Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier: Yq59ZYWKHoRATYGq6ZITFRuhcaGmC+7MdjkVnyf5dMg=
Subject key identifier: 86:10:90:5B:70:AB:49:3B:2F:3D:B1:F1:E7:EE:F0:71:64:22:4A:94
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial: 01A0E85393E60A9B23D81DC24F474C39C9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number: 1188
Signing time: Mon 28 Sep 2026 14:03:06 +0000
Manifest this update: Mon 28 Sep 2026 14:03:06 +0000
Manifest next update: Tue 29 Sep 2026 14:03:06 +0000
Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: c1KbHOOhFNWUFsTMFMvZszYAwiK1E6gx8ngrh/YYSFc=)
2: KdEq-OeVxvI5CqMaBlN9K8-QwE0.asa (hash: bM3X6ryr93DZAzA3CFAR2S/fr/RWSQdRtJYrZgQf3n0=)
3: MJozjNqLnPQyzg6RwUr67wJnDj0.roa (hash: GrVcVPg8QNDGergH76PpUDqLKrseVEoNPTuvrqjQXRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:93:e6:0a:9b:23:d8:1d:c2:4f:47:4c:39:c9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Validity
Not Before: Sep 28 14:03:06 2026 GMT
Not After : Sep 29 14:03:06 2026 GMT
Subject: CN=8610905b70ab493b2f3db1f1e7eef07164224a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:0d:7d:e4:d1:ff:1a:79:b3:f6:5c:15:52:
d8:54:9c:fc:b2:ee:ff:d3:eb:35:ed:d1:fc:33:f8:
4a:90:d8:be:89:02:0e:3d:f0:bd:1f:9d:1e:04:fd:
04:4a:58:20:27:ac:27:1c:76:2f:ed:c9:c8:b5:f0:
97:59:9d:c5:0b:cf:c5:a9:d3:2c:6d:e7:88:15:19:
94:7b:03:d1:b7:9e:99:32:ba:ea:0d:60:e8:49:83:
a9:4f:6d:d8:be:e7:69:5c:9b:9a:a5:3f:0e:58:fb:
ac:88:79:5f:98:0f:9d:bf:d7:88:5c:13:56:1e:aa:
12:1f:b5:8a:79:29:c9:2a:2c:52:12:04:60:c7:20:
21:b5:88:d1:fc:4e:e3:98:0c:8a:6e:d7:7f:32:57:
ba:be:c3:26:b4:36:13:44:e8:f4:b9:73:4b:2b:0c:
51:a1:d4:8f:ea:2e:2d:fa:b6:df:ce:80:af:75:49:
7b:fd:80:98:e3:54:79:69:f0:96:89:43:40:f4:69:
d3:d4:c7:3e:4f:bc:68:23:29:aa:68:3e:30:73:3c:
55:55:c1:e7:28:8c:65:77:d7:cc:c9:67:17:bc:c8:
09:08:24:88:f6:b9:cc:15:e3:ce:09:71:6a:45:8d:
3a:76:84:84:c0:02:fa:5f:9b:e7:0f:fc:fd:0b:8f:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:10:90:5B:70:AB:49:3B:2F:3D:B1:F1:E7:EE:F0:71:64:22:4A:94
X509v3 Authority Key Identifier:
keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1a:38:9d:0d:46:4f:8f:a3:65:39:8d:cf:5d:6f:05:d0:80:
e8:f9:0f:63:bf:79:fa:6e:d7:db:c6:16:eb:a0:74:e5:9a:81:
df:f9:64:b4:15:2e:6c:2a:4b:0d:81:4a:5f:03:37:0c:5b:af:
3e:a9:ee:47:96:d3:4d:5f:bc:58:d2:c4:3f:59:fe:cd:a1:cc:
74:0c:02:0e:1d:b7:2a:ac:40:a8:1d:f8:dc:9f:f9:12:77:50:
90:6c:00:89:c9:eb:7f:0a:70:3e:8e:79:d3:a0:ea:98:88:28:
ad:d9:2b:85:fd:fd:6b:ec:7c:31:73:3e:13:1d:75:66:b1:82:
97:c9:86:aa:1b:e0:78:02:ca:a3:9a:d4:a3:0c:a8:8f:3c:b9:
95:b3:dd:c5:3e:2a:e0:f4:bf:e4:4b:29:81:de:a6:fb:71:60:
a5:fe:0d:7a:69:b1:e4:e9:5e:af:26:16:4f:78:b9:10:c3:44:
c6:f6:48:da:ec:c6:97:fe:6f:c2:d7:96:38:26:fc:c8:83:b4:
35:4f:09:54:62:43:03:2f:e3:39:c2:41:3f:e9:8d:26:13:b3:
32:7c:9a:4c:e2:32:af:31:32:3a:a9:28:c1:79:11:34:ee:6e:
b9:b0:94:f2:1c:dc:74:60:eb:73:4f:a5:74:07:72:a1:5e:84:
05:15:7c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:00:09 2026 by rpki-client