Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
File: 3IiUXIhnpyYro3mzpphACRpPGQQ.mft (raw, json)
Hash identifier: A/tRXKvjD+WaF6kobAwA9b3w3nXq3CoAhDjg4tgcwyY=
Subject key identifier: CF:F7:44:48:36:0B:0C:95:AC:42:92:51:8C:AD:49:15:E9:35:1A:B6
Authority key identifier: DC:88:94:5C:88:67:A7:26:2B:A3:79:B3:A6:98:40:09:1A:4F:19:04
Certificate issuer: /CN=dc88945c8867a7262ba379b3a69840091a4f1904
Certificate serial: 01A13E5C9021D68A516F6372DC980A34A8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
Manifest number: 0E76
Signing time: Thu 15 Oct 2026 07:00:15 +0000
Manifest this update: Thu 15 Oct 2026 07:00:15 +0000
Manifest next update: Fri 16 Oct 2026 07:00:15 +0000
Files and hashes: 1: 3IiUXIhnpyYro3mzpphACRpPGQQ.crl (hash: yX5lb1KwdmebqArbc/Z6EKaccUBlZIeGVkVjxMzQ5D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:90:21:d6:8a:51:6f:63:72:dc:98:0a:34:a8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc88945c8867a7262ba379b3a69840091a4f1904
Validity
Not Before: Oct 15 07:00:15 2026 GMT
Not After : Oct 16 07:00:15 2026 GMT
Subject: CN=cff74448360b0c95ac4292518cad4915e9351ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:7b:25:9d:a3:4f:24:28:ef:22:8e:e6:f3:
ba:85:4c:be:10:0b:b0:52:e0:28:b3:2b:0b:e4:9f:
e6:9a:f7:11:47:68:fe:ec:8f:56:25:53:b2:f9:6d:
c8:cc:e2:a4:c9:49:03:63:49:90:0a:de:7f:42:bf:
58:22:41:03:cb:25:87:38:4d:0a:6b:30:ea:2b:13:
9c:eb:47:0e:84:83:2a:06:56:60:65:f5:c0:e8:d3:
ff:5c:e8:bd:7f:1b:a7:ba:34:88:6f:cd:6e:9b:ae:
e4:7d:4d:81:52:68:b7:60:fe:5e:9f:41:23:a5:61:
8d:5e:17:5d:99:c6:86:c0:49:4e:b8:32:2b:2a:72:
94:2f:5d:5e:c2:c5:2a:d8:19:8c:5c:71:46:7d:26:
66:0e:7c:0b:63:ef:62:1a:a3:53:c3:e3:f6:91:50:
88:b9:1a:96:4f:dc:14:39:45:43:dc:f6:3a:92:76:
5f:55:52:b7:cc:24:1a:c7:8f:7e:ab:5b:51:93:a9:
9c:40:ed:10:0c:d8:21:d2:e8:b6:cf:d6:58:b1:eb:
e6:1f:b4:98:cb:a7:4c:d6:6f:bc:40:77:97:ee:84:
93:c2:f7:6f:92:63:82:e3:af:54:a8:04:61:f6:37:
3f:8c:ac:20:16:f5:f1:89:86:40:97:d9:b6:f4:dc:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F7:44:48:36:0B:0C:95:AC:42:92:51:8C:AD:49:15:E9:35:1A:B6
X509v3 Authority Key Identifier:
keyid:DC:88:94:5C:88:67:A7:26:2B:A3:79:B3:A6:98:40:09:1A:4F:19:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d0:72:00:f2:97:7d:ab:35:b3:ff:31:d0:5d:8d:6b:91:68:
6c:86:93:e0:3e:cc:b9:32:6d:7e:d4:f3:3e:ad:a4:29:b6:ae:
7f:7c:39:25:61:34:75:72:ef:24:a0:76:4c:3e:59:a1:26:c7:
b2:dd:9e:49:b6:63:ad:6b:6b:87:32:cb:8d:f0:c7:d4:58:46:
4a:f5:ff:40:9a:f3:70:85:20:23:33:6b:90:29:43:6e:79:b5:
93:10:85:80:54:e3:91:b6:68:1f:95:65:47:61:50:61:f6:72:
07:7a:15:e6:32:80:b5:ad:50:9e:43:72:c0:b7:1d:cc:3d:b5:
88:72:90:88:36:32:08:90:5c:5f:6f:55:d7:00:2d:55:e8:56:
e7:7e:73:67:17:bb:30:a6:24:e9:a3:00:0e:98:0e:06:fb:81:
d6:f4:97:32:a1:f1:15:24:ae:0a:18:05:9c:a7:c8:c9:1e:4f:
9c:d2:f5:c4:b7:9a:0c:e1:58:8c:79:a0:5e:8e:85:0c:8b:fe:
09:ee:f7:8e:e3:9e:23:0a:6a:e4:a1:12:a0:0f:ab:d7:92:7e:
63:23:b2:5e:20:d8:15:e4:76:f9:39:e0:57:2c:3a:df:21:2f:
e3:e0:3f:20:34:e4:d9:3b:e5:a4:e2:5f:aa:14:cb:b9:8f:0b:
14:ba:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:51:13 2026 by rpki-client