Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier: HVr2bslOQL3oj89jeouBWZTxkeypwdzYX6vgOPXsstM=
Subject key identifier: 64:9F:59:CF:38:3E:C1:74:1C:70:2B:A7:60:C5:0D:DF:1E:80:D4:8D
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial: 019EFBA880CD2EDE1CDB8B52C9DD6D3162F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number: 1088
Signing time: Wed 24 Jun 2026 22:03:04 +0000
Manifest this update: Wed 24 Jun 2026 22:03:04 +0000
Manifest next update: Thu 25 Jun 2026 22:03:04 +0000
Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: q6tCtVrpWoPt1oohT1absaJgSFjQ+GZa/wol6dB1aAE=)
2: G0H1NZGAbtsyoA2e--eIMeks25w.asa (hash: hXpme5X4li6UsZQl1l4A/uCi4ohrlAjpSmRIc/a8sgw=)
3: MJozjNqLnPQyzg6RwUr67wJnDj0.roa (hash: GrVcVPg8QNDGergH76PpUDqLKrseVEoNPTuvrqjQXRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 22:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:a8:80:cd:2e:de:1c:db:8b:52:c9:dd:6d:31:62:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Validity
Not Before: Jun 24 22:03:04 2026 GMT
Not After : Jun 25 22:03:04 2026 GMT
Subject: CN=649f59cf383ec1741c702ba760c50ddf1e80d48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:07:9c:e6:27:a6:b9:1c:d6:0b:63:87:aa:
76:3c:3c:2a:86:7c:d9:54:a8:84:a8:21:5b:01:e2:
1f:9e:ec:46:4b:32:e7:63:21:2b:9b:cc:9f:32:3a:
36:56:91:96:f7:e1:47:f6:49:99:8d:56:17:12:0b:
d0:30:f3:39:08:e6:c3:25:52:11:ac:1a:b7:90:d5:
72:6c:9a:23:cf:38:e9:3f:2f:6f:05:38:0b:16:ab:
22:1e:d5:1c:6c:19:17:0c:0c:71:7c:90:bb:75:9f:
cb:c3:d8:0f:c6:ff:f5:ed:c5:16:7b:00:0a:64:3a:
cf:d0:9b:ed:1a:49:1d:eb:b6:ed:c3:72:37:9f:f3:
f4:df:3b:2d:fd:01:c3:93:1d:18:79:71:34:ea:8a:
e6:8c:52:4f:db:ff:c6:57:2a:29:e5:56:2b:bb:27:
72:55:f4:46:46:55:a8:9f:ce:60:b7:fa:20:61:ee:
d9:5a:e3:b1:0c:a4:e2:72:fb:93:b1:d6:0b:6f:fc:
4b:6e:82:af:24:60:e7:19:c8:9d:30:56:77:72:8e:
b1:42:60:27:f3:63:2b:12:4c:80:b0:69:98:0e:1c:
d5:3b:7f:98:0f:01:50:16:18:5e:24:6a:54:0c:bc:
94:50:0a:0b:aa:43:3c:03:68:30:a2:14:e2:2c:c8:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9F:59:CF:38:3E:C1:74:1C:70:2B:A7:60:C5:0D:DF:1E:80:D4:8D
X509v3 Authority Key Identifier:
keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:92:bc:2e:56:84:8a:b1:1e:6b:38:8e:69:01:61:52:c1:01:
af:92:b8:d0:e8:4d:9c:05:f7:ba:19:78:5f:65:09:df:85:c9:
0b:61:86:06:3c:e6:0b:80:29:a0:a9:cd:55:bd:84:dd:cc:3b:
d6:54:93:22:d4:f4:af:90:e8:b7:71:af:c5:c4:f6:ae:8e:5d:
98:7f:f3:e6:e4:fb:49:9f:69:60:bc:24:fa:1c:63:9e:2d:c9:
86:c1:c5:66:b3:92:85:00:b7:bc:81:c7:ba:ad:ed:00:fd:fd:
f0:ea:d8:67:1d:56:87:d6:d1:18:a2:78:14:a5:15:74:bf:44:
7e:3a:de:25:22:0a:ce:b5:a6:a2:88:fc:31:89:09:f9:37:78:
4c:52:49:9c:f5:12:c2:11:af:d5:91:36:b2:a9:9a:04:82:e4:
14:2e:01:10:eb:9b:b0:64:ca:2d:87:c3:ce:83:19:6d:95:b6:
ab:ef:39:48:63:95:e8:ae:1a:7d:8b:71:0a:1c:f5:ac:0c:55:
4d:3d:ae:52:5d:15:6e:1b:65:c0:f6:d6:6c:91:c2:9a:13:b1:
90:24:74:c5:08:dc:a5:d3:9a:fd:95:aa:f7:96:29:f9:dd:43:
a4:17:ca:c2:4d:33:af:86:c7:ea:4a:d5:85:18:33:b6:e5:c9:
03:69:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:35:46 2026 by rpki-client