
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier: vkGlCluOr77kt3yoZlVaNdqiRMEhod+F52vNIPDQ2Qo=
Subject key identifier: 10:B6:24:2A:E8:35:49:D4:03:73:C1:37:9C:55:A5:72:69:70:EC:E7
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial: 01A000CA59ACE0EEDD60AE5C4E06CD690BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number: 135D
Signing time: Fri 14 Aug 2026 15:00:56 +0000
Manifest this update: Fri 14 Aug 2026 15:00:56 +0000
Manifest next update: Sat 15 Aug 2026 15:00:56 +0000
Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: cl9/50OsoMJ3fIcSRui9UFq5jfzxre0CCr0QX+oravg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:59:ac:e0:ee:dd:60:ae:5c:4e:06:cd:69:0b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de122d172c13b15291e41f945681525826fef892
Validity
Not Before: Aug 14 15:00:56 2026 GMT
Not After : Aug 15 15:00:56 2026 GMT
Subject: CN=10b6242ae83549d40373c1379c55a5726970ece7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c6:d1:cd:1c:f7:0a:ef:22:22:40:7e:45:a9:
f3:04:2d:9f:91:e4:79:7d:a6:37:4c:29:c3:19:4b:
6f:73:57:34:6f:c4:c7:bd:05:9f:f6:aa:03:7a:9c:
07:85:b2:f9:5a:c2:20:b3:3e:6b:a1:9b:88:b8:a0:
c3:eb:a8:a3:3a:d6:ad:d8:0e:7d:41:3c:03:3b:eb:
c1:8c:79:01:be:d0:b3:7c:96:a8:5f:10:b4:ac:1a:
42:56:56:91:25:85:15:47:33:c6:eb:1c:05:bd:8f:
1b:e5:6c:ed:38:98:3b:2d:f1:ac:ef:7c:12:c2:a0:
b9:34:86:7c:80:55:07:8c:04:ca:8f:e8:72:6b:26:
d2:01:fa:74:b8:d7:d4:bd:44:af:01:98:3c:52:71:
0e:6f:f9:cb:af:f9:bc:82:59:8e:06:f8:c6:f4:54:
9f:57:4c:1d:55:68:d1:ed:d8:db:65:9a:fe:f5:8a:
9c:61:73:7d:ca:9f:01:da:f2:a0:54:cc:9a:54:a5:
62:3d:8b:f8:5c:69:ea:09:89:17:0c:e4:aa:51:c6:
6b:12:dc:df:a1:ab:57:65:d5:69:55:99:92:cb:13:
ea:fb:fa:46:f8:10:36:4b:45:25:ba:5f:da:07:0f:
21:1f:c5:ce:b4:42:4a:4e:15:9e:e3:f2:a2:15:3b:
83:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B6:24:2A:E8:35:49:D4:03:73:C1:37:9C:55:A5:72:69:70:EC:E7
X509v3 Authority Key Identifier:
keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5c:a2:49:74:17:47:30:b1:8e:15:0c:a9:25:8c:85:98:46:
6f:29:ce:b5:0b:a1:53:fc:49:3e:1c:e3:0e:d7:77:72:0d:e1:
a7:26:73:5d:14:62:27:d6:c6:ba:4e:88:b3:19:3f:8e:08:94:
3e:00:eb:4d:2a:f1:65:14:78:49:0c:65:15:b5:27:ff:0d:a4:
c3:5d:3e:fd:b6:06:d4:fb:40:7a:e9:76:28:72:97:c7:83:77:
de:e9:ba:37:0d:b0:30:79:3d:fb:f0:98:0d:64:30:36:c3:80:
97:71:9d:0b:21:8a:fb:de:18:f4:95:b6:ec:98:fc:54:b2:0a:
ec:1b:3c:c6:6f:cc:03:5b:a3:ce:f1:fc:d3:7e:6c:71:41:3f:
8a:d4:3c:8f:ad:99:53:28:72:55:48:d2:6b:51:cc:94:89:2c:
b4:d9:f7:a8:51:d3:7b:ac:5d:64:42:2f:ef:d8:c4:bb:6d:fe:
49:bd:03:f6:0d:30:54:03:8c:30:fd:a2:e7:4f:ec:40:70:f9:
83:10:99:82:1c:35:70:9f:f5:90:31:02:15:aa:5a:fc:2f:b8:
a8:1f:1a:b5:c4:87:e2:a2:88:09:83:6c:32:87:3a:2b:ab:12:
ce:61:37:32:aa:ac:67:02:4b:a7:74:7a:1b:07:87:85:ef:f8:
34:83:9b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:43 2026 by rpki-client