Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
File: 3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft (raw, json)
Hash identifier: 3YJj/gsetC1xSg2oUUmCgIJYq7mjhgl1iC/iJsxA8qE=
Subject key identifier: 97:E3:EC:B8:F0:8B:D5:81:FC:D5:8C:F9:C1:49:B3:18:1D:7D:99:52
Authority key identifier: DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3
Certificate issuer: /CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
Certificate serial: 01A001018D2F370256D33A2C004E3D339860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
Manifest number: 0B26
Signing time: Fri 14 Aug 2026 16:01:13 +0000
Manifest this update: Fri 14 Aug 2026 16:01:13 +0000
Manifest next update: Sat 15 Aug 2026 16:01:13 +0000
Files and hashes: 1: 3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl (hash: kTyruSJ9rIa52UNlcXm0B43xhG1Qxo8RxzxgMiVa8L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:8d:2f:37:02:56:d3:3a:2c:00:4e:3d:33:98:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
Validity
Not Before: Aug 14 16:01:13 2026 GMT
Not After : Aug 15 16:01:13 2026 GMT
Subject: CN=97e3ecb8f08bd581fcd58cf9c149b3181d7d9952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:19:2d:c2:16:0a:5b:d4:6b:46:3a:40:db:
38:0c:f8:58:a7:af:69:34:63:ef:57:4d:7c:cc:fe:
54:11:25:be:d8:56:47:74:15:3f:84:a7:32:5e:7d:
54:63:88:39:4b:4b:5d:16:60:11:35:d9:3c:f6:d7:
5e:aa:c3:09:4c:6a:c3:fe:ef:53:ba:46:a9:31:c5:
5d:9f:30:47:92:7e:3a:58:67:f3:a5:af:e9:bb:e7:
0e:76:01:a3:05:74:51:94:74:2f:14:bb:71:5a:c0:
6c:35:4f:58:49:d8:67:2b:66:57:7a:82:01:2b:22:
d8:31:4c:38:71:15:64:a7:79:8c:b6:de:66:d0:7e:
6f:fe:77:51:38:ac:8c:99:de:bc:11:ba:07:a2:57:
4c:94:9d:d2:58:4a:39:9b:77:a6:a2:71:9f:da:c7:
97:93:13:57:b9:aa:23:d1:e4:1c:6d:3d:a4:c3:ff:
a1:ec:68:38:7a:1b:fd:8f:b9:c9:1e:5b:91:1f:ac:
5d:18:92:84:62:e5:96:8d:44:88:90:23:1e:08:35:
4d:ab:c7:6b:54:57:c3:fa:49:25:c4:39:ed:6b:51:
5d:02:b4:3f:4b:6e:41:5d:9c:b2:0b:dc:be:cf:8e:
78:1d:69:4e:bc:e2:5e:e3:8a:fe:fb:a1:22:3e:a8:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E3:EC:B8:F0:8B:D5:81:FC:D5:8C:F9:C1:49:B3:18:1D:7D:99:52
X509v3 Authority Key Identifier:
keyid:DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:38:11:8b:6e:73:a2:de:04:0c:79:d7:2d:2a:41:db:30:6f:
ae:fb:a8:99:ae:23:ef:69:36:6f:02:2c:5b:b2:b2:91:55:3e:
bf:98:29:ed:da:ec:e8:54:ae:cd:e0:e1:4c:e1:00:6b:1e:31:
9b:93:0a:b6:c1:37:7d:5f:ba:8d:63:ba:14:ae:d9:77:d7:20:
f5:b4:5a:e5:45:04:1d:ca:11:9c:bb:d9:54:9e:be:14:90:ff:
4d:c0:1e:0e:e8:5e:6b:29:7e:63:d4:36:9f:a6:46:8f:3c:62:
5c:00:e2:02:a0:3a:e3:52:63:dd:bc:28:dc:da:34:b9:c3:6f:
34:8e:d4:53:ce:e8:7a:b5:78:4d:87:b6:ab:d8:cb:c3:ae:63:
e3:b5:ba:3a:16:a2:4b:a7:70:a0:51:aa:70:98:fb:52:d3:99:
60:d4:f7:e5:a6:7c:1c:8c:c0:64:e3:7b:5d:c8:e4:29:05:48:
85:c0:5f:ac:8e:29:f8:02:d6:89:d6:65:78:6a:58:e0:09:8b:
51:84:55:06:de:60:95:ee:63:54:73:e1:d5:e5:cd:73:6c:c0:
97:66:b6:ec:3b:72:45:b1:1b:15:df:a4:f5:ba:6b:0d:2c:b0:
3a:e8:74:18:f9:b1:46:3d:2f:8f:57:6d:83:5c:25:ee:e0:75:
c8:58:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:13:37 2026 by rpki-client