Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
File: 3Rc4MRWBIorSh1OUS-i88hafq6k.mft (raw, json)
Hash identifier: /o7komSM0xnUt4AGSc7kxRKdcZ6MDkSvmY2+qN+XH5U=
Subject key identifier: 60:34:E1:77:86:EA:31:A1:C5:BE:45:9C:FA:2D:96:94:94:6B:57:A6
Authority key identifier: DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
Certificate issuer: /CN=dd1738311581228ad28753944be8bcf2169faba9
Certificate serial: 01A13DB846E95270EE522F49BFDCDD479FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
Manifest number: 1245
Signing time: Thu 15 Oct 2026 04:00:49 +0000
Manifest this update: Thu 15 Oct 2026 04:00:49 +0000
Manifest next update: Fri 16 Oct 2026 04:00:49 +0000
Files and hashes: 1: 3Rc4MRWBIorSh1OUS-i88hafq6k.crl (hash: XBVn35LpSLwWln2bOJG6ddNKNkAL7V86yvQoSPanEbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:46:e9:52:70:ee:52:2f:49:bf:dc:dd:47:9f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1738311581228ad28753944be8bcf2169faba9
Validity
Not Before: Oct 15 04:00:49 2026 GMT
Not After : Oct 16 04:00:49 2026 GMT
Subject: CN=6034e17786ea31a1c5be459cfa2d9694946b57a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:3f:7e:a2:a7:4f:e2:a4:62:51:35:73:ec:
8c:77:af:2d:3d:16:ad:12:79:70:bd:c9:b8:4c:96:
4a:7d:c0:67:9e:16:fc:8d:52:5d:23:8c:6b:47:5d:
fe:31:89:c5:5d:72:2c:d1:6b:64:3c:66:96:fe:ea:
ae:42:15:8e:38:cd:dd:42:3a:bd:17:55:c2:8e:01:
4a:98:d2:8e:4f:9d:0f:01:cc:ce:19:12:64:2e:aa:
ae:eb:b6:73:0d:e2:9e:3e:61:94:f7:92:8b:a3:78:
77:4b:1e:3d:a1:22:ee:2b:4e:f0:b7:fd:d9:9a:2f:
3d:23:be:87:a2:df:ba:e3:1c:82:fc:1e:3d:e2:83:
9a:9d:1f:40:4b:f0:d1:75:07:c5:90:34:77:62:e8:
4d:7b:56:23:3d:55:26:e6:8f:1d:49:2a:dd:3d:a9:
9c:df:68:ec:44:79:c5:ac:4e:6c:2c:b3:f1:df:9a:
a3:77:38:ca:dc:8f:63:60:1f:6f:1d:ff:77:c7:f0:
cf:5a:e6:cc:79:bc:74:17:03:a4:9d:c2:c0:6d:39:
de:66:4e:9c:de:c9:94:d6:70:17:8a:9e:fd:c3:34:
3d:3a:c1:17:12:c8:dc:1d:b2:c1:f2:f7:8e:e7:a1:
90:bf:5c:96:b9:2c:5e:fc:de:88:c1:92:da:ea:a7:
bc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:34:E1:77:86:EA:31:A1:C5:BE:45:9C:FA:2D:96:94:94:6B:57:A6
X509v3 Authority Key Identifier:
keyid:DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d1:7c:84:90:71:b2:65:67:75:d5:ff:29:8a:4a:5d:97:4f:
aa:35:b6:df:3d:ed:6d:0e:81:15:63:0b:06:2d:3f:ab:ff:41:
cc:73:01:8a:2d:c4:dc:de:37:2c:d2:c4:59:57:62:dd:22:45:
2b:91:5e:96:30:5e:24:7c:f0:c7:78:2b:47:2f:91:7a:54:4c:
02:3e:21:a3:c6:5e:66:77:06:69:56:8a:29:ae:96:72:ab:b8:
61:8b:7b:83:82:8b:dc:2c:85:c6:bf:b0:4d:59:60:2f:78:01:
7e:a9:d0:2f:ae:16:98:17:8f:ad:3e:5a:11:a3:67:1a:4d:06:
b9:ab:10:e8:8d:c3:a2:86:32:b9:29:46:67:6f:75:69:95:b9:
93:2a:4d:24:10:3e:3b:7a:1d:c0:3e:6a:63:2c:23:8b:23:77:
50:62:cc:73:d7:c6:10:16:88:db:f4:9d:7b:c8:c3:4c:c9:0a:
8e:2b:e7:30:38:4d:ce:41:53:8e:5d:a3:38:1e:65:ea:09:21:
54:aa:53:36:9a:c1:a8:12:c1:1a:05:85:f1:e7:dc:1d:37:7b:
db:44:be:6b:9a:41:39:9b:dc:3f:e9:04:97:73:66:1a:20:cc:
24:f0:7e:6d:05:7f:c0:04:87:5a:08:20:aa:bf:53:f6:c6:60:
57:ae:b2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:26 2026 by rpki-client