Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: AxCcu29WjbZgyE/Usoulqn593ZXDUZB67gFbOrlr1Ds=
Subject key identifier: 97:19:3D:48:8C:41:7F:08:9A:EC:AB:30:C1:9C:CE:52:76:AC:52:68
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 01A1423A34A0E861AF16F2DD290A3B54458A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 169E
Signing time: Fri 16 Oct 2026 01:01:13 +0000
Manifest this update: Fri 16 Oct 2026 01:01:13 +0000
Manifest next update: Sat 17 Oct 2026 01:01:13 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: R/4b3sIG/6xRWsOQFt+DeIjWsfd8d0U2iloyt0rORtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 23:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:3a:34:a0:e8:61:af:16:f2:dd:29:0a:3b:54:45:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Oct 16 01:01:13 2026 GMT
Not After : Oct 17 01:01:13 2026 GMT
Subject: CN=97193d488c417f089aecab30c19cce5276ac5268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:c8:fb:dd:88:57:65:cf:80:72:2a:79:00:
33:9a:59:0e:1d:0b:a4:44:24:54:15:a5:b1:9f:52:
ef:0e:ce:50:f1:07:ee:01:cd:a7:36:f4:3b:b7:5d:
87:f7:70:73:08:e8:d4:c6:10:f2:ea:6f:18:23:ec:
a8:81:b8:47:14:5f:70:df:b5:45:fe:70:3f:97:de:
b1:c2:b7:28:3b:73:3c:c2:8e:a4:d9:46:52:9d:86:
8b:8d:0b:1e:e4:3d:a7:e0:19:38:d3:11:2f:46:98:
09:30:b6:d1:68:5d:05:6f:81:48:20:cd:2d:20:d0:
df:e1:98:08:1f:1c:e7:09:ee:e7:e8:2a:15:5d:94:
cd:43:d6:07:be:3f:45:37:c7:a0:46:f4:9a:2f:47:
49:3b:13:6a:f4:b6:f7:1b:fc:aa:50:85:e5:e5:b1:
46:31:cc:1d:91:6d:10:48:17:21:c1:e7:63:8e:51:
c9:1b:61:c8:78:23:e2:df:9e:bf:de:2f:d6:d4:31:
51:56:eb:ba:03:88:84:21:b5:82:a7:6c:48:55:fc:
09:49:0a:d5:b9:78:ef:09:17:e3:19:63:74:02:54:
61:d8:38:f3:9a:5d:e6:c0:22:fd:6d:3a:4e:7d:60:
31:eb:38:c6:a0:83:0f:8a:ef:d1:82:97:c0:75:7c:
85:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:19:3D:48:8C:41:7F:08:9A:EC:AB:30:C1:9C:CE:52:76:AC:52:68
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:16:ec:15:8f:e9:e6:ff:9e:8e:64:f4:a1:09:33:30:61:4b:
5a:15:73:4e:49:30:3e:b6:51:ea:45:e8:b6:06:9a:63:b9:f8:
7f:db:28:20:67:73:db:84:a8:4c:5d:59:06:ed:09:9f:47:0b:
1c:5b:1d:20:f9:3b:c3:98:c0:4a:25:c5:8d:97:7a:a5:2c:f7:
b8:29:54:ab:74:a3:5a:74:96:15:33:0f:3b:27:2e:44:7c:3d:
c1:60:77:3d:6d:29:66:6d:52:4f:41:33:37:d3:43:f8:7b:cf:
91:94:5e:94:37:86:60:1f:aa:17:82:8a:a9:f9:54:bd:c8:98:
a2:0e:b5:40:62:6e:7c:02:a8:ae:be:c0:a4:ee:76:c5:52:c1:
36:c2:da:79:76:ab:91:e6:4d:3a:eb:be:bb:ff:0e:d7:d7:33:
f7:bf:72:3a:8e:77:d4:bb:8e:56:c0:f7:3b:a4:f7:a9:c8:6e:
e0:0c:1e:09:3c:4c:7a:b9:5b:f9:7a:bf:3d:a3:a7:b8:ee:6c:
dc:2d:95:0f:f7:ff:eb:b1:bf:54:5f:e7:02:5d:7c:0f:10:e6:
ae:5d:9f:26:95:2d:b3:a1:72:54:d7:ac:9a:9b:26:e0:27:cc:
95:32:14:b0:57:61:e0:71:00:d3:9a:b8:d8:87:af:0f:bd:a3:
14:47:9a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 05:38:37 2026 by rpki-client