
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: ISNrBy9rC6T4/tz8efycD/kjQEY5BqAxufwlVcJrOgw=
Subject key identifier: D9:DE:AA:CA:FF:45:B9:89:10:27:7E:F7:85:BA:75:FF:38:89:FC:84
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 01A0016EBBC39A38087E58083383210293A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 0937
Signing time: Fri 14 Aug 2026 18:00:29 +0000
Manifest this update: Fri 14 Aug 2026 18:00:29 +0000
Manifest next update: Sat 15 Aug 2026 18:00:29 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: Tt1r64TLDbVpw2svi79ajXqzHT2hsxJ1CrJJw6IsUZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:bb:c3:9a:38:08:7e:58:08:33:83:21:02:93:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Aug 14 18:00:29 2026 GMT
Not After : Aug 15 18:00:29 2026 GMT
Subject: CN=d9deaacaff45b98910277ef785ba75ff3889fc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:2c:5c:6e:5f:3b:60:04:00:38:87:a7:20:
ed:a1:2d:66:2e:d8:a4:d4:5e:34:26:ce:74:aa:20:
bc:8d:4c:a9:94:9a:31:55:92:73:b4:77:1f:58:1f:
47:69:22:82:f2:77:e3:ff:f8:3c:34:aa:7f:0e:31:
1d:85:45:24:29:b6:91:62:67:86:9a:67:6b:cd:39:
c9:7f:e4:df:d0:c5:bd:d2:c5:c6:4a:29:24:e9:a3:
11:8d:4e:17:60:e8:f9:5b:f3:5f:ac:6b:45:b7:45:
50:f6:02:54:98:a2:7f:e0:85:51:b3:5d:5e:cf:50:
03:12:c3:9b:05:e6:99:2d:92:7c:77:20:a9:81:5a:
f4:1b:13:6b:a4:a0:4d:d2:8b:79:ee:29:22:35:ce:
06:03:ff:bc:5a:a4:bb:90:b8:7a:85:1e:55:3a:02:
62:bb:13:44:52:5b:3b:bb:17:2b:1a:f0:9d:fc:a0:
4d:4b:89:48:78:13:e1:52:20:c3:47:2c:eb:fb:f4:
9f:7c:e3:60:76:35:b3:70:37:16:55:43:78:b2:69:
12:04:dd:c3:1d:02:08:aa:02:99:80:14:46:b4:e3:
62:60:30:ad:5a:cc:9c:a5:91:3f:30:a3:34:fa:db:
6f:13:49:44:5b:8e:3b:79:08:85:c0:10:b7:c0:62:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DE:AA:CA:FF:45:B9:89:10:27:7E:F7:85:BA:75:FF:38:89:FC:84
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:84:88:cd:34:9d:6e:1d:34:c5:9f:0c:37:a2:51:aa:27:dd:
a4:10:9a:21:09:5b:67:20:57:fd:96:fb:1a:1a:8f:94:e9:38:
e5:ab:01:1b:14:81:81:90:f4:49:44:6e:7e:86:3c:13:2b:b3:
be:21:fb:46:58:e4:93:90:b3:31:8b:2e:aa:e5:1b:b6:43:86:
b4:12:24:36:29:b1:23:8d:16:f3:b6:28:55:fe:62:df:f9:83:
8b:db:6f:87:0e:d5:c2:f2:89:6c:60:98:65:ed:95:b2:8f:4d:
f2:08:a6:75:2e:35:0c:e6:22:73:c8:37:96:69:65:b3:b4:7f:
8b:27:73:01:9b:44:6b:9c:9f:eb:9e:c1:f8:6a:34:ac:d0:eb:
2e:a5:63:f9:c3:ea:ba:f1:f7:3d:75:ff:70:cc:44:43:27:da:
19:a5:c9:51:4c:98:24:92:27:42:85:10:ae:b9:de:67:23:df:
1e:88:3d:f9:9a:81:b5:a0:f6:bd:cc:ce:db:55:9e:33:bd:51:
78:81:8b:28:41:ac:12:62:6e:b8:36:a8:3a:bb:50:be:31:7b:
8b:66:5b:06:5e:f2:3c:dd:c9:55:f6:16:f4:9c:f9:33:9e:f4:
1e:e6:fd:e6:95:f5:6c:37:2c:11:56:53:38:6a:05:7f:90:58:
d9:f2:ac:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:04 2026 by rpki-client