Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
File: 3DC4_dBG72WGgJfwNrinyFVyqtA.mft (raw, json)
Hash identifier: E2tGOuZSeNbUOJ5D5oUVo8oWE9Ow4xpcg0HQBBJoC+o=
Subject key identifier: B6:21:26:50:EC:40:83:95:FF:70:ED:E7:3A:DF:3F:C0:E2:EB:30:68
Authority key identifier: DC:30:B8:FD:D0:46:EF:65:86:80:97:F0:36:B8:A7:C8:55:72:AA:D0
Certificate issuer: /CN=dc30b8fdd046ef65868097f036b8a7c85572aad0
Certificate serial: 01A0016EBB15906115B25DD14FC10B2A713A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 18:00:29 +0000
Manifest this update: Fri 14 Aug 2026 18:00:29 +0000
Manifest next update: Sat 15 Aug 2026 18:00:29 +0000
Files and hashes: 1: 3DC4_dBG72WGgJfwNrinyFVyqtA.crl (hash: 07fV6dAodAOZrXQdHRHjZbp17ahqFFadk8Xt+cbRTy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:bb:15:90:61:15:b2:5d:d1:4f:c1:0b:2a:71:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc30b8fdd046ef65868097f036b8a7c85572aad0
Validity
Not Before: Aug 14 18:00:29 2026 GMT
Not After : Aug 15 18:00:29 2026 GMT
Subject: CN=b6212650ec408395ff70ede73adf3fc0e2eb3068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4d:3c:6e:7f:0e:23:51:58:87:4c:9b:19:6a:
36:fd:95:74:79:07:42:d5:b7:36:21:54:71:1f:8f:
c8:43:23:d1:b9:32:28:97:b4:97:05:1f:68:a5:62:
15:13:8e:7c:90:de:bc:c1:19:01:5a:f9:32:cb:e5:
22:17:43:75:ca:97:f8:37:40:45:af:15:e7:cc:72:
05:75:51:c3:9b:f4:42:bd:36:15:6a:23:d0:6b:3a:
d5:2f:44:3a:b7:4d:07:e0:2c:00:75:a7:73:e2:e7:
ab:28:b5:58:0a:1c:a2:bb:f6:2f:f9:37:4a:f7:9f:
9d:2a:17:4e:fb:f4:6c:9b:13:21:b6:5c:36:99:af:
2a:cd:f3:44:da:1d:5d:5f:5b:ba:01:3b:70:f1:1d:
d1:93:2d:34:ed:77:8a:6a:4b:fb:73:b8:bc:ed:a7:
8d:2d:0d:59:84:65:07:47:21:b3:36:21:f3:ef:33:
f6:8f:78:ae:4d:82:3d:4f:57:c8:a1:36:66:6e:2c:
56:96:c2:54:1e:ce:4b:b5:38:2c:f1:5d:ed:0d:8d:
73:2c:99:cd:0e:c5:76:62:e9:c1:4e:49:1e:04:96:
a0:a2:93:9b:18:59:41:ce:23:64:46:00:38:5a:e8:
d0:3b:1b:78:81:f7:06:5c:63:1d:a0:e2:59:bf:ec:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:21:26:50:EC:40:83:95:FF:70:ED:E7:3A:DF:3F:C0:E2:EB:30:68
X509v3 Authority Key Identifier:
keyid:DC:30:B8:FD:D0:46:EF:65:86:80:97:F0:36:B8:A7:C8:55:72:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f5:ed:9a:34:7f:8b:3d:52:bc:4a:a1:9b:96:07:32:24:66:
4e:40:90:44:ec:ba:13:7f:9b:92:54:38:7d:37:f8:31:1f:e6:
74:4f:ed:56:be:c6:9a:48:e5:04:46:71:c9:92:b6:75:41:20:
2c:ff:21:cf:a2:d3:51:5e:a4:40:9b:2f:97:13:9a:a5:f5:b8:
85:d3:47:3f:db:df:bd:7e:26:e2:f6:8d:18:dc:52:8e:d0:18:
76:dc:ee:77:16:9d:5f:b0:bc:6f:14:6a:93:68:4b:77:e2:53:
5e:82:e1:c1:b8:3b:bf:e6:c1:3f:bc:dc:ab:1b:3b:d6:cd:c2:
fe:87:48:9c:1e:25:03:1d:80:0a:0b:4a:d1:e5:96:a5:3c:b9:
c5:b8:dd:f9:a0:a1:92:44:56:59:12:f6:b6:78:0d:87:9a:1e:
40:81:73:43:78:7c:f5:0d:b7:1d:04:b5:81:ec:17:37:2f:84:
e3:6a:b4:89:bd:ce:d4:8f:83:a5:8c:d5:16:6f:81:ac:c9:48:
f0:94:0c:e8:e0:87:8e:6e:c6:55:a7:ef:13:94:c5:09:de:21:
8d:eb:79:74:53:5a:63:1b:dd:eb:2d:57:8a:67:3f:61:ed:82:
c5:bc:4c:d7:a0:91:f0:6c:e6:d3:28:8b:90:12:c6:8f:5f:89:
4f:f8:02:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:26 2026 by rpki-client