Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
File: 3XzvizrZIDFjCqyiJqntebpgVYY.mft (raw, json)
Hash identifier: FDaUhed7b6rs/S0OeeyielXUaDKQkzWIVCZGGe0phbo=
Subject key identifier: 7D:A3:55:1C:F2:9B:CC:F8:6D:A7:58:E2:E5:6E:C0:1A:2C:FA:AD:BA
Authority key identifier: DD:7C:EF:8B:3A:D9:20:31:63:0A:AC:A2:26:A9:ED:79:BA:60:55:86
Certificate issuer: /CN=dd7cef8b3ad92031630aaca226a9ed79ba605586
Certificate serial: 01A03FDFD4AD08A9ABFB84152B5936A9B1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
Manifest number: 0587
Signing time: Wed 26 Aug 2026 21:00:28 +0000
Manifest this update: Wed 26 Aug 2026 21:00:28 +0000
Manifest next update: Thu 27 Aug 2026 21:00:28 +0000
Files and hashes: 1: 3XzvizrZIDFjCqyiJqntebpgVYY.crl (hash: rVh5+TJrahOJ1MOgJ6JsvcR6Zx7PB5kM0OlXe4NChlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:df:d4:ad:08:a9:ab:fb:84:15:2b:59:36:a9:b1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd7cef8b3ad92031630aaca226a9ed79ba605586
Validity
Not Before: Aug 26 21:00:28 2026 GMT
Not After : Aug 27 21:00:28 2026 GMT
Subject: CN=7da3551cf29bccf86da758e2e56ec01a2cfaadba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:6c:fb:f4:15:2e:ac:46:19:33:b4:d2:39:
d9:12:00:73:f8:fe:e0:24:98:91:4d:df:7b:c3:b9:
b1:ca:64:20:03:fb:93:67:19:92:06:a7:72:1c:49:
1e:86:28:e4:6f:69:37:c2:63:70:4d:35:d4:fe:4b:
3c:6e:85:65:f4:58:fc:a7:96:1c:8e:64:75:30:c9:
61:98:d6:8b:e3:9d:9a:dc:d4:ba:15:52:f3:c0:c3:
4c:41:54:b4:d8:d2:90:db:f5:ee:79:4a:65:89:cf:
97:85:8e:41:52:e7:14:08:48:49:45:78:24:dd:2f:
5f:db:c6:21:1e:40:9e:17:6a:5e:68:20:72:64:91:
8c:b7:79:ee:07:b4:29:a8:44:e5:fc:53:45:ba:ae:
16:f6:e4:50:aa:0f:15:b4:ca:fa:de:b4:c7:55:d2:
4b:a3:49:71:7a:f7:d6:3b:9a:a3:78:31:14:82:1a:
b7:4c:20:cb:33:03:d7:5b:27:f7:69:cb:b5:f9:42:
95:92:61:67:f7:96:d0:74:c7:90:bf:57:c8:65:df:
af:d9:37:21:86:91:ef:a8:54:e4:18:dd:c9:ac:29:
a9:4b:65:e0:2e:fd:96:d5:cb:46:00:fe:67:b4:40:
e9:c9:1f:04:b1:7f:e9:02:0a:d6:11:9b:c3:9a:4b:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A3:55:1C:F2:9B:CC:F8:6D:A7:58:E2:E5:6E:C0:1A:2C:FA:AD:BA
X509v3 Authority Key Identifier:
keyid:DD:7C:EF:8B:3A:D9:20:31:63:0A:AC:A2:26:A9:ED:79:BA:60:55:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:62:93:f1:77:df:12:e9:a7:bd:d0:01:02:d9:5f:94:78:f6:
55:2f:a1:6f:78:2c:c7:90:79:4b:67:88:94:f1:08:35:75:46:
c1:1a:db:68:4b:93:29:4d:15:37:7d:32:b7:89:cd:96:be:e4:
01:76:2c:c3:f1:2e:98:25:88:f6:34:2e:cf:10:74:4f:09:ab:
f2:40:33:c0:cf:85:f1:5d:27:5a:2a:b1:66:86:7c:00:53:c8:
fe:32:35:da:fe:3b:4c:6c:69:3d:6d:92:18:a4:9f:37:dd:70:
74:d4:5b:37:62:86:f9:54:fa:0f:f7:1d:fb:d2:ee:e3:ae:52:
86:6d:d2:85:f8:8d:eb:5a:c3:60:09:75:bd:7a:1a:98:d2:3a:
31:57:a3:96:30:d8:c4:60:9c:95:f5:32:13:9c:f0:e1:46:77:
8a:77:3c:ee:88:ee:c9:42:a0:32:38:f8:1e:10:95:7d:97:13:
80:d6:0f:96:18:3c:80:72:97:4b:ed:d7:5f:c7:8e:80:fc:a2:
8d:8e:a3:1d:e9:6c:3a:35:fe:45:99:f2:24:01:a5:dd:65:3e:
a6:46:a3:41:7a:71:92:04:f0:c5:df:1b:98:74:a3:9a:7b:89:
9d:e8:dd:e8:6e:5d:e4:79:4c:0d:07:26:a1:92:cb:06:b7:f1:
3f:df:64:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:35:13 2026 by rpki-client