Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
File: 3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft (raw, json)
Hash identifier: s0MDJujq+xYxXUuMj48IHGxMJFP5NayhthKchxF17T0=
Subject key identifier: 32:4C:C2:9D:2F:96:5B:1B:DD:77:30:ED:DD:A1:F6:B8:E0:43:8E:A4
Authority key identifier: DC:75:85:2E:B3:D5:F4:BF:A7:E4:4E:80:EE:A9:88:19:86:40:3C:D4
Certificate issuer: /CN=dc75852eb3d5f4bfa7e44e80eea9881986403cd4
Certificate serial: 01A13FA6D0925558595103BF92EB6E33B7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
Manifest number: 1197
Signing time: Thu 15 Oct 2026 13:00:59 +0000
Manifest this update: Thu 15 Oct 2026 13:00:59 +0000
Manifest next update: Fri 16 Oct 2026 13:00:59 +0000
Files and hashes: 1: 3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl (hash: scNNr5MCgOC+ZWa8JpsPpL4beFxLpNxd39LRTwV/PVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a6:d0:92:55:58:59:51:03:bf:92:eb:6e:33:b7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc75852eb3d5f4bfa7e44e80eea9881986403cd4
Validity
Not Before: Oct 15 13:00:59 2026 GMT
Not After : Oct 16 13:00:59 2026 GMT
Subject: CN=324cc29d2f965b1bdd7730eddda1f6b8e0438ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:6d:ee:8e:c5:d2:db:8c:e1:cb:f7:68:ba:
90:5e:3e:7e:40:ad:31:c5:30:13:6f:1f:49:e9:da:
70:d7:3c:ed:e7:8f:6b:31:f7:77:b3:d1:06:ed:00:
f4:b5:c7:15:d6:51:1a:40:71:06:76:f2:95:b1:93:
70:10:80:f1:63:c1:5b:5d:f7:03:d9:16:5b:b7:46:
4e:cf:71:32:46:71:07:a7:91:9c:39:bb:84:4a:a4:
98:2a:5f:37:6e:84:0e:58:a4:5a:32:3c:77:25:45:
eb:42:12:33:b8:ca:6c:48:51:6b:37:5f:cd:39:00:
84:43:9a:da:f5:25:81:5a:cc:e7:59:d6:3c:31:89:
35:2b:16:84:47:43:a5:a5:97:83:a4:fb:05:1f:b0:
21:de:35:fb:27:ff:97:f0:67:e1:f1:66:5f:60:c9:
3f:db:ae:4a:76:a8:35:a0:2b:98:f1:fa:7b:83:a3:
bc:a4:2b:00:42:4f:c0:25:39:e2:55:d0:13:d6:16:
aa:f3:c6:d8:30:35:ca:f4:21:bb:0a:14:65:16:2f:
48:02:17:a5:0b:b6:f7:a6:bb:02:f4:60:8c:79:cc:
df:ad:d0:55:94:52:a2:a8:c7:e7:ff:c5:14:e3:94:
4c:32:21:0c:df:1d:a2:58:51:e4:c7:f2:e2:23:97:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4C:C2:9D:2F:96:5B:1B:DD:77:30:ED:DD:A1:F6:B8:E0:43:8E:A4
X509v3 Authority Key Identifier:
keyid:DC:75:85:2E:B3:D5:F4:BF:A7:E4:4E:80:EE:A9:88:19:86:40:3C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8f:ad:2d:24:31:3f:a8:de:25:83:86:4b:8b:71:ff:9f:63:
54:0b:95:67:e3:87:76:57:dd:0b:73:70:a1:dd:12:f3:89:4e:
84:43:d0:97:cc:ab:04:df:50:8e:a4:67:52:33:7a:b2:0d:b2:
8c:52:66:32:68:f6:9f:bc:fa:70:88:d5:63:51:a7:ba:b9:ab:
90:c8:84:5e:a0:65:1c:b4:01:62:a4:2a:3d:5c:b1:ac:a0:a7:
37:01:69:38:e6:73:69:59:02:d7:d4:35:05:99:31:ae:3f:3a:
39:af:40:06:4a:2a:53:a5:3f:07:0a:0d:76:d4:33:e6:74:d6:
83:c3:1a:f9:c3:9c:a5:66:7f:cb:f4:d2:76:a2:7a:75:35:b3:
de:58:f2:32:f1:3f:39:1a:0a:de:ae:b9:fb:8e:35:1a:ae:be:
56:26:6f:34:51:83:98:f3:0c:28:9a:de:d1:eb:99:f7:ee:91:
df:b0:0a:54:24:50:35:e4:b9:3d:9b:d6:1d:e5:2f:0e:40:ef:
7a:4d:b4:ef:41:f5:8a:15:87:b1:c8:7c:f3:00:da:5c:7d:52:
21:9b:97:cd:c2:1b:8a:20:9b:ca:87:b3:2c:82:b6:65:d6:62:
43:82:bc:d0:8d:98:d1:6e:d4:30:5f:fe:3d:91:b5:c6:d5:e1:
84:95:77:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:36 2026 by rpki-client