Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
File: 3XF0IQf16FBis-CuZa-kuuZw4Es.mft (raw, json)
Hash identifier: 0kB2g3aFAlOfOngvdCtOFWYthx9NtLbb8vSJdmV+HS0=
Subject key identifier: 21:EE:79:F4:4B:AB:E2:5E:91:9C:D9:B1:82:2C:03:92:43:D1:AA:29
Authority key identifier: DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B
Certificate issuer: /CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
Certificate serial: 01A0024A9BD6396FA3EE4CE1A7E356D941C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
Manifest number: 0881
Signing time: Fri 14 Aug 2026 22:00:38 +0000
Manifest this update: Fri 14 Aug 2026 22:00:38 +0000
Manifest next update: Sat 15 Aug 2026 22:00:38 +0000
Files and hashes: 1: 3XF0IQf16FBis-CuZa-kuuZw4Es.crl (hash: +u7ziKiheWlDdaiC9tFHQWfJBWJSNohtpGxyB/AHsaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:9b:d6:39:6f:a3:ee:4c:e1:a7:e3:56:d9:41:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
Validity
Not Before: Aug 14 22:00:38 2026 GMT
Not After : Aug 15 22:00:38 2026 GMT
Subject: CN=21ee79f44babe25e919cd9b1822c039243d1aa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:ff:64:d3:d2:06:7b:32:e9:33:ce:50:c2:
b2:5f:5a:97:b9:0e:f2:e3:2a:25:34:2d:67:46:2d:
2b:8e:eb:58:0a:8b:b0:3d:2d:05:1e:bb:47:46:79:
bd:ab:26:e3:aa:95:a8:30:b1:42:1f:f8:18:65:73:
21:af:20:0d:57:8d:1e:9e:20:9e:c7:dd:8a:04:a9:
e1:18:44:4c:71:02:12:9d:4f:7b:c5:ca:ed:a3:81:
d9:ce:ec:b8:68:df:cc:d5:ad:7e:99:d9:84:6b:28:
98:af:ff:1d:28:43:d3:e7:41:62:0d:8f:e5:9d:21:
93:b1:65:af:d4:87:af:b8:6a:47:fe:b2:68:75:2f:
bb:87:09:df:cb:7d:24:4a:90:92:3a:b7:e9:c8:a3:
c9:fd:8c:ad:58:58:37:28:60:a3:8f:a4:86:db:b9:
86:b8:84:d1:69:5b:f9:46:b1:fb:49:d4:22:26:73:
74:50:6d:02:93:11:48:d2:38:c3:55:6c:39:f7:8e:
76:87:6d:87:46:07:01:10:5a:30:6f:4f:cc:22:8d:
95:60:a2:0b:ba:79:f1:b4:e8:14:22:3f:b9:94:44:
a2:46:c2:7a:13:15:ff:7a:99:ad:6a:98:2b:a3:ba:
c6:a3:d3:c7:df:61:f4:ca:2c:c0:17:39:91:f5:d2:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:79:F4:4B:AB:E2:5E:91:9C:D9:B1:82:2C:03:92:43:D1:AA:29
X509v3 Authority Key Identifier:
keyid:DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:14:37:54:ae:3b:e2:65:3b:67:f6:7e:23:6a:be:d5:a1:6b:
78:64:e9:49:a4:6f:95:6c:92:b1:b8:c2:24:45:6a:ac:37:3d:
34:94:20:7f:58:3d:20:cf:6f:44:2b:d4:af:97:a1:db:dc:3f:
e6:2f:2f:e2:b3:06:a1:ea:4d:9d:6f:c1:48:78:4e:cd:a5:d0:
79:3b:2d:ac:0f:90:b5:1b:fb:dc:bd:43:0f:04:d4:75:1b:f5:
87:4e:bc:c1:b5:48:53:4a:03:a1:3f:d6:bb:03:dc:d4:e3:4e:
73:01:e6:8a:58:09:f6:e3:4c:49:f3:b9:bb:de:14:9a:04:d0:
71:a4:da:06:2e:ea:dc:ba:1b:03:ae:73:74:7e:12:6e:be:fd:
d2:c0:7d:da:12:01:fc:b5:39:69:5c:f1:26:45:cd:56:84:9d:
fc:2d:e6:c0:4f:7d:23:31:5d:83:cf:32:84:17:49:dd:0e:ff:
ba:23:d4:18:b3:12:7e:c6:76:6a:4b:7b:9f:18:9b:6c:26:9b:
62:2b:34:e7:2f:c6:71:d4:fa:f9:e3:72:2c:22:d7:c5:92:35:
14:f1:7a:57:4e:1d:2e:18:b1:a8:42:87:c3:09:30:41:e4:1b:
b4:7c:88:6a:08:cb:04:92:d6:21:56:e4:79:39:a9:31:1c:82:
56:04:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:10 2026 by rpki-client