Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
File: 3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft (raw, json)
Hash identifier: XQSZrm0P9iy83pPJfELd4gMFWmWoPolTf8ulgP9dMGA=
Subject key identifier: 61:CE:8E:2D:77:79:06:B6:06:AD:94:0F:78:D9:4C:8D:62:43:2E:CC
Authority key identifier: DC:56:53:CF:B0:A4:EE:54:52:5E:AE:F7:B3:70:B4:CB:D9:AA:07:81
Certificate issuer: /CN=dc5653cfb0a4ee54525eaef7b370b4cbd9aa0781
Certificate serial: 01A0404E4FC487A33355327599147FB08C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FZTz7Ck7lRSXq73s3C0y9mqB4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:08 +0000
Manifest this update: Wed 26 Aug 2026 23:01:08 +0000
Manifest next update: Thu 27 Aug 2026 23:01:08 +0000
Files and hashes: 1: 3FZTz7Ck7lRSXq73s3C0y9mqB4E.crl (hash: y0QY7KACVY9morgJU49Q4KbWxvo9yoCaerzZfZilmB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FZTz7Ck7lRSXq73s3C0y9mqB4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:4f:c4:87:a3:33:55:32:75:99:14:7f:b0:8c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5653cfb0a4ee54525eaef7b370b4cbd9aa0781
Validity
Not Before: Aug 26 23:01:08 2026 GMT
Not After : Aug 27 23:01:08 2026 GMT
Subject: CN=61ce8e2d777906b606ad940f78d94c8d62432ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:18:a4:64:fa:e9:87:d4:00:17:38:38:e9:
bf:ee:93:d2:d8:47:fb:98:bf:f4:b5:e6:58:db:53:
08:29:c1:cc:0a:8b:39:82:48:70:c4:a5:56:ba:09:
c4:cc:c2:1b:53:df:13:97:c1:44:3b:8a:04:93:fc:
38:d2:f4:8e:b1:1b:2c:19:2b:d0:01:96:94:a4:8d:
71:51:67:50:b8:bd:65:53:41:a3:50:15:0c:1f:70:
5a:05:88:bd:c1:bc:ec:31:23:af:cc:dc:cc:aa:eb:
48:dc:aa:98:73:2e:0c:c9:ed:a4:60:e5:e4:ee:0c:
7e:31:de:75:7a:18:f3:d9:4f:46:9c:7b:b6:0d:23:
cc:67:d4:89:99:27:8e:04:15:35:6c:a9:4f:56:b8:
36:66:da:62:e4:28:32:2e:96:90:13:cd:67:c6:47:
1b:c4:b3:08:60:fd:bb:66:8e:b7:d6:15:9a:2b:69:
6d:ab:be:5e:ef:01:17:9a:b5:fa:90:ff:1e:35:e0:
6f:01:19:a5:64:ca:e5:f6:f1:46:79:0c:1e:e3:fd:
16:cd:91:00:f5:0e:df:39:77:ce:08:56:3c:d5:e7:
7a:7a:43:24:7c:ce:e6:58:00:a6:dd:9a:56:8b:4c:
fe:56:b8:1a:54:8b:94:bf:81:1d:b7:4a:45:70:66:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CE:8E:2D:77:79:06:B6:06:AD:94:0F:78:D9:4C:8D:62:43:2E:CC
X509v3 Authority Key Identifier:
keyid:DC:56:53:CF:B0:A4:EE:54:52:5E:AE:F7:B3:70:B4:CB:D9:AA:07:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FZTz7Ck7lRSXq73s3C0y9mqB4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:73:37:78:fb:89:76:7e:20:28:84:05:75:9f:da:02:85:cb:
95:d5:02:80:4a:9f:fa:65:b5:a7:c7:13:e7:09:45:83:f8:98:
06:07:c5:9b:86:a1:60:6d:96:c4:a3:be:22:92:81:cb:b1:67:
14:db:22:a9:4e:c4:3d:dd:74:5a:31:eb:e6:d7:09:04:9c:2b:
3d:7c:b7:e4:74:5a:7c:54:59:91:72:cb:cd:86:32:a8:6d:9d:
22:3d:e5:3b:54:99:0f:2f:0c:82:7d:29:6a:be:66:96:3d:f0:
b0:f4:6d:0d:cd:40:47:14:97:bf:c3:da:c7:06:22:1d:fb:89:
1c:c0:d2:35:14:51:dc:8d:fc:2f:7d:79:f4:3c:30:f8:0c:2d:
cc:4a:50:7b:05:ff:f4:d4:9b:bd:1d:d8:66:14:39:ba:6d:e9:
eb:4d:ed:97:57:97:b5:01:91:b0:be:c4:88:c7:fd:36:dc:bf:
eb:d0:6b:e1:ad:42:fe:3a:14:67:09:e6:58:b3:c2:c7:92:e1:
cf:50:48:28:ed:f3:9c:1e:95:c5:d8:f0:b7:94:fc:5f:c1:ac:
a7:30:f2:ab:be:0c:64:da:6d:bd:78:ae:15:90:e0:54:54:fc:
93:12:3a:37:28:21:60:5c:38:8f:0e:97:19:17:00:90:ca:3f:
7e:08:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:31 2026 by rpki-client