
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: c6NbmJkmonqHB93f5C9FqFXoMhMGDh7QZe5EZn0jZH8=
Subject key identifier: BD:C7:2F:80:C0:9D:8A:BF:7E:8C:96:C3:82:09:7E:EA:6A:52:70:45
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 01A147CDE9C9AA0F03244D9272AC782BAF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 09E0
Signing time: Sat 17 Oct 2026 03:00:39 +0000
Manifest this update: Sat 17 Oct 2026 03:00:39 +0000
Manifest next update: Sun 18 Oct 2026 03:00:39 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: Yf5SvnyzlO6+tXtvqS0GEeAnyToYIAG3oAz87CH4Lh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:cd:e9:c9:aa:0f:03:24:4d:92:72:ac:78:2b:af:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Oct 17 03:00:39 2026 GMT
Not After : Oct 18 03:00:39 2026 GMT
Subject: CN=bdc72f80c09d8abf7e8c96c382097eea6a527045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:39:c5:42:3c:63:28:70:3f:13:d6:3b:c2:
f9:2e:08:65:9f:7b:90:e3:13:54:17:7e:d8:b6:34:
8e:5d:96:a4:8e:53:40:ae:ce:1c:22:eb:9c:5a:ce:
c3:df:b2:10:a6:0f:4e:73:3f:b2:f9:63:d3:e8:61:
21:bd:ef:2f:70:d4:e0:a4:dd:c8:6f:96:fd:34:63:
b9:ce:52:9b:91:0a:54:43:14:c5:d4:38:19:5c:ec:
f3:a8:99:c3:54:52:83:cb:5c:fb:d0:53:0a:ae:cb:
19:ec:c2:78:46:98:59:2e:be:9a:22:d2:23:54:1f:
66:df:08:4f:bc:fe:80:1c:71:96:46:a5:0d:c0:80:
d4:19:6a:ed:53:9e:9b:51:54:0d:28:8b:2b:c2:c5:
fd:a4:7d:2b:68:e4:9e:de:40:01:33:74:83:e1:1f:
86:6e:74:ca:72:43:9f:39:e9:8d:d4:3b:1d:0b:84:
f7:b0:81:2e:24:0d:ab:4b:72:01:67:04:28:a6:33:
53:bf:6a:a7:53:53:ea:33:c4:a9:1d:74:6e:1b:69:
a5:37:ee:c0:df:e6:dd:41:c4:41:38:34:c4:d6:99:
98:fb:47:75:9f:e0:04:1f:c5:10:44:c5:97:11:4b:
66:ac:d1:5f:b4:fa:0b:69:ed:f9:17:43:3b:f9:7d:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C7:2F:80:C0:9D:8A:BF:7E:8C:96:C3:82:09:7E:EA:6A:52:70:45
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:80:9d:45:49:e4:21:4d:ae:42:f9:18:28:cb:9c:18:88:3b:
da:76:d5:da:4a:95:8a:75:d2:09:8b:cd:7b:92:61:11:82:c4:
c4:95:30:e9:ef:8d:2d:de:22:5d:4c:a3:41:ac:ed:b0:6b:d0:
56:f2:c9:8b:c0:74:8f:04:7d:ae:00:b8:5a:4b:24:50:96:00:
71:58:27:f9:d7:7b:91:34:ae:e3:8e:5f:99:25:44:30:5b:2d:
d2:f4:11:2f:c9:e1:fe:8b:99:56:7b:13:6b:05:90:6a:75:0f:
c7:42:47:10:34:fa:91:76:40:14:d1:c6:38:16:c0:11:b0:3e:
ec:f6:eb:86:ed:fb:51:e3:4b:20:f5:e7:05:a4:40:d2:cf:99:
41:3b:8c:92:c5:6a:8e:45:b9:eb:fd:90:9d:0c:4a:6d:33:6f:
c4:e7:03:69:f7:d8:e0:bc:33:de:85:e7:60:16:9c:b2:97:e9:
9e:fc:cf:05:bd:eb:43:4d:e9:d9:09:e7:56:3c:f9:6b:73:ab:
60:51:9f:df:62:3a:3a:61:e9:9e:a1:af:15:39:c7:c9:3e:a7:
9a:48:98:62:8b:69:59:a0:4f:3a:7f:d2:cc:5a:5d:a6:53:76:
28:80:d4:89:26:5e:e4:83:ec:e5:5e:9c:e8:56:ac:7f:2c:e4:
3a:d4:e6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:58:31 2026 by rpki-client