f8:da:e0:c9:5c:0f:37:10:9c:d7:f8:56:
6f:70:95:70:8a:ac:b4:fc:a7:71:82:82:9e:e5:f3:
d9:d3:c0:77:bc:41:79:42:c1:66:aa:12:88:49:23:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:15:D2:0A:68:08:BC:B4:CD:38:C3:22:E1:9B:C2:61:AC:E2:EC:8E
X509v3 Authority Key Identifier:
keyid:DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:46:4c:30:51:6c:f8:dc:45:8a:62:3c:df:d4:bd:fe:a7:01:
2d:be:7f:5a:6e:e8:cd:ad:e5:11:b8:b6:e6:f4:f0:82:f8:ef:
ca:95:ba:64:52:38:37:71:63:e3:35:33:e9:a5:13:a3:6c:f1:
2c:2c:6c:01:89:65:77:6e:b5:27:38:50:6f:b4:bc:21:ab:bb:
9c:fc:e1:20:bd:2c:b6:ff:0c:16:7e:3e:a2:ea:e7:9f:67:aa:
e8:be:27:4b:06:4c:18:8b:a6:66:cb:5f:70:a5:dc:e6:c3:65:
91:b4:fd:5f:02:64:91:25:bf:88:d7:df:3e:c0:1d:1d:19:4e:
ca:a9:8d:4d:56:de:48:3c:ac:91:05:80:c6:7d:58:7a:e6:22:
a5:45:76:85:a8:4a:2b:c1:24:2c:bd:00:00:a5:0e:98:f1:07:
62:ce:5a:3f:25:ea:5c:f7:fd:07:de:84:12:bc:92:5b:90:b8:
58:ea:13:42:a0:87:da:ca:72:a0:8a:dd:ce:a9:2a:09:80:2b:
bf:52:f9:d2:f0:d5:8c:76:30:f5:1a:8e:4a:d0:9e:f4:c6:03:
ed:c3:39:ef:74:1d:c4:f6:a5:e4:cc:77:17:43:e2:4f:33:59:
44:60:ce:46:c7:7e:14:68:cb:b0:0f:64:3d:be:d2:4e:54:2a:
c6:d3:6f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:10 2026 by rpki-client