Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: V1GlIAKBenLUMzpcP/49nj5S9pJa77LFlo7Y0QUxXvY=
Subject key identifier: AC:34:0C:E9:E7:BC:A5:89:44:61:95:7E:90:D8:30:C8:B7:70:A1:D3
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 019FA8625D15F52E8D1BD32A2685EFD1FEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 1109
Signing time: Tue 28 Jul 2026 11:00:46 +0000
Manifest this update: Tue 28 Jul 2026 11:00:46 +0000
Manifest next update: Wed 29 Jul 2026 11:00:46 +0000
Files and hashes: 1: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: 1QM1zp7DVzF7+zYwnDVnyBsD60b3njc5sLFILOu+T00=)
2: KSH2fRv0teMM2HR_6KPEmIw6HD0.roa (hash: 8pAxut1VxGbv9FEqSSh94jLC+LFareEYNCETeb8cRjQ=)
3: KVPekIBwtTvoWS8IiLuKU8fAiUI.roa (hash: 9+g9Bq8fgBmveWIVh0SbGqbsAm+bPN0oN6NyLxgE/rA=)
4: mU4-NFKo2wAUwnqL-AxsnDYr11w.roa (hash: 4tZtiaBHFlxvkRx3oe+by1E5v3CH2eyZIsgfyBPHBbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:5d:15:f5:2e:8d:1b:d3:2a:26:85:ef:d1:fe:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Jul 28 11:00:46 2026 GMT
Not After : Jul 29 11:00:46 2026 GMT
Subject: CN=ac340ce9e7bca5894461957e90d830c8b770a1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:00:5e:c2:0b:22:de:fb:1b:9f:62:4c:95:
3e:68:65:47:5c:5d:41:97:e0:a7:be:54:79:b8:f1:
c0:50:cb:bd:97:c8:8e:fb:2e:89:a5:33:e0:33:03:
bf:c6:aa:1f:59:36:5e:7f:8b:27:fe:66:b6:19:27:
97:e9:3c:2d:fd:81:d4:8c:bd:71:a4:47:84:55:c4:
58:17:63:07:1f:f1:9c:56:9b:a1:07:da:ea:ce:d5:
2f:22:e0:91:30:73:44:8a:b3:6a:e5:bf:71:45:0b:
64:bc:f2:43:00:56:71:d7:c2:a3:c8:cd:07:d5:d3:
1b:51:7b:b7:de:c6:06:b2:45:57:06:ed:18:64:8d:
bc:1b:8d:72:8d:61:36:32:2d:79:a8:54:5b:c8:1b:
5e:12:6c:10:4b:12:1f:20:69:ad:4d:63:d6:fb:a8:
c7:1b:d9:68:0b:f5:56:89:e1:39:6f:e9:6a:59:b4:
3c:6d:ea:d4:5c:94:4e:6f:3f:5e:d9:3d:8c:28:d3:
f3:60:cc:7d:f7:d2:53:e5:68:92:b6:59:a3:1a:62:
b5:bd:69:53:67:bc:36:69:3b:cc:ce:e2:32:31:44:
34:51:68:fc:b3:21:76:76:97:93:cd:e7:c0:54:21:
f8:e9:e1:34:37:8b:c7:32:6c:e6:4e:ff:5d:de:99:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:34:0C:E9:E7:BC:A5:89:44:61:95:7E:90:D8:30:C8:B7:70:A1:D3
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c0:3e:0d:c4:34:9d:29:ed:d1:e2:04:8e:72:29:f9:07:50:
0d:b9:73:24:6c:99:cf:d5:1e:47:4e:17:d5:3d:58:db:df:80:
fb:5a:23:dc:64:16:c4:59:71:87:d6:7d:92:21:6c:87:66:db:
12:49:5c:c0:17:89:f9:8e:0f:04:00:84:c6:c9:52:1f:07:2d:
a6:a8:19:ee:56:9d:b0:8e:8b:18:f7:05:1c:9e:31:a4:8e:f0:
ad:47:91:ec:f4:5b:39:7b:8c:fd:7a:93:eb:09:36:0a:7b:16:
5c:42:38:e8:a1:11:a5:c8:47:a8:b5:9b:04:89:4d:24:4b:de:
f9:98:ea:6f:04:60:16:5c:b3:39:be:4c:c1:f8:e3:d2:f6:1c:
76:24:80:26:7a:d7:a5:c8:1f:41:22:c6:7c:1e:e1:e3:cd:62:
68:6b:72:a7:d5:2c:15:80:43:c3:75:ce:ef:21:1b:fe:b2:6e:
01:f9:f9:d8:88:88:90:d4:c6:33:1f:4a:20:99:39:aa:7a:af:
03:69:44:85:ad:08:07:07:13:7e:97:cf:15:0e:c2:a7:62:f7:
26:d0:82:b6:94:d2:15:98:76:85:63:4b:83:3f:a1:01:d4:30:
79:85:86:f4:46:c7:7b:a6:68:63:92:fb:33:1a:68:0b:e6:34:
bb:f4:49:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:56:39 2026 by rpki-client