Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
File: 3IiUXIhnpyYro3mzpphACRpPGQQ.mft (raw, json)
Hash identifier: MMYFWX1VLKMPYilxM1VZ4ffZ+uZlQcuqCmIpacWcF1o=
Subject key identifier: B9:11:9B:54:E1:1A:E8:BC:EF:D1:43:0E:DE:3F:88:CC:9A:89:E5:1B
Authority key identifier: DC:88:94:5C:88:67:A7:26:2B:A3:79:B3:A6:98:40:09:1A:4F:19:04
Certificate issuer: /CN=dc88945c8867a7262ba379b3a69840091a4f1904
Certificate serial: 01A001A679C9ACEC6614E33FACE101AF98DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
Manifest number: 0DD2
Signing time: Fri 14 Aug 2026 19:01:22 +0000
Manifest this update: Fri 14 Aug 2026 19:01:22 +0000
Manifest next update: Sat 15 Aug 2026 19:01:22 +0000
Files and hashes: 1: 3IiUXIhnpyYro3mzpphACRpPGQQ.crl (hash: OTmv8NpzmxgXB6W7ouxVMtZKmrTufI6XgICHvMKZjqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:79:c9:ac:ec:66:14:e3:3f:ac:e1:01:af:98:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc88945c8867a7262ba379b3a69840091a4f1904
Validity
Not Before: Aug 14 19:01:22 2026 GMT
Not After : Aug 15 19:01:22 2026 GMT
Subject: CN=b9119b54e11ae8bcefd1430ede3f88cc9a89e51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:f7:a2:1c:16:7a:e8:55:6a:ff:62:fc:a7:
0d:0c:7c:73:a7:e7:d6:b4:c5:25:4d:d3:1f:b9:ce:
93:08:66:e2:4e:98:8f:89:79:62:ca:dc:69:f0:ab:
f9:c0:b3:2f:0b:95:d3:5c:1b:92:0e:cc:e1:de:84:
16:71:33:d6:28:e5:a3:6f:bb:49:6f:a7:3c:74:8f:
9c:cc:03:0a:ea:91:8f:89:68:f5:ca:3d:53:5a:8e:
e7:d1:50:98:58:b7:dc:11:e6:19:2c:75:4d:07:3b:
23:15:80:72:97:5b:ec:d2:81:00:36:63:45:ec:3a:
25:b2:7a:ba:50:e0:f3:91:3d:cc:70:9f:b5:8b:3e:
b7:b3:c9:1a:99:f0:1e:28:77:94:f8:00:5d:70:81:
a3:29:63:88:3b:52:fd:a7:24:8f:5f:19:a8:0c:44:
0c:fc:48:af:31:1a:78:af:82:bb:78:55:95:6a:49:
80:6d:8b:73:ce:83:64:fd:dd:66:8c:15:3c:30:48:
6c:80:8e:75:a4:de:55:c6:99:ff:d4:0a:a5:3d:f0:
39:2f:f9:f6:b1:36:30:de:fb:dd:56:52:8a:50:b4:
57:75:ac:b0:ce:3f:90:d7:f9:6a:f0:88:cc:cd:b1:
e1:dd:64:c2:9d:a6:87:6f:e3:75:a0:5e:10:07:b2:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:11:9B:54:E1:1A:E8:BC:EF:D1:43:0E:DE:3F:88:CC:9A:89:E5:1B
X509v3 Authority Key Identifier:
keyid:DC:88:94:5C:88:67:A7:26:2B:A3:79:B3:A6:98:40:09:1A:4F:19:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9f:82:5c:9a:be:17:94:05:11:44:7b:fa:c0:14:04:a2:e4:
3b:73:00:44:ba:c8:74:f0:14:3a:6b:de:dc:f0:68:eb:9c:a3:
ce:46:94:2b:84:f0:83:d2:92:0f:ce:ca:0f:27:1f:5d:f8:28:
c2:46:b7:32:64:09:e3:f7:bb:1e:2a:75:90:ea:47:d4:75:1b:
3d:4c:b1:ca:8d:a7:55:94:be:0b:60:7f:1f:59:74:ff:d2:cb:
cb:9d:de:14:4a:31:04:ff:ae:db:dc:7a:45:0a:ef:de:94:63:
63:6d:09:56:d1:86:60:52:29:94:32:ba:c7:c2:ab:50:32:34:
62:7d:ce:74:79:c4:0c:50:10:80:c0:d4:e6:0f:36:d9:5d:0d:
51:c6:5b:6a:c4:91:0e:be:d5:c6:c3:a8:5d:1c:67:55:be:2b:
d1:4b:f9:0a:1a:1d:19:24:95:60:c6:99:1a:bb:f9:d0:4f:cc:
f4:be:1c:c7:60:9d:b1:bb:2a:7a:a8:1d:f0:e5:ea:3a:a5:42:
46:7e:ee:c2:16:4d:e9:cf:0e:be:07:19:c3:82:e1:a2:d9:c0:
b1:da:eb:e6:c8:11:89:01:dd:51:c8:36:95:a7:2e:4f:1e:2d:
06:34:e7:10:18:e3:96:ef:8b:eb:3d:bc:80:a9:65:26:8f:5a:
8e:3b:ae:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:55 2026 by rpki-client