Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
File: 3kK6kvCUZ8GIi16eNEiVB0SweYE.mft (raw, json)
Hash identifier: eun1rYdBu/6Zvv9yX2E4w2ido2e6+/TrohCUSK2rl/A=
Subject key identifier: 92:FB:04:03:1F:47:38:19:BA:37:5B:3A:B3:B3:78:EF:5B:C0:DC:0A
Authority key identifier: DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
Certificate issuer: /CN=de42ba92f09467c1888b5e9e3448950744b07981
Certificate serial: 01A00101514B0FD4632467BA5EA2B1830410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
Manifest number: 146F
Signing time: Fri 14 Aug 2026 16:00:58 +0000
Manifest this update: Fri 14 Aug 2026 16:00:58 +0000
Manifest next update: Sat 15 Aug 2026 16:00:58 +0000
Files and hashes: 1: 3kK6kvCUZ8GIi16eNEiVB0SweYE.crl (hash: 0f7LQj4EvH+MO8yJaZNiuz9nkjpsHzxk5Hmh6+SroMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:51:4b:0f:d4:63:24:67:ba:5e:a2:b1:83:04:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de42ba92f09467c1888b5e9e3448950744b07981
Validity
Not Before: Aug 14 16:00:58 2026 GMT
Not After : Aug 15 16:00:58 2026 GMT
Subject: CN=92fb04031f473819ba375b3ab3b378ef5bc0dc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:17:a0:19:ed:ad:79:4e:8b:01:24:80:73:a2:
a2:71:04:a5:76:f5:06:7a:6d:dd:6a:1d:f8:2b:70:
95:99:15:78:19:c2:fb:20:d0:ef:02:b6:43:25:7a:
08:52:5b:ef:d2:6c:b4:84:e9:e2:26:ab:73:9a:4f:
01:8e:ec:cf:76:00:a6:39:f9:50:a3:64:e9:c9:2b:
c4:6e:7a:8b:2f:d2:2f:4f:de:21:54:3e:72:80:1e:
af:e8:e8:d3:d5:62:0b:2a:13:98:e4:7e:3d:bd:bd:
9a:7b:f5:ce:e9:f2:6e:fc:fd:83:5b:e3:b5:fc:14:
5a:81:21:52:15:4d:e8:f0:e2:08:b1:e5:af:1f:49:
c2:80:09:06:27:fa:1f:4c:12:ac:98:c0:77:71:0f:
db:46:a7:d3:3d:66:db:c1:0d:56:1d:5e:a3:20:e0:
a3:f1:00:b0:db:60:a0:d0:d0:8f:49:43:8b:44:86:
37:7b:ad:8f:da:56:31:c0:a6:93:19:20:c4:d5:75:
d6:60:07:3e:c7:d2:4f:19:47:56:78:10:4c:c4:2f:
71:a8:74:d3:8c:08:cd:76:0e:3e:73:8d:f0:f1:60:
06:77:07:0e:52:8f:c6:3c:ef:c0:36:14:18:ab:1e:
b4:16:81:ef:3a:dc:e7:03:63:f5:04:26:82:a5:63:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FB:04:03:1F:47:38:19:BA:37:5B:3A:B3:B3:78:EF:5B:C0:DC:0A
X509v3 Authority Key Identifier:
keyid:DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0a:b7:75:ca:b2:99:36:81:2b:23:3d:4e:d7:dd:40:6e:95:
50:02:a2:d6:08:e9:c6:47:94:89:df:7e:bf:9a:f2:6c:ae:3c:
0f:5a:9b:f8:eb:82:b1:fe:97:9b:62:38:29:d6:b1:2b:65:7c:
82:ea:1d:3b:3d:9f:1a:2d:42:2d:14:c0:79:12:96:46:bc:6e:
17:76:61:44:ac:c7:cb:3e:fa:be:9c:7f:cc:25:1c:1c:d8:c5:
7f:bd:ac:77:3c:6c:e0:2c:1f:4e:f1:dc:e9:8c:98:f3:de:fa:
c3:68:ce:84:34:b2:99:84:6b:f1:46:0a:2a:e4:36:21:bb:d4:
93:5c:81:c6:17:47:23:f3:2f:d1:6e:c3:16:27:89:7f:33:0d:
13:8b:97:10:d7:74:04:ed:86:be:48:c2:2f:58:aa:29:05:44:
9f:18:a8:87:e6:f4:f9:3e:93:3d:2b:76:80:52:19:54:2f:73:
3b:ad:08:71:04:9b:dd:f7:b8:71:d8:9b:a2:d7:21:76:43:16:
4a:dd:2b:cb:d3:18:73:05:c4:34:d4:aa:2f:bc:dc:53:da:f6:
8e:cb:13:94:18:04:42:00:b9:6c:fc:bf:9a:09:49:5a:b9:1d:
0f:d3:53:04:a6:03:27:2b:11:c4:47:34:97:f6:d5:e5:0c:17:
30:cc:21:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:02 2026 by rpki-client