Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
File: 3XF0IQf16FBis-CuZa-kuuZw4Es.mft (raw, json)
Hash identifier: awoSNwOsggLQEQrvRtEnQbwclXt7KdLEeHolGvaYtCc=
Subject key identifier: 73:66:CE:1C:A3:6C:89:FB:F9:11:CE:BD:5E:64:58:86:5A:DF:E8:73
Authority key identifier: DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B
Certificate issuer: /CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
Certificate serial: 01A13F02171807A3D4C198E40A5DF0D61021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
Manifest number: 0925
Signing time: Thu 15 Oct 2026 10:01:03 +0000
Manifest this update: Thu 15 Oct 2026 10:01:03 +0000
Manifest next update: Fri 16 Oct 2026 10:01:03 +0000
Files and hashes: 1: 3XF0IQf16FBis-CuZa-kuuZw4Es.crl (hash: /uA+BcAL5L8UzxhsnAMG9F6Km67oRP3CJgtS4Wze//I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:17:18:07:a3:d4:c1:98:e4:0a:5d:f0:d6:10:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
Validity
Not Before: Oct 15 10:01:03 2026 GMT
Not After : Oct 16 10:01:03 2026 GMT
Subject: CN=7366ce1ca36c89fbf911cebd5e6458865adfe873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:3f:df:c7:05:e9:26:b1:5f:d7:8b:76:58:
d9:4b:a6:55:b5:bd:ba:97:3b:51:c9:41:37:2b:b2:
0d:de:46:a6:a6:70:30:36:b5:79:65:28:db:da:db:
ae:0d:09:e0:bd:ab:37:41:d1:4d:90:6b:5f:3e:f0:
e7:fb:28:3c:2f:48:ca:c1:92:07:78:13:54:32:c6:
36:b4:bc:72:a8:0d:a6:a8:30:36:e2:82:de:25:31:
8a:5e:f4:8a:ee:91:23:0a:e6:63:d7:fd:5e:16:8d:
b8:3e:e1:80:97:50:98:ce:28:e0:da:c2:6c:53:5c:
7e:33:b2:0a:ad:37:87:72:63:c3:ed:33:a4:93:17:
74:d0:eb:56:ae:0c:c6:41:bf:56:e2:09:cc:b2:40:
70:aa:6c:af:51:b0:9e:69:a3:bb:d2:50:b4:10:08:
c8:99:43:d1:1f:99:21:c3:52:41:e6:fe:6e:51:5b:
f0:23:cc:6a:d4:cc:38:b7:47:83:a8:77:5b:2b:6f:
3b:8c:3f:df:7f:32:75:84:b3:67:bf:1d:f1:28:72:
a6:90:72:cc:a8:b7:e4:9b:09:54:51:d2:93:ad:ff:
15:e3:81:33:e7:db:8f:8d:e3:0e:87:60:e8:50:c7:
40:cc:01:0a:e8:c6:83:30:ce:54:2b:6d:af:6f:de:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:66:CE:1C:A3:6C:89:FB:F9:11:CE:BD:5E:64:58:86:5A:DF:E8:73
X509v3 Authority Key Identifier:
keyid:DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f8:87:f0:40:b9:e3:9a:c0:dd:31:46:c8:d2:4f:5d:55:8d:
a2:15:c1:07:b2:57:f0:f7:3a:7f:a1:3e:a9:26:b1:30:b2:f0:
39:f9:b4:ce:64:12:63:16:19:bd:53:4a:5d:2f:5e:31:5d:f6:
d8:f6:28:45:d0:2e:05:be:8a:4e:8d:20:0a:c2:ab:c6:7f:21:
4f:5d:b3:5e:d3:65:2d:8b:6e:1c:4f:5e:91:95:86:55:27:0e:
fd:df:53:0b:52:36:9a:e2:cc:4a:12:ff:5c:ee:4b:6e:61:4f:
0d:a8:b5:86:57:7d:f6:d3:67:23:37:17:a4:59:33:b0:bd:14:
ca:7e:31:3e:fc:c0:4e:08:43:56:c9:94:d2:33:4b:62:3a:78:
01:45:d0:ed:de:1e:a7:5e:66:ac:1c:56:56:b5:90:b0:cc:76:
70:5b:f8:0a:ae:73:de:79:29:05:21:cd:35:c2:0b:74:37:94:
ee:af:f9:54:c3:e8:ae:60:92:35:f8:7d:bf:a6:e7:a0:a1:16:
f4:ec:a2:b2:38:07:8a:db:43:07:09:71:b1:d0:e0:77:cd:8c:
b3:c6:c9:16:80:1f:21:b4:55:2a:df:1c:e2:ea:6d:df:39:76:
93:5b:2e:65:f6:91:be:f3:1b:e9:56:ef:48:84:0a:ce:d5:9f:
f5:a2:bf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:50 2026 by rpki-client