Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: a2Lzgs/gtU0FHfkX71ob/xRApYbceptM6wJZ5O38aA8=
Subject key identifier: 4A:D0:EB:1C:18:13:7A:72:70:D4:F6:12:0F:62:8F:A4:2E:85:EF:A0
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 019D382E0DC2AFE52EB929E126C2CDB32251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 06:00:35 +0000
Manifest this update: Sun 29 Mar 2026 06:00:35 +0000
Manifest next update: Mon 30 Mar 2026 06:00:35 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: XgHkoG2T8zFw2X9u3j5St/8vDtMZrhtVJasph8NDTUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0d:c2:af:e5:2e:b9:29:e1:26:c2:cd:b3:22:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: Mar 29 06:00:35 2026 GMT
Not After : Mar 30 06:00:35 2026 GMT
Subject: CN=4ad0eb1c18137a7270d4f6120f628fa42e85efa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:34:f7:d1:0c:0d:5d:52:65:f1:a0:cd:3a:
72:9e:7a:f6:b1:37:02:d0:2c:00:fd:a6:3a:87:05:
c4:47:66:8e:63:9c:65:30:7d:c9:37:83:4d:2b:f0:
1f:9a:60:da:26:cf:2f:2e:1e:fb:1c:ec:0c:92:4d:
b9:ee:ac:c4:98:f4:22:99:88:49:1d:51:82:a3:fd:
b2:db:9f:57:9f:d1:57:66:01:0e:e6:91:71:40:c8:
40:4c:dc:c7:f9:71:10:78:74:cd:16:fc:e6:f1:df:
09:d1:78:05:c7:88:14:36:80:59:5e:f6:30:40:9a:
cf:67:af:23:3c:c6:6e:22:c1:2f:ea:30:62:ba:31:
66:c8:69:cb:9d:08:56:d9:28:c7:c0:81:d9:0d:06:
6d:53:c8:b7:58:81:19:c8:06:d4:f9:04:32:7e:70:
67:4c:55:9c:65:be:27:2c:38:ee:15:a8:c9:41:5f:
b0:ea:10:a4:f8:93:cf:58:82:3d:28:b6:9b:78:be:
f1:74:f4:09:7c:94:93:7c:96:35:48:7a:53:cf:a3:
dd:4a:06:64:20:92:95:cc:21:e3:d8:1b:94:db:f9:
09:fb:b7:d5:ac:2e:6b:b1:46:eb:b1:12:8d:93:01:
cb:1b:c5:76:f0:db:dc:db:3b:90:b9:60:25:8f:dd:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D0:EB:1C:18:13:7A:72:70:D4:F6:12:0F:62:8F:A4:2E:85:EF:A0
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:aa:9c:8a:bc:95:25:2b:60:90:c0:57:c3:05:3b:52:9c:29:
d3:ff:2c:29:99:ba:bb:ad:30:d6:ed:c4:f8:38:d4:69:ae:a1:
6a:52:27:bd:6e:8e:dc:81:38:eb:a7:82:e7:4d:69:18:1f:7d:
bf:91:ee:fd:2e:99:21:3e:0a:4c:31:d1:eb:b7:a2:1d:ed:eb:
14:d4:9f:d3:4e:bb:1d:17:65:08:7a:b4:f6:56:39:ae:6b:ed:
52:60:ea:ef:ee:1f:d7:3e:76:fc:26:42:6b:31:ec:ad:38:0d:
d3:c7:9c:d6:9f:1c:7c:d9:58:bb:86:cd:07:d3:af:f0:d0:7f:
c1:c4:49:73:0c:a3:8b:fb:14:da:af:26:0b:2c:aa:da:78:02:
0f:c9:24:53:27:4a:39:59:67:c9:c0:af:f3:c4:50:cf:56:59:
f8:3c:01:63:2c:50:8c:61:93:14:c7:6f:79:71:cf:48:7c:40:
28:6f:0e:c3:8e:d1:a7:99:58:21:3b:7c:45:57:56:b1:cd:5a:
4a:e5:2f:3a:7b:d3:1d:43:4a:57:ff:91:45:b1:51:cf:d2:7c:
0f:b9:3a:24:32:b5:63:25:69:3e:d1:95:87:c7:87:ce:90:1f:
ca:18:31:fc:3c:8c:58:96:68:5e:f4:b9:8c:27:ce:3f:e9:f2:
93:8d:98:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:53 2026 by rpki-client