Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier: vCYRVzuOY+BMQKMUvoJhfukHLVi4L8Hzk7ADfbwTZ5s=
Subject key identifier: 18:5E:20:F6:EC:1C:69:9D:98:CE:3A:FD:78:95:1D:63:EA:B0:E7:40
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 019F190CE6FFC44CE70BE9166CCCBD8A6E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number: 0FE3
Signing time: Tue 30 Jun 2026 15:01:43 +0000
Manifest this update: Tue 30 Jun 2026 15:01:43 +0000
Manifest next update: Wed 01 Jul 2026 15:01:43 +0000
Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: xlx5/xxvlG7me0/jgeiJF61CBtq8FEmJklFTrAv7MUo=)
2: 6oH-q1WmgKlbF7oPFf0VCjT4cP4.roa (hash: 8fxRfcDqePTH9D6GcvyAsB8XOQ2tsAsMINyYJwfwjDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:e6:ff:c4:4c:e7:0b:e9:16:6c:cc:bd:8a:6e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Jun 30 15:01:43 2026 GMT
Not After : Jul 1 15:01:43 2026 GMT
Subject: CN=185e20f6ec1c699d98ce3afd78951d63eab0e740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:49:7c:a1:37:09:03:23:ec:5f:65:9f:c8:
5d:f6:01:a1:5c:de:26:81:be:fc:ed:b8:3a:c8:1b:
8f:d3:e5:a2:16:b0:00:70:40:58:e2:a5:f6:32:20:
e6:f9:0c:96:8c:45:c0:4a:49:02:73:12:ca:63:d2:
c7:29:ee:c1:0a:0d:8d:37:ac:17:5d:37:13:07:cc:
59:da:52:5d:5d:7b:65:24:7f:d4:a1:48:4f:31:75:
ac:db:03:0a:46:07:99:3d:96:7a:4c:f6:d3:cc:df:
21:fe:87:91:af:1e:7a:05:f2:a8:9c:33:59:84:b9:
19:0c:ff:9c:2d:b4:be:8a:9b:7b:68:e9:c6:0e:cd:
b0:c0:2d:b5:9a:31:46:77:ba:36:54:f5:ef:2f:8c:
34:30:eb:f3:30:d7:1a:bc:fc:cb:74:f8:0d:c5:cf:
ed:01:05:4b:75:fe:c5:64:e9:8f:03:86:e6:2a:96:
08:5b:7b:ac:12:e5:53:96:a8:e3:1d:a7:c7:9a:9f:
5b:44:93:c8:54:d1:09:a9:9c:f5:c9:31:a9:74:ba:
b3:2e:33:38:bd:e6:3e:33:56:4d:46:a1:25:31:4a:
f1:0d:df:3c:97:d1:f6:a6:85:1b:43:38:d0:d8:2f:
f8:43:19:30:19:72:86:42:bb:9d:9f:3b:49:44:67:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5E:20:F6:EC:1C:69:9D:98:CE:3A:FD:78:95:1D:63:EA:B0:E7:40
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:db:18:d9:d7:1b:c5:f0:b4:31:e9:33:8b:d4:ab:e5:ef:38:
4b:84:a2:78:8d:e5:94:e2:9f:c1:21:33:a7:cf:96:ae:de:7c:
f5:78:fa:a9:9b:14:14:d1:e2:b4:84:1a:0b:bb:9c:d9:d9:6c:
ff:59:a7:7c:40:59:aa:3c:ef:fd:27:1a:5c:63:22:16:03:74:
c6:64:3c:99:6b:06:3a:d4:52:74:22:95:fd:6a:c2:3b:5e:b4:
16:99:b3:62:14:26:78:8e:88:bc:55:85:d3:76:eb:11:6f:46:
98:d6:62:49:84:8d:54:d0:0d:ee:67:24:99:d7:3d:af:a1:48:
22:bb:4b:68:0f:5c:4d:4b:70:5b:e3:7a:68:48:9c:65:93:d3:
ef:d7:06:bc:e4:b2:a9:a0:63:aa:65:97:df:ba:a1:dc:b5:13:
2f:cd:e7:2a:8c:85:b2:68:a0:80:22:ea:b6:cd:5a:88:40:69:
57:05:1a:1d:1d:02:69:76:02:51:43:cf:94:44:a0:94:65:0d:
ea:e5:d9:de:0a:de:1b:0c:d0:11:ca:4b:55:d8:08:de:c6:12:
3b:fd:d6:d9:ee:82:1a:b7:96:8f:f5:eb:72:b5:92:bb:10:20:
de:8e:b8:12:71:95:7d:f3:a8:02:5b:cd:92:88:44:e9:4f:e7:
b7:84:57:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:26 2026 by rpki-client