Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier: jakZCE6167D/AI9E4K2UjTw0uVW/6X22izMgKvLlKIQ=
Subject key identifier: 7B:8A:F4:D6:58:0A:C6:F0:27:F8:8C:7C:43:65:A5:2C:47:04:5F:EF
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 019FA9E315FAC9F4EBFCC0B2E6209E9A0522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number: 093C
Signing time: Tue 28 Jul 2026 18:00:59 +0000
Manifest this update: Tue 28 Jul 2026 18:00:59 +0000
Manifest next update: Wed 29 Jul 2026 18:00:59 +0000
Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: QyDjl4DfwCh6VF6vUMDk6InawdGOIUFztEme5VLiFgc=)
2: _sKUqr_T2WU5wpJt5pENqGxaGNg.roa (hash: 26WyPtt0JWgZh/PV/eTd/0WIUbfzzYa6z8NjLk7cJ+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:15:fa:c9:f4:eb:fc:c0:b2:e6:20:9e:9a:05:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Jul 28 18:00:59 2026 GMT
Not After : Jul 29 18:00:59 2026 GMT
Subject: CN=7b8af4d6580ac6f027f88c7c4365a52c47045fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:0a:b4:3b:80:1e:16:b1:c2:f2:7e:82:57:
5a:1f:cd:1b:d5:20:07:6c:d9:6c:ec:1b:04:7b:1d:
d6:85:00:bb:6e:2f:a3:0f:d0:16:ac:1f:6e:24:cc:
35:7c:a7:9c:52:4a:ed:5d:63:78:d9:d3:95:74:9f:
49:d3:ec:4b:a8:5f:ec:a7:03:6b:6e:dc:21:2b:29:
51:8e:77:63:f5:eb:cb:22:0b:5b:3d:24:79:c3:3c:
0c:89:d5:81:7c:2d:07:06:77:0e:3c:17:3d:6a:dd:
73:8b:0a:59:81:52:14:cc:ee:8a:42:5d:bc:92:4a:
80:54:c2:a5:b4:d9:dd:ed:96:bd:62:bb:7e:67:d5:
d2:1c:c5:45:b3:e5:c2:63:32:ed:5d:e9:06:e0:7f:
6d:2d:b9:08:07:f3:2c:c7:5b:94:dc:bd:37:cf:f9:
93:51:b6:de:0d:df:2e:a2:5d:8e:50:3c:ab:bb:d9:
51:1e:69:77:9a:5e:cd:a1:8c:b0:07:a5:cb:45:65:
84:89:5c:53:c3:16:08:c6:19:36:75:bf:3b:85:d2:
c7:c2:62:ba:b9:24:03:30:a5:5d:8f:38:2e:85:15:
c1:c6:35:39:d7:91:74:f2:9b:25:08:5d:f0:3c:94:
f1:cb:01:af:32:2e:b5:0a:00:70:db:39:85:c3:d4:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8A:F4:D6:58:0A:C6:F0:27:F8:8C:7C:43:65:A5:2C:47:04:5F:EF
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f0:19:9f:54:3d:ac:be:12:92:9d:a8:7b:82:b0:ca:1d:7a:
60:a5:a6:1f:72:80:6d:38:93:77:f5:d7:d2:2b:ba:45:d8:5a:
d7:6e:ef:fd:25:05:36:3d:49:7b:ca:e8:3e:6c:fc:db:f9:6d:
22:0d:ca:c5:13:18:07:d0:47:5f:d3:77:0d:b5:09:92:b7:f3:
04:0f:3b:9a:e1:cb:ca:e6:db:31:55:5a:7f:0e:cb:9c:55:c7:
16:b1:4d:1a:b3:67:bd:7a:c5:91:7b:cf:ea:98:63:a3:1f:fb:
28:87:60:52:ad:e8:2d:34:00:e7:3a:8b:dd:e3:17:a0:b0:04:
91:ec:e5:ac:7f:b4:47:83:a1:89:65:bc:31:ae:8a:39:85:2d:
5c:c8:65:65:0d:bd:d9:eb:64:1d:7d:0a:2f:b8:d1:49:62:c5:
91:b5:ff:57:b6:11:5a:b4:b8:ff:b6:1b:1c:40:46:4f:82:45:
fb:10:fe:59:8b:34:be:bb:10:51:bb:e8:09:39:44:a5:19:ab:
1e:a1:65:55:b3:8e:b8:b2:aa:f6:a7:68:2c:77:8b:13:cd:ba:
ec:3b:ad:78:83:3f:f9:f0:a0:6e:b4:46:53:66:e5:4e:8e:30:
f4:5c:d3:47:ba:e7:a5:6f:89:17:8e:ef:64:c1:a8:84:e1:fe:
bc:c1:e7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:13 2026 by rpki-client