Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
File: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft (raw, json)
Hash identifier: ZechvkkdIr0OqJg2SH+3w3/Y5z03KzgIW/yHMvaXcKM=
Subject key identifier: 92:13:05:D5:B7:3C:1C:21:A5:1D:C5:F1:C0:F8:86:C3:BD:D6:79:C8
Authority key identifier: DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
Certificate issuer: /CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Certificate serial: 01A001A651DDD8A159A389A60739A6ADECB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
Manifest number: 096D
Signing time: Fri 14 Aug 2026 19:01:12 +0000
Manifest this update: Fri 14 Aug 2026 19:01:12 +0000
Manifest next update: Sat 15 Aug 2026 19:01:12 +0000
Files and hashes: 1: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl (hash: WUqH9fxmRjLFH6GpJ9RFWU1CZZpMBjAG8e93q1DVE7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:51:dd:d8:a1:59:a3:89:a6:07:39:a6:ad:ec:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Validity
Not Before: Aug 14 19:01:12 2026 GMT
Not After : Aug 15 19:01:12 2026 GMT
Subject: CN=921305d5b73c1c21a51dc5f1c0f886c3bdd679c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:a8:ff:09:92:99:dc:3c:de:05:7c:3e:bb:
a9:08:96:a9:a6:0a:72:07:2f:ce:8d:59:c6:1b:69:
49:c9:5b:00:4c:41:e7:ec:64:6c:3e:25:a4:dc:c3:
aa:68:22:fd:93:83:9d:b5:2d:d0:5e:36:9e:8d:e0:
f9:a9:6c:52:f6:48:28:dd:ae:31:d9:ff:ab:bc:f3:
b6:84:4a:2c:a0:92:00:db:8d:16:21:c8:ab:10:8c:
d5:b4:c3:94:03:84:87:3d:11:f2:c2:fc:0f:0e:7f:
0c:9f:51:b2:7e:5a:53:74:b3:1e:60:7a:4a:b3:bd:
41:d0:9e:24:19:90:7b:ac:d8:99:e2:83:bf:dd:64:
35:5f:09:93:45:b1:50:65:bc:c4:e7:4e:3e:69:dc:
12:12:09:7a:21:4a:4a:e8:a4:97:d9:b2:24:de:9d:
82:4f:60:82:cc:4d:e3:a4:42:2f:81:ce:b5:7c:09:
20:3b:d3:d8:da:91:42:b2:5e:71:d2:d9:e4:ec:72:
d8:c3:ae:a6:80:51:3c:0e:cc:93:0d:85:3f:b8:a8:
54:32:31:e0:b4:02:68:d7:6e:ff:b1:d4:4c:03:d5:
a2:3f:20:51:61:bb:c3:9c:be:14:09:e0:0f:57:43:
0b:72:70:54:b8:f3:be:a2:48:30:fd:a1:9b:01:ba:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:13:05:D5:B7:3C:1C:21:A5:1D:C5:F1:C0:F8:86:C3:BD:D6:79:C8
X509v3 Authority Key Identifier:
keyid:DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:dc:de:c6:72:14:de:33:c2:b9:13:33:d3:89:05:32:b9:ea:
b3:95:b7:13:ee:f5:c1:96:db:fb:89:b9:63:a0:cb:b0:ec:3e:
8c:9a:8e:0e:cb:65:13:1d:93:48:a3:a0:d0:25:f4:53:cf:41:
ad:30:5c:34:92:e2:22:11:bd:af:59:1b:02:08:7f:33:19:ae:
2d:f2:d4:c8:0a:3d:28:c6:18:bf:d5:35:8d:a1:61:e2:5b:95:
30:0a:94:de:59:e6:a2:cd:23:b3:6f:69:da:1c:52:51:0d:b6:
3f:82:ab:54:3f:21:43:f6:2b:de:77:ec:d8:d3:cd:cd:f5:c7:
28:7d:74:cf:d5:2f:be:4a:f4:d6:e8:51:d8:ec:24:4d:9c:b5:
67:3d:90:98:7f:47:6c:66:65:2c:26:b0:4b:ec:fd:90:e5:58:
e1:8c:c2:aa:35:7a:4f:cb:28:53:9d:76:6b:9c:0e:08:b5:14:
ce:97:90:0c:2f:3c:15:9e:9f:07:e6:ff:49:56:ed:fa:64:fa:
40:dc:93:45:47:9a:5a:35:6b:72:3e:db:7b:2b:97:f9:d6:7d:
e9:0a:b9:ab:c4:da:a0:be:f4:8b:d6:86:25:65:c5:9b:65:87:
36:12:64:4f:30:3a:f9:e3:5c:21:7e:4d:be:cd:c2:79:df:be:
f6:0d:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:49 2026 by rpki-client