Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: MDATWiXgQVVUezUQuyT0pb+nH1Xghzr8t7NUXgrnxuU=
Subject key identifier: 05:93:69:4D:A3:51:1A:74:01:52:44:2F:06:1A:CA:33:54:A6:89:CD
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 01A14082FB620F7DD41B7C0BA40814136779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 1185
Signing time: Thu 15 Oct 2026 17:01:28 +0000
Manifest this update: Thu 15 Oct 2026 17:01:28 +0000
Manifest next update: Fri 16 Oct 2026 17:01:28 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: blXQbqBBSvGBEOL3szezAwwlItXIC27eAEVlBtTc674=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:fb:62:0f:7d:d4:1b:7c:0b:a4:08:14:13:67:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Oct 15 17:01:28 2026 GMT
Not After : Oct 16 17:01:28 2026 GMT
Subject: CN=0593694da3511a740152442f061aca3354a689cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bd:8d:6a:0c:77:f1:94:2d:8c:82:2e:21:be:
4c:44:fd:29:6d:4c:de:54:71:21:bf:82:79:6b:d7:
79:64:3f:d2:a4:2a:70:eb:b1:2f:96:54:a5:81:d2:
70:51:36:d3:7f:bc:10:c8:66:8e:37:cb:37:e6:51:
64:27:7e:17:08:0a:2a:b3:e7:79:e8:80:16:de:83:
2e:d2:f3:c0:bb:2e:ea:a8:0c:cf:69:1f:44:83:ca:
a6:0a:33:0b:25:f4:6b:8c:e8:e3:3f:4d:77:05:51:
a7:b4:40:01:5e:27:77:19:71:8c:34:1b:9e:97:42:
4f:b5:ce:92:a4:be:34:9e:cb:ca:b4:c3:85:4d:8f:
e6:4c:0c:be:0a:22:3d:9b:0c:13:7f:c3:f2:30:09:
90:a8:7a:11:99:d5:b7:d5:f9:51:34:68:c6:01:c8:
e1:5f:fa:15:71:54:e2:cb:ae:56:fe:db:0c:40:f9:
f8:9a:bc:5c:42:07:1f:7e:93:25:ed:02:42:1f:80:
5e:18:8d:7d:cf:78:a6:57:76:f9:47:16:6a:bf:ea:
bb:1b:1d:f1:d3:a8:f6:bf:69:16:5d:8a:4a:9d:b9:
2d:15:ec:77:fc:05:27:02:a1:84:1e:1c:1e:a2:8f:
9a:2b:eb:6f:59:01:73:5f:1c:1f:58:01:57:0c:52:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:93:69:4D:A3:51:1A:74:01:52:44:2F:06:1A:CA:33:54:A6:89:CD
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:70:8a:e0:3b:b8:3b:2c:42:f2:a4:12:d3:4d:05:70:5a:38:
39:3c:dc:cc:a4:41:33:9c:10:30:71:5c:c8:7e:24:e3:47:a9:
14:23:32:53:a6:c8:5f:c3:06:27:ac:bf:d0:f6:60:96:a3:33:
d5:96:4a:98:d9:8e:cc:d0:6b:35:49:74:94:ba:54:ef:43:6e:
79:8a:b0:3c:a4:47:3a:5b:f3:4c:58:a4:ae:5b:d0:7c:f2:ca:
3a:60:6c:ac:bc:8c:22:f2:40:1e:7e:87:17:2a:92:76:ea:84:
f7:0a:56:f0:a7:e3:b1:07:6e:65:67:00:43:66:e3:aa:f1:63:
f9:b2:26:07:8a:4c:dc:15:29:5f:ea:99:5a:8f:00:1f:e0:54:
42:d6:8a:38:6b:c3:1c:2a:c4:4f:a9:cb:62:c1:52:2d:b6:87:
77:58:23:af:d4:83:c8:a6:0f:70:af:7e:02:48:db:60:44:31:
08:58:18:10:ca:19:e4:ec:da:85:56:b3:b2:5e:25:fd:5d:71:
25:c3:c7:66:52:fa:98:87:22:19:f0:53:1a:cd:e2:f7:b7:e2:
ae:9f:6c:72:26:87:cb:35:0f:28:25:c4:b2:51:b6:c8:e5:3a:
46:ef:99:58:28:e0:07:35:b2:1d:8c:3c:06:bc:25:b5:42:15:
87:6c:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:12:07 2026 by rpki-client