Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: Kxbu9NTbYLyjG3OX1Eq07qHfXtgIZPkbiDfrVVFkFio=
Subject key identifier: 52:44:9D:4E:63:BC:72:C1:E4:F4:8D:C5:29:28:7A:5D:56:D1:99:9D
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 01A14B05FC97F77F059F3DB0E341D7C44E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 1AA8
Signing time: Sat 17 Oct 2026 18:00:45 +0000
Manifest this update: Sat 17 Oct 2026 18:00:45 +0000
Manifest next update: Sun 18 Oct 2026 18:00:45 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: XUzbd44QRlwODSOrV5RpcnV9r9vl5kuGuZv6BzevfVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:05:fc:97:f7:7f:05:9f:3d:b0:e3:41:d7:c4:4e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: Oct 17 18:00:45 2026 GMT
Not After : Oct 18 18:00:45 2026 GMT
Subject: CN=52449d4e63bc72c1e4f48dc529287a5d56d1999d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:4d:6f:07:56:5f:7b:8f:14:84:2b:24:41:
8a:5c:96:ed:3c:be:29:3b:23:ee:e2:9e:f4:76:8c:
e7:57:74:ac:e4:d8:82:07:ad:19:78:03:20:ce:ea:
20:ca:53:35:05:3f:2a:b1:41:27:1b:03:24:65:25:
30:fc:61:99:35:12:eb:e3:cd:d3:f0:cd:f6:57:42:
51:11:8a:c8:80:2e:43:ed:a9:5c:02:87:7e:d3:52:
75:e9:6f:de:62:e8:d5:b1:94:53:91:ab:ed:e6:d5:
bd:76:2a:0e:11:4a:62:cb:8d:ec:a5:e5:b5:5f:a7:
78:19:23:c9:4a:ee:04:f9:ad:fb:24:54:9c:13:c9:
75:7f:70:e0:64:68:de:e3:5e:f4:8d:dd:26:15:ad:
92:c7:84:5b:66:33:59:4a:32:3a:3e:2d:a4:c0:c2:
c0:04:80:5b:1b:d4:ac:39:34:2c:b6:4d:7f:30:f3:
b2:c6:80:70:99:94:56:f3:23:7a:71:42:bd:24:d8:
1b:88:35:85:ca:c5:b0:c3:28:f4:55:56:4b:ed:6e:
5e:03:05:4b:4d:5c:0d:eb:5d:54:37:67:2d:f2:9c:
c8:6e:34:10:67:6a:3a:d5:1a:72:b0:39:09:9f:6f:
f5:39:4c:80:c2:cb:aa:7e:c7:9b:50:ea:cf:ae:e3:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:44:9D:4E:63:BC:72:C1:E4:F4:8D:C5:29:28:7A:5D:56:D1:99:9D
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d7:1e:a3:29:a3:58:aa:d2:9d:45:93:fc:d6:47:51:aa:78:
6e:6e:b0:40:77:60:63:8a:f3:1a:6d:76:3b:f3:84:2f:a2:ee:
be:49:4d:53:7d:40:49:c3:f8:ad:52:a6:88:2d:f8:ec:b8:12:
d2:2f:02:82:82:6e:18:4c:1a:58:ec:48:8a:2a:78:d5:16:eb:
6c:3d:17:04:8d:87:df:5d:52:0b:77:40:bd:a2:e3:e1:33:52:
32:a4:a7:fb:02:df:08:7d:c5:10:91:2a:3d:6e:4e:c8:16:01:
cf:4d:2e:e3:d8:d4:64:f5:0e:56:8c:3e:8f:d3:43:a9:f0:18:
b3:88:e2:c7:9d:74:b1:16:08:b0:b3:1d:52:46:9f:92:50:12:
bf:68:51:74:1f:5c:20:42:91:34:80:3b:ac:23:68:6b:dc:1e:
62:ab:8b:ee:62:a0:6a:b2:80:cb:17:4f:5d:ab:37:36:63:45:
e2:08:72:9f:56:f8:08:82:cc:37:c3:5c:52:a6:f1:de:60:17:
8e:41:08:ce:6a:0f:4c:62:67:ca:c1:5c:83:d7:7a:bd:66:10:
03:d2:b1:d1:a6:56:d2:fe:6b:37:7c:92:0e:5d:7a:2c:b2:b2:
91:03:ee:f7:42:11:e4:23:06:51:a4:60:69:3d:33:38:03:2c:
df:e5:a0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 01:44:19 2026 by rpki-client