Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier: FESalTQgQjtRdm1J7rrpW6MI6rjkVTfg1gQj9nLLYwo=
Subject key identifier: 19:91:A9:F4:E9:EB:CA:18:CD:96:80:79:CE:B6:E9:8B:F3:87:F8:E2
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial: 019F190C5C0452BEDB52DE297C5216CCE930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number: 0C33
Signing time: Tue 30 Jun 2026 15:01:08 +0000
Manifest this update: Tue 30 Jun 2026 15:01:08 +0000
Manifest next update: Wed 01 Jul 2026 15:01:08 +0000
Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: w7YuKtsxowQrbT1J6M4frmUpDKk36VDZwLD9E/zmJdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:5c:04:52:be:db:52:de:29:7c:52:16:cc:e9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Validity
Not Before: Jun 30 15:01:08 2026 GMT
Not After : Jul 1 15:01:08 2026 GMT
Subject: CN=1991a9f4e9ebca18cd968079ceb6e98bf387f8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:29:04:0f:9a:64:fb:fd:d6:d6:9a:00:6d:34:
71:08:7b:3e:a9:bf:e5:cc:d7:0b:55:ae:d5:eb:03:
a3:b6:56:57:cd:b3:45:41:20:20:b7:c6:eb:04:98:
33:f6:a9:8a:2e:11:d0:04:87:28:fd:9d:a1:fd:21:
17:f9:4b:b1:55:d2:4d:37:49:7b:07:21:32:3f:52:
3c:5c:ce:3d:ad:44:fc:27:f6:4a:59:98:c0:22:5b:
a9:5e:e4:d8:ec:97:b1:98:e4:a1:c2:cf:2a:2b:c0:
f8:77:69:f8:a9:98:84:c9:87:44:40:b5:e9:a9:62:
90:29:f9:1a:19:ed:af:29:4d:00:8d:4b:e3:d9:35:
e4:5a:3e:9d:41:27:50:ba:9f:b8:55:91:63:c7:f3:
3f:f1:01:15:fb:bf:d8:e3:95:2e:ba:dd:12:31:68:
be:e2:35:15:0c:ec:f0:45:bf:97:7b:7e:b0:9c:0d:
0d:6e:67:28:73:9a:8f:1b:65:02:b6:fa:7b:d6:f8:
b0:46:71:3a:ce:17:dc:28:c0:5f:4e:65:b9:cc:ff:
a4:c1:1b:50:40:03:22:2e:99:e3:a7:3c:47:f6:dd:
1d:2c:6e:0e:2f:1b:46:54:15:ac:ee:a5:00:94:3b:
2d:3e:e3:fb:34:41:f8:b2:58:c0:dd:d2:0d:ac:70:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:91:A9:F4:E9:EB:CA:18:CD:96:80:79:CE:B6:E9:8B:F3:87:F8:E2
X509v3 Authority Key Identifier:
keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:56:15:04:24:b4:dc:e7:99:7b:9d:26:b6:17:88:3f:01:24:
a3:48:fd:70:c9:07:2c:c5:d3:09:f9:1b:ee:35:9f:fa:eb:8e:
9f:f3:1d:2e:46:36:a4:ef:71:07:1e:4b:c0:1b:93:a8:44:24:
4c:08:29:44:91:25:c1:b9:ae:c0:0e:88:28:fd:b2:29:33:9c:
61:d5:3d:ae:d7:2b:90:c9:46:4f:e2:d1:82:c2:74:ad:03:96:
e2:49:78:fd:42:ab:50:ce:6e:67:09:5d:20:b2:38:9f:65:8b:
a5:90:c9:17:13:52:58:3f:86:ad:b6:33:37:9c:94:3b:1d:f6:
f2:ff:68:72:73:e5:50:e5:50:cc:26:0f:3b:aa:41:a3:cd:68:
97:7c:b5:51:a7:bc:74:e4:09:63:6b:6e:d1:ac:5c:1d:6b:11:
22:9b:86:27:a2:79:67:12:9e:7b:14:ab:cd:65:6e:dd:9b:f9:
ba:26:98:34:33:f6:09:14:24:a9:fa:e8:63:91:9b:6c:de:6e:
e0:5b:30:5b:2e:44:cf:09:04:de:2f:c4:64:d9:1a:de:9f:48:
b9:6e:01:a4:4c:a6:5b:46:f6:a3:1d:3f:df:fb:bc:0c:48:dc:
ca:ee:80:c7:37:61:81:ab:8b:15:d7:ce:5e:f7:55:d8:f7:2e:
01:7c:f0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:28 2026 by rpki-client