Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
File: T3zlnkdBgWbSD1FkhW-HkzmRidA.mft (raw, json)
Hash identifier: dYNhyqVTZ07DbVGJY+l/+ManLBIP8qk3ydLRj97/b8c=
Subject key identifier: 73:73:BC:EC:2B:94:A0:F5:0D:E8:09:E2:B6:1B:D2:05:EF:71:5C:C9
Authority key identifier: 4F:7C:E5:9E:47:41:81:66:D2:0F:51:64:85:6F:87:93:39:91:89:D0
Certificate issuer: /CN=4f7ce59e47418166d20f5164856f8793399189d0
Certificate serial: 019F85D76C2ECB7C4B766F96A51F42FA96BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:55 +0000
Manifest this update: Tue 21 Jul 2026 18:01:55 +0000
Manifest next update: Wed 22 Jul 2026 18:01:55 +0000
Files and hashes: 1: T3zlnkdBgWbSD1FkhW-HkzmRidA.crl (hash: unEEy/nUr1TvbWDHLIgpKf1pwK/tsBn3glh6gi4wA84=)
2: hzeHFDX7-fXakvbRNzVIimetgT0.roa (hash: TTVPslSxsu3A4z0fsBCY/2+kt2uSPjNyxRVnr/wiATk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:6c:2e:cb:7c:4b:76:6f:96:a5:1f:42:fa:96:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7ce59e47418166d20f5164856f8793399189d0
Validity
Not Before: Jul 21 18:01:55 2026 GMT
Not After : Jul 22 18:01:55 2026 GMT
Subject: CN=7373bcec2b94a0f50de809e2b61bd205ef715cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:28:62:26:df:1a:fb:66:94:cd:1e:24:d6:
54:51:c9:3e:a6:89:ea:32:e7:11:85:ab:5d:8a:b9:
8c:90:c3:ff:14:3b:71:7b:7a:a1:79:a6:87:00:52:
35:b0:8a:54:86:71:c5:26:c4:b4:2a:25:05:50:be:
42:07:01:52:77:65:ad:c2:46:4b:64:4f:73:6a:6d:
c4:67:b1:a9:38:a7:7c:ff:0e:c9:86:d6:37:55:ef:
1e:7b:bd:fe:4b:43:eb:fb:75:5e:74:8f:25:90:bf:
ec:46:49:b5:db:c0:07:94:e2:13:e9:a8:dc:64:45:
87:61:57:4b:c5:c7:88:98:1b:da:20:b3:63:b4:7d:
5a:34:09:ef:a1:a6:d2:48:19:3f:40:5e:ce:14:94:
de:c9:75:9a:49:c8:ff:b0:07:33:15:7e:8c:4b:66:
32:d9:71:62:5b:9d:da:8e:a4:cd:44:46:29:df:fd:
5c:c7:59:03:b4:db:29:f9:50:62:79:3e:41:32:d6:
9c:8a:f0:c3:8e:ac:fc:10:c0:27:39:43:d0:86:96:
3f:c8:04:a5:97:91:35:c7:fe:84:ba:0d:9c:87:cb:
98:c1:b5:ff:d9:fd:d9:be:f0:1e:c0:37:48:85:1f:
b5:c7:4e:4e:c6:2a:28:c1:c3:01:54:24:77:90:70:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:73:BC:EC:2B:94:A0:F5:0D:E8:09:E2:B6:1B:D2:05:EF:71:5C:C9
X509v3 Authority Key Identifier:
keyid:4F:7C:E5:9E:47:41:81:66:D2:0F:51:64:85:6F:87:93:39:91:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:cd:9e:28:12:2a:9a:40:71:14:84:f8:2d:44:78:a3:eb:ea:
54:cd:ef:5c:b6:10:d2:25:a3:5c:92:53:fa:eb:43:40:3e:7c:
7b:64:69:26:50:69:4d:f7:94:bd:03:63:bf:fd:05:f5:11:9d:
ed:98:e4:dd:4a:60:35:f7:30:ea:12:8f:6d:1d:3e:48:cc:ff:
c7:62:da:b6:ad:81:fe:c6:55:d2:c8:da:3c:29:a9:a0:f1:24:
60:f5:4b:6a:8b:4f:de:5a:56:69:46:00:c1:11:69:9c:6f:da:
09:6e:34:22:51:11:75:fe:92:21:5e:0c:28:a5:f3:75:b9:a7:
d2:64:d8:36:4b:de:9c:ab:f7:b6:b1:9f:a1:a6:f0:0d:63:dd:
e2:60:33:bb:a7:2a:ba:c7:e8:53:93:b8:36:da:d6:d9:4c:07:
3b:6b:5d:22:48:fc:05:77:90:e7:19:2f:cc:35:25:93:02:9d:
ad:a9:6f:c4:fe:ea:f3:b5:b1:58:9a:6a:ae:19:9b:50:11:e4:
83:04:af:8a:84:83:36:b5:34:98:47:a5:aa:ec:72:bf:e4:cc:
b9:88:26:d5:d7:8c:59:72:73:eb:57:07:b7:b8:9b:89:c3:c8:
21:0a:a4:52:b0:65:61:5e:18:59:4e:59:b9:fa:23:af:7f:84:
69:79:96:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:51 2026 by rpki-client