Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier: 4t2rJqTk7ONsK/ucBrxNZcH64vsE3yp0fsQsOvR0t5A=
Subject key identifier: 3A:54:EB:DD:44:4D:45:43:CF:DB:F1:A2:DA:E7:82:D0:C3:D6:A1:80
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial: 01A000CA01EA663D090D70F259F20CB8435A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number: 0CAB
Signing time: Fri 14 Aug 2026 15:00:33 +0000
Manifest this update: Fri 14 Aug 2026 15:00:33 +0000
Manifest next update: Sat 15 Aug 2026 15:00:33 +0000
Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: kst18aGhRhRR9dFQdaZMk8L96QxHd1TE+nk2Oz1CUxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:01:ea:66:3d:09:0d:70:f2:59:f2:0c:b8:43:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Validity
Not Before: Aug 14 15:00:33 2026 GMT
Not After : Aug 15 15:00:33 2026 GMT
Subject: CN=3a54ebdd444d4543cfdbf1a2dae782d0c3d6a180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:66:0f:54:a0:21:c6:2b:4c:bd:60:7a:a3:
8e:3e:79:a6:3a:78:a1:01:6b:d8:41:69:84:43:e6:
d2:d4:81:db:86:7c:73:2a:a7:b9:c7:71:4b:ab:af:
e4:3c:7a:1d:67:13:9e:87:86:2c:fe:4d:02:8b:94:
fa:ec:0b:d2:b8:ad:ae:63:54:9b:8d:df:9e:9d:5a:
89:23:cf:5b:6b:7a:85:47:9c:7d:2d:7b:c3:83:05:
bf:fa:f9:a7:bc:1c:8c:38:3d:05:e8:dd:d9:53:b0:
13:33:59:b1:0a:dd:0d:60:06:0e:5c:4b:5d:7d:89:
3b:37:5c:37:67:e8:d6:6f:c3:be:7a:2b:f2:b0:50:
a7:cf:0c:c9:73:16:38:0e:44:b8:95:a1:7a:c2:26:
c3:e2:3e:a4:6c:6d:ff:81:53:f3:7a:4e:5a:a1:db:
d1:20:7b:a3:dd:db:4b:e7:a7:49:a3:54:41:f0:e3:
bf:e6:ca:d1:59:37:04:cc:50:1b:00:44:d1:18:45:
d1:89:97:ed:73:e8:42:e5:3a:86:56:7d:5f:d4:94:
94:30:16:04:e9:0b:04:a8:97:2f:90:16:25:bd:03:
55:24:cf:5b:23:c4:5b:5f:3c:62:e1:13:07:bc:29:
22:00:9b:63:91:dc:85:32:c7:14:cc:e0:83:61:82:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:54:EB:DD:44:4D:45:43:CF:DB:F1:A2:DA:E7:82:D0:C3:D6:A1:80
X509v3 Authority Key Identifier:
keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:73:04:d9:81:f5:46:23:99:12:b7:36:35:65:8e:a1:69:86:
9f:86:87:8c:b1:f4:f9:fa:4b:1a:bf:04:08:04:6f:cb:e6:7e:
48:b7:64:94:b9:cf:09:86:9a:f8:77:3c:e4:54:d1:d4:d9:f5:
4a:3b:ee:59:60:b4:12:b5:99:ef:d6:29:98:16:7c:5d:61:b2:
c5:36:4c:b2:fb:45:23:5b:5a:bc:11:cb:e4:56:e9:22:10:34:
68:63:06:9c:43:6b:c9:b5:b9:1a:67:6d:3c:4f:6e:a8:47:b8:
e1:82:c5:04:b3:0e:2f:be:ce:34:ec:6c:b3:42:18:3f:cf:fc:
f4:d7:94:e7:ad:1c:00:0d:e9:42:27:ce:65:35:71:3b:db:93:
d5:db:b3:f0:8e:46:08:8e:aa:b9:10:42:58:80:45:a6:8a:3c:
25:5f:a8:1a:ec:0f:11:7f:05:b6:a9:34:8f:f3:e9:f2:f5:1d:
7e:7b:39:ed:88:69:46:e1:05:47:4c:5f:68:f2:ed:3e:a9:bb:
5b:a2:97:4b:08:63:e7:79:d5:7c:f6:40:27:8e:05:13:7a:0e:
7d:53:aa:38:c4:c9:4a:15:68:c8:ad:bc:ab:2d:cb:f7:62:e3:
7a:61:6e:f9:8a:a1:73:de:45:e4:bb:10:a4:98:cd:7b:d4:08:
07:0a:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:39 2026 by rpki-client