Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/3ma776iICp6qjtAvg9fZlJgcHRg.mft
File: 3ma776iICp6qjtAvg9fZlJgcHRg.mft (raw, json)
Hash identifier: gkMs/hNVPHQ2aetlMwaQXaMhhr3ZGPMG+1rlJUfMkgw=
Subject key identifier: 43:BD:22:D1:0A:62:62:04:98:B9:17:FF:A2:29:F2:B6:B7:33:23:99
Authority key identifier: DE:66:BB:EF:A8:88:0A:9E:AA:8E:D0:2F:83:D7:D9:94:98:1C:1D:18
Certificate issuer: /CN=de66bbefa8880a9eaa8ed02f83d7d994981c1d18
Certificate serial: 01A0404E9A8E412A99DED3F0378E22A5A709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ma776iICp6qjtAvg9fZlJgcHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/3ma776iICp6qjtAvg9fZlJgcHRg.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:28 +0000
Manifest this update: Wed 26 Aug 2026 23:01:28 +0000
Manifest next update: Thu 27 Aug 2026 23:01:28 +0000
Files and hashes: 1: 3ma776iICp6qjtAvg9fZlJgcHRg.crl (hash: LCYz2EJDQWnbNUe95yvvixNP6Zz5J3WRFSw5otwYB/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/3ma776iICp6qjtAvg9fZlJgcHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/3ma776iICp6qjtAvg9fZlJgcHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ma776iICp6qjtAvg9fZlJgcHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:9a:8e:41:2a:99:de:d3:f0:37:8e:22:a5:a7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de66bbefa8880a9eaa8ed02f83d7d994981c1d18
Validity
Not Before: Aug 26 23:01:28 2026 GMT
Not After : Aug 27 23:01:28 2026 GMT
Subject: CN=43bd22d10a62620498b917ffa229f2b6b7332399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:82:84:11:05:11:ea:cc:3d:df:b3:3a:4b:64:
fe:d9:31:d2:c6:3d:f7:9f:d8:05:ef:24:32:b9:63:
13:bf:cd:5b:41:01:cd:46:59:10:16:f0:3c:bc:df:
ba:9d:57:b0:a6:28:71:bc:68:13:06:e9:75:7a:49:
2d:2d:e3:49:c1:25:7a:d2:8c:7f:7b:0e:be:8a:0d:
c8:7e:11:11:98:1f:71:43:57:3b:27:03:66:a9:ba:
49:a9:98:f4:19:94:52:24:31:a6:2a:15:1a:3e:b3:
9a:e7:d1:02:33:a5:4a:2e:fb:76:33:af:c9:5c:52:
35:27:8c:2e:56:e9:72:2c:eb:82:55:8e:82:08:c7:
81:0f:f6:0f:a7:ba:b1:37:e2:dd:73:cd:43:d2:ba:
d5:e3:60:24:a4:19:2e:cb:f8:9b:d6:fd:da:e5:2a:
26:c9:9d:8e:39:29:41:29:25:8d:9f:95:f9:66:fb:
30:a5:a0:eb:b6:24:1d:31:ae:b8:51:cd:b5:a5:eb:
62:bd:83:9a:90:b2:33:12:2d:63:10:a9:6b:d2:fd:
12:53:a1:e4:11:0d:10:88:b8:84:cb:b3:f3:74:98:
d9:38:c6:8c:25:76:ee:93:a8:b8:b9:06:2d:76:bb:
55:b8:d9:2f:f0:52:fa:22:55:a0:60:de:fb:40:81:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BD:22:D1:0A:62:62:04:98:B9:17:FF:A2:29:F2:B6:B7:33:23:99
X509v3 Authority Key Identifier:
keyid:DE:66:BB:EF:A8:88:0A:9E:AA:8E:D0:2F:83:D7:D9:94:98:1C:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ma776iICp6qjtAvg9fZlJgcHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/3ma776iICp6qjtAvg9fZlJgcHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/3ma776iICp6qjtAvg9fZlJgcHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:93:24:19:39:90:79:68:c9:24:33:6b:3a:41:5a:96:bd:15:
04:27:97:73:4d:bd:ae:14:e9:5d:57:26:57:8f:fd:b2:31:7d:
88:88:28:08:fd:21:8d:ff:dd:0b:7e:30:b1:55:9b:91:74:e3:
b2:92:66:29:23:ed:97:3e:5a:0f:a4:1d:b1:c1:b0:9d:6f:41:
38:ed:7e:0d:7e:61:b5:25:22:ac:4a:26:59:42:88:bd:c9:6f:
ba:e3:17:3e:72:54:d9:b2:bb:54:63:57:03:c5:16:1e:cd:47:
5e:f8:3a:53:75:46:03:76:35:d8:ce:8b:43:6f:3e:f9:af:b9:
20:fa:fc:f0:f3:d1:ae:59:ef:2e:50:75:3d:23:f3:3d:59:c9:
ff:b2:00:7f:bc:b7:4f:5e:49:22:b5:09:c3:84:bc:1b:de:31:
8f:b4:57:c2:6d:bf:66:be:c2:62:e6:43:70:84:c9:d5:60:19:
6d:6f:7b:45:e9:5e:0d:b8:84:80:4e:3b:e1:ef:77:7f:8f:f3:
17:e7:7e:10:64:18:8e:2b:f8:6e:b5:d8:c5:c3:d8:a2:3f:8f:
a4:ba:1c:69:61:26:3a:ef:d8:ef:5d:0d:4f:2f:2b:8e:75:74:
7d:92:22:8b:27:b1:5a:9b:7c:18:7b:22:38:06:87:a5:cd:df:
a3:b3:78:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:25 2026 by rpki-client