Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: 5vLNV75Xem4UCuvNrqf9WXcY+4K0ol5R1Ws14N37090=
Subject key identifier: 64:4F:F7:3D:45:E9:CA:DE:ED:2B:34:5A:23:E5:BD:61:47:A2:FB:22
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 019F18306BA3FD59330A3637012C13477B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0F88
Signing time: Tue 30 Jun 2026 11:00:54 +0000
Manifest this update: Tue 30 Jun 2026 11:00:54 +0000
Manifest next update: Wed 01 Jul 2026 11:00:54 +0000
Files and hashes: 1: 1-aGDqZW0qQT1CMUWfY2StRi45As.roa (hash: B8Rl9Gai4vi9Uu6NQRhUSO+YTREX6IaIlJN6RMt60oA=)
2: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: MPPDBGopgC7yynN2NEYlfzTTsUATLOasae5RHPbWHWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:6b:a3:fd:59:33:0a:36:37:01:2c:13:47:7b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: Jun 30 11:00:54 2026 GMT
Not After : Jul 1 11:00:54 2026 GMT
Subject: CN=644ff73d45e9cadeed2b345a23e5bd6147a2fb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:d6:29:ff:78:b1:4e:71:fa:ca:b7:6e:ad:
5f:08:66:bd:58:17:9a:3e:3e:c5:fb:31:56:85:14:
fe:49:05:86:d3:b2:b7:fa:3a:5e:e7:84:84:8d:e7:
42:a3:b4:4d:32:4b:8e:90:6e:b5:c4:bc:41:e0:c1:
24:4d:4c:5e:ce:ce:8a:50:a4:7c:a0:d1:e5:82:a5:
fb:ce:2b:fb:15:54:dd:f5:53:f3:75:91:7b:a7:7c:
7a:30:46:12:90:05:5e:b4:1c:9d:47:96:09:95:77:
5e:d9:4a:fd:65:f0:96:9e:13:93:23:1b:e8:e5:ef:
7e:52:26:64:71:b7:be:1a:9c:91:8e:11:7c:6b:b0:
14:f9:18:43:1d:51:b3:a8:ca:59:3e:9c:6e:dc:3e:
06:03:87:18:cb:d8:b5:2d:58:ac:b1:40:fe:54:5e:
e4:cd:e7:3f:da:79:36:ef:2a:43:8e:4e:09:95:9a:
f9:7d:b0:76:cc:72:75:df:a6:a7:a7:f9:77:ea:98:
d9:a6:0e:ba:67:20:e8:62:02:77:17:67:ff:44:2a:
25:67:a2:e7:f2:4b:aa:0e:fc:5f:03:38:e0:b4:a0:
4a:21:05:66:18:eb:cc:7a:1e:5b:fe:55:bf:7a:98:
bc:45:b1:5d:b0:c3:f7:f9:3a:ad:60:a6:63:46:06:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4F:F7:3D:45:E9:CA:DE:ED:2B:34:5A:23:E5:BD:61:47:A2:FB:22
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:40:46:27:e7:9c:39:51:50:d8:fe:a0:e6:61:4a:28:be:6c:
39:53:8e:4b:2a:4d:3f:eb:ed:4c:58:06:a1:79:38:f5:f9:8e:
fb:fe:ab:2e:7a:8f:68:ae:76:5c:39:ab:fd:8f:b6:b8:dc:82:
8c:e2:67:86:7f:d9:ca:9c:d4:6b:51:39:d5:49:14:83:8c:e1:
93:fa:41:77:51:11:dc:58:b5:75:7a:2e:68:83:8a:e3:96:44:
e6:21:36:b6:9c:e3:d4:f1:ef:1a:dc:41:7e:97:18:54:a5:d5:
79:56:9e:a2:a1:56:97:ce:9a:78:89:8d:f7:02:a4:c8:15:0a:
65:d4:52:24:0c:f0:22:97:12:b2:e8:1a:fa:97:c1:e7:7e:42:
17:ac:cf:9d:3e:6c:30:14:d0:61:1a:1a:5d:29:31:3f:9f:76:
48:b7:32:99:3a:2c:ef:49:56:e3:d3:4e:18:9d:0a:48:01:95:
0f:a2:a3:8a:95:ef:34:63:10:32:be:93:36:db:7a:36:e5:fa:
7e:1f:6c:e4:80:c1:af:71:be:36:69:4e:3f:b4:d6:4d:6c:13:
ca:0a:5f:07:14:c7:78:b3:8a:43:72:cf:c1:21:74:b1:72:e2:
e0:c5:2c:f6:ab:07:6a:c2:f5:90:44:46:12:c5:ed:b2:b4:88:
79:1d:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:20 2026 by rpki-client