Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
File: 3y3kqfK8Uj318Kf15DJJikLFX3A.mft (raw, json)
Hash identifier: CLZqYBr8PeR+BtCXaVnTDXhdr7mW7tO35NFVCxDVBWA=
Subject key identifier: DD:6E:15:3E:DE:C4:87:58:7C:FD:DA:27:5A:1D:DC:8D:9A:01:EE:8A
Authority key identifier: DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
Certificate issuer: /CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Certificate serial: 019FA18493708AEE1A5B4A47ACCE491A644A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
Manifest number: 0125
Signing time: Mon 27 Jul 2026 03:00:47 +0000
Manifest this update: Mon 27 Jul 2026 03:00:47 +0000
Manifest next update: Tue 28 Jul 2026 03:00:47 +0000
Files and hashes: 1: 3y3kqfK8Uj318Kf15DJJikLFX3A.crl (hash: jHabxU4Cq463P9B+BAPn987G3M7E306dnlMuygDZZEk=)
2: 8XebNTiumaUWcLbgsrPRqEK7yJk.roa (hash: wIkMYGUwRkloiGV8zcV817/8WXtvc8qz+eDzExEQl48=)
3: SU9_tB5lwfHPL_4Kt4ROwFHlUMI.asa (hash: wN65KwAJllI0kxcg5tgjkk0Y4QH9uf/hvRTzQ2pTovk=)
4: xtsoV3YrVhm4MKDjfu3IvjG7q1g.roa (hash: qMRfu2o1bzSJ1p0UvgBKjKi65ckvS8nI12aCVQ8a6vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:93:70:8a:ee:1a:5b:4a:47:ac:ce:49:1a:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Validity
Not Before: Jul 27 03:00:47 2026 GMT
Not After : Jul 28 03:00:47 2026 GMT
Subject: CN=dd6e153edec487587cfdda275a1ddc8d9a01ee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:87:29:87:48:3f:a9:51:ff:31:38:e6:7b:
d7:60:b5:49:88:20:a4:19:c5:49:b3:47:ac:ce:1b:
29:b7:47:73:31:df:0f:f4:e1:19:ec:52:74:88:95:
f8:99:33:79:c2:c4:f6:d4:82:3b:e7:9b:cd:ce:c3:
10:33:69:40:33:d0:25:e6:39:5a:b3:1d:ce:3d:64:
9e:fe:98:88:97:21:74:a1:87:38:5b:5f:fe:00:13:
25:a3:8b:14:04:a3:da:86:1d:9f:5c:a4:38:a7:01:
55:b2:01:b5:70:a0:e2:f0:2d:81:01:40:25:c7:df:
08:29:36:04:a7:39:03:03:ff:2d:22:22:c2:bc:4c:
ae:44:52:5b:32:4c:11:57:bb:18:2d:92:0f:26:a0:
cc:2d:2a:94:47:8e:17:6e:24:9c:96:06:a9:51:57:
b5:84:4b:90:52:fd:a8:93:7a:ef:c9:d9:01:13:2e:
45:1e:85:c6:dc:53:ec:7c:e0:1c:ec:0e:c4:68:a8:
86:d0:e7:19:18:23:a1:d6:ef:7b:48:be:ae:5c:18:
2e:8d:80:c7:41:00:66:76:40:4f:03:c5:c0:36:5d:
da:39:18:44:84:46:22:7f:7d:d9:b7:4a:a8:70:6b:
07:15:c2:0a:0e:93:ce:c8:3a:d9:0a:c4:f7:a6:45:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6E:15:3E:DE:C4:87:58:7C:FD:DA:27:5A:1D:DC:8D:9A:01:EE:8A
X509v3 Authority Key Identifier:
keyid:DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ca:0b:05:a1:ec:6a:9c:2d:56:58:f5:d8:b4:6c:ea:5c:32:
c5:25:b9:9b:f1:92:3d:e5:a4:3b:2c:e3:ff:8c:3c:dc:f4:2f:
45:c5:8e:51:2d:4e:7f:e5:33:fa:4b:48:5f:86:c7:9d:b7:63:
85:e5:f3:03:b0:57:f5:de:0d:5a:45:66:7b:1a:42:dc:80:4b:
33:e5:3b:a8:cf:3f:6d:0f:56:bf:4a:03:1e:0a:65:3c:70:8b:
26:3c:5b:a5:d6:fe:e1:05:e7:ef:53:97:3d:90:ad:d8:e3:21:
08:9f:cb:a4:d2:7c:82:d1:9e:6e:d4:12:65:80:f3:72:e8:fa:
b7:02:3e:f0:a3:94:3e:01:1b:db:3f:68:fe:f6:5c:f4:5d:c4:
f0:c3:8d:28:ac:50:f6:db:77:43:93:f9:aa:3e:94:64:f7:b1:
af:51:73:34:25:4e:97:c2:c6:d4:90:8d:cc:69:c8:0d:bc:12:
ba:f3:29:66:e1:98:9b:c4:97:e3:68:45:f4:07:1a:1f:4d:c2:
5a:7d:91:27:18:87:fe:9b:cc:e2:82:40:7f:4a:96:bf:2a:f1:
7d:d2:20:b4:ee:d6:48:10:57:1a:7e:c7:fc:32:ac:f5:df:9c:
9d:4f:e2:c0:92:8c:89:19:61:01:7f:93:a1:26:c0:68:4e:9d:
03:c4:5b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:04:45 2026 by rpki-client