Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
File: t3FF0lazJRKdNodQzr9JIhtrV8I.mft (raw, json)
Hash identifier: 8fXlRRapKuede239/D/OBbFYthB2JZjWv2BKxSZfQqs=
Subject key identifier: DE:D9:18:66:1B:03:F8:67:94:8A:61:00:00:C6:52:FA:28:50:45:66
Authority key identifier: B7:71:45:D2:56:B3:25:12:9D:36:87:50:CE:BF:49:22:1B:6B:57:C2
Certificate issuer: /CN=b77145d256b325129d368750cebf49221b6b57c2
Certificate serial: 019FA8D00190E218E8FA972B716BAA28627D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
Manifest number: 014F
Signing time: Tue 28 Jul 2026 13:00:31 +0000
Manifest this update: Tue 28 Jul 2026 13:00:31 +0000
Manifest next update: Wed 29 Jul 2026 13:00:31 +0000
Files and hashes: 1: t3FF0lazJRKdNodQzr9JIhtrV8I.crl (hash: S8dN75dBHJqiFwPnqLyTyRkQdPbSPWBtAxh37ro720o=)
2: wRfcorFgN2_ON_mjlaFktvT4uRU.asa (hash: ZHtKh7SS42pxcreIiENfq4OCbEUkP3XNxuPYX52/7jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:01:90:e2:18:e8:fa:97:2b:71:6b:aa:28:62:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77145d256b325129d368750cebf49221b6b57c2
Validity
Not Before: Jul 28 13:00:31 2026 GMT
Not After : Jul 29 13:00:31 2026 GMT
Subject: CN=ded918661b03f867948a610000c652fa28504566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:30:65:6c:06:9d:89:ef:84:db:0e:e9:45:
eb:2a:cf:43:7c:3c:b0:be:01:81:86:13:31:54:d5:
ef:b0:98:a4:29:23:e1:58:81:6a:28:68:f1:5a:53:
08:5c:97:2c:07:9f:73:4b:68:4d:15:3d:35:47:12:
c7:5d:9a:5a:9b:8e:d3:8e:c2:c8:69:91:9f:b6:da:
fc:38:21:c3:e8:e4:92:cd:d2:69:ce:ce:18:55:0f:
ca:10:c6:8b:fd:f4:c5:44:07:58:37:90:7a:32:62:
0c:95:46:0f:5a:e9:ca:b9:9f:f4:5a:b4:a2:7d:2a:
c8:88:41:16:7e:3c:cc:ef:58:5e:8e:f2:9a:fc:d4:
23:ff:f6:ec:d9:78:84:cb:2e:bf:7f:5d:39:a8:e1:
b9:03:53:e5:b1:2d:47:d8:6a:8e:3c:6f:57:76:17:
2c:ec:da:85:31:df:4d:e7:66:ba:0e:ab:4e:63:72:
e9:ff:08:88:6d:4a:46:4d:f5:b8:47:57:e5:0c:5b:
67:68:b6:7c:ff:df:21:ed:3d:cf:ef:15:56:cb:11:
35:16:74:7f:6c:40:0d:77:7e:1b:9d:55:23:d0:c3:
1f:db:5b:14:f2:a7:15:05:f0:31:ca:b5:4f:93:e3:
bf:d2:d4:12:02:2d:0c:e0:cc:2c:04:44:f0:89:6b:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D9:18:66:1B:03:F8:67:94:8A:61:00:00:C6:52:FA:28:50:45:66
X509v3 Authority Key Identifier:
keyid:B7:71:45:D2:56:B3:25:12:9D:36:87:50:CE:BF:49:22:1B:6B:57:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6b:0a:c2:03:db:9f:bc:6f:d3:d4:c8:35:a9:c1:5c:7d:94:
56:55:2b:a2:ea:f2:75:0b:b6:97:42:94:e2:15:58:5d:78:3a:
a3:71:bf:9f:9f:7d:b7:32:6a:68:3b:7a:cf:d0:8a:59:15:da:
33:a3:6e:f6:bb:b6:76:f1:69:a0:15:54:50:31:6f:52:56:f0:
e1:15:5d:c2:e7:27:14:4a:f2:6c:f0:2a:a8:9a:b2:91:88:4e:
41:7d:dc:b5:09:c7:3a:98:84:5c:22:6e:59:fe:df:cf:51:c5:
95:21:26:d9:77:a2:2a:46:e4:48:28:85:be:c0:bc:27:16:fe:
5b:81:c0:f1:d1:70:8c:9b:e3:bf:4b:d7:18:18:79:1b:79:08:
6a:a2:62:ee:6a:58:81:33:e4:3d:0a:e2:f6:1e:0f:be:3d:4f:
a0:05:6a:8f:8c:e0:3e:db:aa:25:0c:01:aa:d1:06:a1:27:55:
26:af:c8:02:05:70:68:3a:40:bb:21:c8:cd:2e:28:4d:c5:f4:
c2:ee:25:c7:9b:b7:33:f3:cd:29:f7:92:c3:32:8d:e1:77:3e:
04:a8:d6:c8:11:d5:f0:44:8b:0c:0f:41:75:c7:43:cb:68:50:
5e:fb:ea:c7:b8:17:cd:a1:1d:77:08:82:e7:02:d5:a5:68:b7:
67:1e:90:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:51 2026 by rpki-client