Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
File: 3DC4_dBG72WGgJfwNrinyFVyqtA.mft (raw, json)
Hash identifier: EV2/GQZbAA53gjkAQ5Uk5Y1j4UqDeQw591wA8ACa/hg=
Subject key identifier: D1:06:A5:8D:73:F2:60:BC:50:83:9E:FB:EC:AC:94:A7:98:2E:93:08
Authority key identifier: DC:30:B8:FD:D0:46:EF:65:86:80:97:F0:36:B8:A7:C8:55:72:AA:D0
Certificate issuer: /CN=dc30b8fdd046ef65868097f036b8a7c85572aad0
Certificate serial: 01A14015916D38885AE9E365044FD747D028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 15:01:57 +0000
Manifest this update: Thu 15 Oct 2026 15:01:57 +0000
Manifest next update: Fri 16 Oct 2026 15:01:57 +0000
Files and hashes: 1: 3DC4_dBG72WGgJfwNrinyFVyqtA.crl (hash: hKiq7Q+9CUXjbKjIbgJRXAdNsu/w8UDt3Z9iUiWNIgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:91:6d:38:88:5a:e9:e3:65:04:4f:d7:47:d0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc30b8fdd046ef65868097f036b8a7c85572aad0
Validity
Not Before: Oct 15 15:01:57 2026 GMT
Not After : Oct 16 15:01:57 2026 GMT
Subject: CN=d106a58d73f260bc50839efbecac94a7982e9308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:07:17:48:eb:26:ae:b3:d8:ec:52:11:8f:
f9:78:d8:4d:dc:8b:60:ab:e7:f3:bf:b4:27:5a:a6:
d3:06:ed:11:91:d3:b5:3c:54:be:75:b2:1b:a9:ff:
e7:50:77:23:d5:1c:19:ec:22:6b:7a:ce:3e:5d:6a:
24:86:a7:fb:d2:59:04:a3:61:b7:7c:b8:97:bf:60:
52:00:25:72:13:cf:62:09:6e:14:ac:fe:63:c8:64:
82:d6:e1:0d:52:de:0b:15:90:bc:ad:34:34:51:2a:
0e:a8:7b:bf:ad:6c:ff:37:3f:49:66:9c:86:81:84:
70:97:9a:79:74:6c:49:5d:61:77:6b:e6:36:a2:48:
59:7c:38:56:e2:93:3e:e3:95:74:87:3b:0a:2a:af:
7a:fb:41:e3:8d:b9:aa:b0:e4:d1:08:02:92:f2:43:
3f:95:a3:f4:ff:61:68:4d:0f:da:ec:ea:c9:5f:be:
d7:b2:66:b3:5a:3a:15:7c:7d:b6:ec:46:e1:bb:4a:
f4:e9:85:c4:2b:24:40:f5:ca:94:3f:f3:e1:ae:bc:
06:32:ae:3f:3a:45:69:fe:e4:cb:81:01:8e:4b:22:
fa:98:49:2e:f7:b7:72:cb:ea:0c:f5:6e:3d:68:b0:
1d:61:fa:53:43:e2:14:69:7e:5f:ee:dc:d4:65:d1:
f8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:06:A5:8D:73:F2:60:BC:50:83:9E:FB:EC:AC:94:A7:98:2E:93:08
X509v3 Authority Key Identifier:
keyid:DC:30:B8:FD:D0:46:EF:65:86:80:97:F0:36:B8:A7:C8:55:72:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:67:47:8b:fe:aa:d0:2c:3c:d1:d8:4a:88:6a:d9:ce:77:b2:
9c:b4:ed:c4:fb:19:75:e0:61:1f:a6:d4:67:d9:15:40:dd:cd:
4a:ba:25:d4:40:c9:9d:19:95:25:cc:38:95:23:d0:4e:0c:03:
7f:90:a5:38:cc:e2:7e:e5:c5:f8:c5:6f:1b:b3:f2:2d:34:d7:
13:d3:71:63:b1:88:d7:21:fc:d4:15:bc:42:65:a9:d4:4b:08:
06:73:bf:53:b5:05:b5:38:c3:0f:06:06:f8:90:c3:aa:bd:66:
2b:4c:ee:1c:78:e1:bc:24:d2:e5:8f:3f:13:02:ac:5e:46:c8:
ab:e7:db:93:4f:56:9e:a3:4c:0e:a3:d7:e9:58:91:ba:a7:e2:
b6:f1:98:21:ce:9e:02:08:24:a2:70:7a:62:a8:47:12:c1:13:
34:03:07:10:bd:0f:af:a9:84:d5:04:98:fb:a1:d2:7f:24:29:
b5:ae:0b:aa:ca:a2:f1:de:a2:94:3b:27:c1:ff:de:93:eb:ae:
fb:7b:c6:44:3a:96:38:73:74:18:21:47:68:d1:f2:84:dc:bd:
64:7a:d4:f8:50:8a:f3:81:cf:94:db:a5:0d:25:bd:04:32:2a:
75:6f:cd:4d:ca:11:de:30:e0:94:62:3a:e1:7b:af:65:c2:1b:
0c:58:3b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:46 2026 by rpki-client