Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: KGxRPDeaRQqXZn/rABRbjIpziprr0AN0ByNoM72MOLY=
Subject key identifier: F3:1E:09:C4:EC:4D:0E:B6:F5:1F:8A:38:F4:17:70:B2:3B:8A:BB:EE
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 01A0024AD1D2431AA9D3C535C36309D81110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 13E7
Signing time: Fri 14 Aug 2026 22:00:52 +0000
Manifest this update: Fri 14 Aug 2026 22:00:52 +0000
Manifest next update: Sat 15 Aug 2026 22:00:52 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: cUIEhOC7U+J5hSq+VCIj2jy/FXoKAvhsWUXOTN677DE=)
2: 5NCPJAHZuuvT_Y3OLL7H8HuHVKg.roa (hash: Bkja5xY8wPIuCivflgBr5uP8e0j+G2X5xzd/ng/E16A=)
3: D6_vhrKcdm3SeocdHjY0RSl6kYk.roa (hash: 7HV4a9Y3R1hQs2yh9xBaiZSckY1ztfOLxpIEor4i7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:d1:d2:43:1a:a9:d3:c5:35:c3:63:09:d8:11:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Aug 14 22:00:52 2026 GMT
Not After : Aug 15 22:00:52 2026 GMT
Subject: CN=f31e09c4ec4d0eb6f51f8a38f41770b23b8abbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:80:aa:50:91:8f:11:46:49:9a:ce:28:9f:
65:70:41:8d:d3:68:40:db:41:a2:4a:72:73:60:e8:
34:54:61:80:b7:6f:f9:75:47:6f:e6:50:a5:25:c6:
ca:18:08:5f:ca:da:9e:c7:6d:69:38:de:0e:cb:d8:
71:02:76:71:0f:d0:0c:cb:cf:dd:63:65:2a:1a:0c:
4c:93:53:92:4e:a9:20:ac:cd:e1:f1:bb:92:e6:09:
e4:d3:3a:8c:b2:fc:3b:15:80:91:70:50:38:55:4a:
84:e9:af:4a:72:c0:95:5c:9c:47:3a:fb:31:c2:ff:
ed:a6:82:79:bb:f5:d9:66:33:5c:ef:83:f6:74:28:
55:a4:31:9f:00:fd:06:e5:cd:b9:48:22:50:1b:06:
f0:c7:c2:f5:df:98:87:67:1a:e7:73:96:3a:fb:64:
7e:2b:84:b3:9f:1b:cf:71:98:a4:11:91:7c:87:e8:
1e:ef:41:31:5d:80:d5:83:a6:c8:bc:81:13:35:bf:
9c:6e:06:02:c5:85:ec:93:59:37:c5:5f:96:2a:4f:
79:57:ee:9e:b4:6f:7f:49:89:71:31:7d:bb:d2:0d:
06:e7:77:1e:11:04:6e:67:01:a5:1a:6c:90:de:00:
06:8d:30:f5:47:ed:ae:9b:84:e4:5d:14:87:4e:e2:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1E:09:C4:EC:4D:0E:B6:F5:1F:8A:38:F4:17:70:B2:3B:8A:BB:EE
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c6:e0:58:05:1b:19:80:e6:2c:b8:ab:b3:dc:f1:de:8d:b1:
3e:cf:ea:45:77:c6:1b:a8:3f:90:34:5e:43:cc:8d:aa:3d:fa:
ce:97:8e:ab:03:a6:b5:59:7d:8a:61:ae:ab:62:07:53:27:d7:
9a:5d:28:19:f9:55:57:eb:72:11:53:44:d5:78:b2:0f:90:8a:
81:ec:88:be:01:4f:d0:85:f2:70:15:91:8f:d5:2d:b1:4e:f4:
4a:db:48:25:fe:71:26:27:4d:fb:b3:f0:5d:e7:13:ac:2d:49:
6b:8a:82:33:09:ee:70:70:23:60:7b:82:90:f0:fc:90:78:00:
f3:44:3c:69:1a:12:03:28:b9:c9:94:65:85:b7:ab:da:d2:69:
02:45:ad:33:e4:d2:17:64:a7:cb:f6:c3:e0:e8:e2:9a:97:02:
2b:0c:67:bb:b1:b5:5f:d3:0e:6b:51:96:eb:7d:f5:22:f4:a8:
42:e5:ac:e9:57:ab:a4:d4:56:ed:28:a4:2d:8c:a6:0e:95:73:
4d:74:c3:6b:f5:e5:87:50:1d:6c:ef:ea:d4:03:fc:73:f4:4f:
c1:a9:bf:86:c8:82:62:12:63:59:3c:3a:5e:91:1f:34:91:20:
8f:3a:4f:27:5d:d8:d6:0a:c2:e9:4e:7e:f7:3e:ea:46:1d:e3:
a2:02:0f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:37 2026 by rpki-client