Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
File: 3q91C1wrlTnZblZJdyr34Q7-D-o.mft (raw, json)
Hash identifier: TKB47+Y8cnCL9x+inqbA++gbJcjV5y9m7lMOOAMDaS8=
Subject key identifier: 38:CA:6B:0C:97:0A:F8:07:A2:9C:AC:30:A2:2F:1E:98:26:8E:89:78
Authority key identifier: DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
Certificate issuer: /CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Certificate serial: 01A13E261A2639F38D02E24FF434F4CCB0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
Manifest number: 1135
Signing time: Thu 15 Oct 2026 06:00:46 +0000
Manifest this update: Thu 15 Oct 2026 06:00:46 +0000
Manifest next update: Fri 16 Oct 2026 06:00:46 +0000
Files and hashes: 1: 3q91C1wrlTnZblZJdyr34Q7-D-o.crl (hash: DQAVvze+ENER9QAtRROcw+w2dL+IJrYc3WuTF4lD0NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:1a:26:39:f3:8d:02:e2:4f:f4:34:f4:cc:b0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Validity
Not Before: Oct 15 06:00:46 2026 GMT
Not After : Oct 16 06:00:46 2026 GMT
Subject: CN=38ca6b0c970af807a29cac30a22f1e98268e8978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:c5:18:72:17:71:e7:8f:a0:d6:24:cc:c1:
21:bb:ac:74:2a:7d:08:57:53:36:84:75:91:ca:06:
d3:eb:df:26:ad:d4:aa:bb:81:fc:1a:4a:af:ab:0d:
1f:fe:ef:a3:1a:81:7c:66:8b:cf:3a:30:23:36:77:
a4:cd:5a:35:4f:b2:87:8f:19:33:bc:88:cd:29:18:
28:37:fc:79:7d:8a:aa:cf:74:5b:f8:7f:98:fc:60:
89:69:1c:63:36:b0:aa:d0:4d:1f:60:5f:72:32:de:
e4:65:4d:3e:e8:4d:d4:fc:b4:28:f7:35:2a:f2:17:
63:7c:e6:7b:40:b9:9d:c5:e9:37:bf:2c:93:99:5e:
3d:f7:b2:6e:f8:5f:54:4a:df:7d:4d:9a:18:52:7f:
21:15:dd:09:d7:97:bf:6d:7c:fc:42:96:cb:1a:d3:
2e:8e:a4:e9:24:f0:05:31:4a:fb:80:29:05:fc:26:
6a:ed:51:a0:11:e2:a9:9e:e1:4d:33:13:5b:68:7e:
f9:b3:63:e8:ff:b6:70:fc:cc:7c:e7:f6:0e:3d:8b:
df:4a:37:30:fb:1d:89:d2:ca:ff:25:1d:69:2f:fc:
19:76:ba:21:f2:cf:20:d1:35:ab:94:11:c2:8b:88:
69:9f:b6:4c:93:bf:12:09:0e:d8:ab:20:34:b7:16:
2e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CA:6B:0C:97:0A:F8:07:A2:9C:AC:30:A2:2F:1E:98:26:8E:89:78
X509v3 Authority Key Identifier:
keyid:DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e1:5f:5a:6f:ab:92:23:c5:e1:50:fa:0c:a1:3b:08:7b:4f:
c2:50:b2:f4:50:b4:1c:ea:e7:56:d3:cd:96:52:9b:ae:20:81:
d3:39:74:e5:5c:e0:16:df:ec:ef:a8:de:28:ba:8f:c8:e4:4c:
3f:3e:62:6b:c7:18:2b:99:2f:97:b9:3a:e5:09:d1:fa:aa:0d:
6c:f0:59:d5:20:a6:69:50:2e:49:ed:3a:dd:b3:67:23:40:36:
f0:ff:d6:40:c2:01:06:dd:cc:e0:80:a7:d2:50:67:76:44:95:
dd:66:3c:54:96:74:84:7f:f3:51:1f:aa:ae:db:68:da:2c:6b:
ab:1a:b6:bb:39:a7:02:ce:de:73:92:db:e8:ca:51:76:da:54:
8e:86:88:2c:89:74:e7:45:92:f1:c2:d4:f3:fc:79:b5:2b:44:
04:a6:2a:3e:5f:87:da:ec:bb:47:0e:8f:0e:75:f6:e8:f2:da:
a6:ba:ed:09:f2:d3:d7:df:73:13:59:e5:97:ee:f5:e0:4a:b8:
3f:59:41:aa:b6:fc:74:3b:2d:18:90:88:79:c4:3f:68:c2:3b:
d1:09:f8:db:4d:8f:88:9a:6f:a3:d5:e2:b8:0b:90:71:63:32:
d4:59:c8:af:92:56:22:16:45:11:82:22:ac:0b:9c:24:bf:a5:
03:93:d3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:22:31 2026 by rpki-client