Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
File: 3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft (raw, json)
Hash identifier: lHihsOu+RXJO8jHxFos6cNKOtV3B464+20K1Izuhu70=
Subject key identifier: 5E:14:CF:45:63:6A:4B:25:25:95:22:04:6D:A1:15:A1:44:22:E2:F1
Authority key identifier: DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3
Certificate issuer: /CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
Certificate serial: 01A13DB864FC159CF2674546AFABDE287769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
Manifest number: 0BCA
Signing time: Thu 15 Oct 2026 04:00:56 +0000
Manifest this update: Thu 15 Oct 2026 04:00:56 +0000
Manifest next update: Fri 16 Oct 2026 04:00:56 +0000
Files and hashes: 1: 3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl (hash: 4rNaMW30qyFni8U+4YFwA/6XjTf9fAFxXbM/oY0L9l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:64:fc:15:9c:f2:67:45:46:af:ab:de:28:77:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
Validity
Not Before: Oct 15 04:00:56 2026 GMT
Not After : Oct 16 04:00:56 2026 GMT
Subject: CN=5e14cf45636a4b25259522046da115a14422e2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:4d:2b:b1:35:d1:6a:4b:74:48:04:1f:b3:
c0:c6:e9:98:bb:89:56:3f:6f:90:18:cd:39:d4:b1:
39:10:21:a6:c2:5d:ad:85:50:36:47:c7:29:60:4c:
38:c9:63:bd:af:0a:b9:d8:3b:9d:04:cb:13:ee:7d:
21:74:90:2d:67:90:35:9f:12:58:2d:4a:a2:9c:78:
05:dd:c7:84:1d:8e:47:8b:4d:9d:3f:0a:d1:1c:4b:
f6:be:cb:04:c6:10:79:e0:aa:da:12:3e:b8:e9:7d:
06:25:2e:3f:52:97:f3:d8:f8:5b:8f:bb:eb:5b:86:
e3:1a:c9:a2:25:a3:03:e8:55:c0:3e:59:d3:4d:11:
aa:65:8a:29:e0:71:8d:12:4c:9e:29:b0:2b:b3:f4:
2e:bc:72:e3:e6:05:f8:df:77:f5:c8:27:06:b0:a4:
f7:dc:89:d1:5d:5b:3f:12:53:88:42:9e:b1:b6:89:
58:72:6e:8a:c0:07:b9:34:96:4a:57:94:e5:5a:22:
2d:5b:48:dd:25:13:f4:c1:ba:00:78:72:ed:88:ba:
c1:69:22:6b:25:e7:21:00:2c:fb:86:3f:0f:2a:aa:
eb:44:78:99:9f:9c:7d:e4:cf:ff:e5:65:93:eb:4f:
35:06:87:a8:6c:f9:75:c0:f0:1c:10:88:5d:81:26:
72:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:14:CF:45:63:6A:4B:25:25:95:22:04:6D:A1:15:A1:44:22:E2:F1
X509v3 Authority Key Identifier:
keyid:DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:44:62:38:ad:54:e2:4a:54:8f:8a:bd:36:07:f7:9f:c9:9e:
4b:20:f5:56:90:71:b7:2c:8e:1d:39:ef:82:52:b1:38:83:4b:
95:5b:65:02:ea:6c:00:ce:d6:6f:10:80:34:6f:95:70:ab:79:
38:7a:09:11:fa:2f:3b:5e:3d:b6:98:1d:f1:f7:9d:40:a3:a7:
ba:52:b0:da:7b:e5:a1:9c:36:c5:b6:41:26:64:02:25:86:6c:
2f:4c:49:41:f3:64:07:bb:41:7f:e8:28:1d:ee:d3:5b:f9:41:
91:23:06:c2:9a:43:d7:6c:39:99:4a:0a:c3:67:89:47:b9:6f:
b4:10:b1:77:e4:f1:aa:46:ed:b0:5a:df:51:7e:3a:fc:f9:0c:
cc:a9:8e:ec:a5:70:c8:68:d3:81:31:a9:d8:e6:4f:df:64:ab:
d7:3b:fd:b4:b5:8d:3f:49:02:27:7b:3b:e0:7e:52:e9:86:80:
d3:cb:8c:11:33:5a:10:04:21:16:8c:e7:e7:3e:78:1d:f9:7e:
23:c6:fa:62:d3:35:e2:30:37:f9:4d:ef:84:c6:cc:5e:57:e3:
f1:11:af:f3:87:ef:43:d5:bb:d3:57:91:37:db:f1:5a:78:53:
4c:04:c9:38:8e:9a:6c:bd:30:4a:6d:7e:a7:a5:6a:1b:8c:0f:
05:63:c0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:54:52 2026 by rpki-client