Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
File: 1s78oMbNlHbTMBVgOHLSYb8rNTY.mft (raw, json)
Hash identifier: TT1GGCkliWiV6/lqt5bzsYGygMIaEw2NNmg0RQ/Ikl4=
Subject key identifier: 3B:4F:F2:F6:0F:A9:D8:AF:E6:5D:5B:A8:01:6B:05:36:F5:C5:62:89
Authority key identifier: D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
Certificate issuer: /CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Certificate serial: 01A040F2C437A68A9C1EDBD158B6FC5218CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
Manifest number: 0383
Signing time: Thu 27 Aug 2026 02:00:46 +0000
Manifest this update: Thu 27 Aug 2026 02:00:46 +0000
Manifest next update: Fri 28 Aug 2026 02:00:46 +0000
Files and hashes: 1: 1s78oMbNlHbTMBVgOHLSYb8rNTY.crl (hash: 2zDBa8yGhRAthRx8yqOCdwXznGenSrFL3PyAzY34YGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:c4:37:a6:8a:9c:1e:db:d1:58:b6:fc:52:18:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Validity
Not Before: Aug 27 02:00:46 2026 GMT
Not After : Aug 28 02:00:46 2026 GMT
Subject: CN=3b4ff2f60fa9d8afe65d5ba8016b0536f5c56289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fc:52:e1:a3:95:cb:5a:de:b3:4e:14:a2:90:
02:bb:2c:44:2f:c4:bb:c4:1a:17:eb:22:19:68:c6:
a5:5b:91:de:ba:af:af:d0:a2:36:a6:80:0a:ff:3e:
29:67:49:56:93:a6:73:51:e3:ce:2d:fb:96:6c:3c:
e7:bc:d0:91:2e:c7:1c:5a:58:fe:f2:25:ad:39:82:
83:12:da:2d:fe:a9:0c:17:cb:cf:30:95:8f:10:8a:
50:9c:39:9a:8c:dd:48:9f:61:1f:71:ff:b3:be:1f:
bc:7e:d8:ab:3f:5a:89:95:8c:24:e5:11:62:e8:cd:
a6:f8:f1:f8:26:72:b7:ca:99:3c:a5:78:fb:14:f9:
fd:8b:b7:8a:3c:8a:c4:3b:ea:26:5b:82:8c:36:79:
c5:55:59:44:64:e4:d6:5c:e3:ca:22:51:22:56:32:
8e:7e:13:5c:ca:5b:5f:1d:44:b7:71:18:0d:6e:4f:
fd:be:93:ee:97:15:b0:10:54:32:9d:c4:44:62:07:
84:22:30:aa:82:48:5a:ee:20:bb:cc:42:e8:0f:28:
33:84:0d:ba:52:f3:19:99:6f:6b:04:0a:be:71:93:
f7:5f:fb:56:f7:8d:3f:ac:07:0c:31:09:7e:ea:d3:
9e:49:8b:14:fa:53:25:86:4d:90:a1:2a:95:08:c1:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4F:F2:F6:0F:A9:D8:AF:E6:5D:5B:A8:01:6B:05:36:F5:C5:62:89
X509v3 Authority Key Identifier:
keyid:D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6a:b6:e6:08:a6:f6:d5:83:07:9c:bf:82:3b:8f:a9:3c:81:
0b:02:c0:ed:42:b0:89:0f:d4:4a:ec:13:ef:9b:8a:1f:3f:01:
26:e4:a9:60:c7:7e:6b:ba:c5:32:63:97:fa:2b:6a:a0:fc:8e:
f4:e3:3f:bf:2f:2e:43:c6:dd:04:9a:6e:48:2e:63:71:3c:5f:
1c:fd:eb:f0:e7:ce:64:d3:8e:25:5b:b1:ad:e5:9a:18:95:b6:
e0:53:3d:16:1e:0e:f6:56:ce:b8:56:a1:ab:41:7c:34:19:96:
a8:09:10:80:21:f8:d2:cb:07:0f:a7:ae:12:b4:33:41:eb:c3:
4a:4f:86:7f:f9:fe:87:c4:f3:c4:1f:1e:35:b2:b4:d7:ba:c9:
72:ba:e8:b8:37:76:c1:52:b3:cb:e0:55:af:d8:d4:71:be:6e:
de:be:d3:81:60:81:59:86:07:50:88:82:93:8f:26:e8:2f:18:
4a:26:5b:10:d0:28:dc:86:ca:6c:ad:7b:64:49:97:30:52:e7:
43:3d:42:c1:bc:22:47:76:f7:49:33:6e:32:6e:ed:b0:a6:9e:
f4:0a:32:4c:80:9a:b4:3f:f7:61:32:83:94:e5:5b:b4:5b:df:
c4:80:59:f3:1d:a7:2b:e1:49:f5:72:c2:6a:9b:fa:b2:d9:30:
b3:01:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:30 2026 by rpki-client