Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.mft
File: 3eDv_-eZBjbry_628Ek2EyYQcq8.mft (raw, json)
Hash identifier: MECMYYrTJtt81K2OKG7eB8/7eN6nVgvoDycRiZ+SJV8=
Subject key identifier: B8:50:15:7C:4F:12:47:2A:D6:4B:BC:13:1F:C3:33:65:83:B4:B3:1C
Authority key identifier: DD:E0:EF:FF:E7:99:06:36:EB:CB:FE:B6:F0:49:36:13:26:10:72:AF
Certificate issuer: /CN=dde0efffe7990636ebcbfeb6f0493613261072af
Certificate serial: 01A03FA90C5AB621DCAEC52BBED549206152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eDv_-eZBjbry_628Ek2EyYQcq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.mft
Manifest number: 97
Signing time: Wed 26 Aug 2026 20:00:38 +0000
Manifest this update: Wed 26 Aug 2026 20:00:38 +0000
Manifest next update: Thu 27 Aug 2026 20:00:38 +0000
Files and hashes: 1: 3eDv_-eZBjbry_628Ek2EyYQcq8.crl (hash: 9LBFaMcYXAM13ncrVaIDgG/ug6Yh3TkYOyLOTdLWJJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eDv_-eZBjbry_628Ek2EyYQcq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:0c:5a:b6:21:dc:ae:c5:2b:be:d5:49:20:61:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde0efffe7990636ebcbfeb6f0493613261072af
Validity
Not Before: Aug 26 20:00:38 2026 GMT
Not After : Aug 27 20:00:38 2026 GMT
Subject: CN=b850157c4f12472ad64bbc131fc3336583b4b31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:f0:e7:4a:89:44:fb:a7:d7:63:f5:a8:44:
a0:0c:49:77:04:0e:9b:57:ff:28:72:5e:32:5a:a0:
c5:45:71:37:2c:de:84:f7:cb:bf:67:89:df:23:2e:
59:8b:27:b1:a4:77:68:60:8e:f0:55:3b:e2:44:bb:
f7:09:2d:8a:e6:d8:2b:0d:7d:9a:ef:35:78:c7:db:
2e:51:2d:83:de:9c:e2:fb:07:94:a1:d9:7a:4f:df:
6c:d2:6e:3b:cf:aa:49:54:78:05:34:f1:6a:77:d0:
fa:b4:04:b2:1d:5e:68:d0:8c:75:f0:07:1e:38:7c:
4e:ed:c8:be:48:cc:67:6e:49:79:8b:5e:14:11:89:
a8:c0:0a:9a:b1:b4:7b:b2:f8:e7:13:81:70:e6:51:
71:c3:6c:4b:80:99:04:0c:1d:2c:7f:d8:51:76:bf:
b3:46:7d:cf:76:17:73:4c:11:f2:ed:84:2f:92:5f:
d1:97:e3:4f:6b:c2:c5:fd:9b:f0:9e:ff:7d:58:5d:
85:a7:4c:dd:54:29:49:74:2e:71:af:6b:ea:98:16:
e6:3e:d9:6a:f6:1e:b0:4a:ab:b9:d5:08:6a:a7:93:
61:4b:24:ab:64:59:9f:13:f0:9d:18:a8:3c:4c:72:
c4:4d:ad:d1:1b:33:d2:b6:7a:53:c0:a0:00:82:46:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:50:15:7C:4F:12:47:2A:D6:4B:BC:13:1F:C3:33:65:83:B4:B3:1C
X509v3 Authority Key Identifier:
keyid:DD:E0:EF:FF:E7:99:06:36:EB:CB:FE:B6:F0:49:36:13:26:10:72:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eDv_-eZBjbry_628Ek2EyYQcq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:6f:d1:45:cf:dd:34:f4:79:2b:0e:2e:38:27:cd:93:b3:ef:
92:31:b7:8d:dd:00:c2:fa:ad:b6:91:c6:de:e8:86:c0:1b:0d:
c2:ab:12:7e:aa:eb:04:71:72:16:f7:5f:cb:af:04:d7:20:7b:
52:a8:15:ea:3b:84:b6:67:57:87:a6:06:58:56:43:c9:e2:4e:
5b:6b:95:d2:12:f2:0f:aa:f3:df:6e:85:68:25:55:c9:cc:37:
34:a5:eb:31:c0:b9:2e:0c:f2:4a:8f:8d:42:e3:46:3c:48:98:
16:d5:5d:3b:00:f0:59:a8:0e:dc:7c:b3:b7:f3:d6:13:c6:25:
1a:9e:fe:9b:0c:b4:39:73:ab:a7:fe:1a:99:8b:c6:a5:eb:c4:
25:17:25:09:59:8c:8e:70:8d:cb:d8:b5:fc:f7:ec:b9:91:36:
39:22:80:b0:88:44:7a:32:3b:fd:fe:3a:16:7b:b2:91:30:33:
4e:13:dc:78:62:96:85:1e:14:48:03:73:1f:b0:c3:0d:97:68:
d8:7c:7c:e5:0e:23:39:d2:ff:a4:d3:26:85:49:92:58:da:58:
1e:69:26:8c:b5:ec:23:be:64:99:70:96:cd:e7:8a:65:19:27:
c1:b4:4d:e9:29:b5:b0:4e:49:4d:f6:ba:aa:7c:17:5f:de:8d:
16:84:b8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:24 2026 by rpki-client