Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
File: 3kK6kvCUZ8GIi16eNEiVB0SweYE.mft (raw, json)
Hash identifier: 3rzAOl1xfmpygLf9rC9o3j8XfDFxCKg9r5Uoj/SxXRA=
Subject key identifier: 45:92:D6:F4:A6:99:54:55:85:69:53:02:C0:86:B9:DA:6E:4C:BB:34
Authority key identifier: DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
Certificate issuer: /CN=de42ba92f09467c1888b5e9e3448950744b07981
Certificate serial: 01A13DB87156B09928174A717223559310AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
Manifest number: 1513
Signing time: Thu 15 Oct 2026 04:01:00 +0000
Manifest this update: Thu 15 Oct 2026 04:01:00 +0000
Manifest next update: Fri 16 Oct 2026 04:01:00 +0000
Files and hashes: 1: 3kK6kvCUZ8GIi16eNEiVB0SweYE.crl (hash: 2bIvmSm4M/caeX0dd7P+i4scF64zs4vafPMnkumKZJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:71:56:b0:99:28:17:4a:71:72:23:55:93:10:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de42ba92f09467c1888b5e9e3448950744b07981
Validity
Not Before: Oct 15 04:01:00 2026 GMT
Not After : Oct 16 04:01:00 2026 GMT
Subject: CN=4592d6f4a699545585695302c086b9da6e4cbb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:c0:22:c5:dc:06:fa:cc:43:8a:ab:c2:1e:
8c:91:c1:b4:ce:75:de:58:6e:57:a9:f1:30:65:e6:
ec:6f:bb:98:4c:d5:9c:6d:fe:99:f4:61:6f:62:7f:
8d:af:15:d9:52:4d:a4:e1:4b:9f:4e:5c:77:69:42:
82:05:96:9c:67:a0:dd:c7:8a:ac:4f:d2:f1:bd:97:
3c:df:fc:6e:a8:d1:7a:c1:05:2b:ce:01:53:d9:a3:
e9:54:db:37:12:76:e4:df:e5:90:c1:9a:92:b2:79:
ad:c5:8d:e3:94:8f:88:80:2a:1b:7f:fc:67:ec:75:
18:f2:26:16:18:c4:8e:b1:e0:4e:94:38:f6:e0:32:
b6:15:10:42:64:e1:5b:fb:9f:e5:77:0b:0f:91:e5:
3a:97:42:92:89:ad:e4:de:c8:48:fa:9f:02:c9:b2:
ed:32:1d:f2:8d:9d:b1:ec:2a:8f:95:b7:bb:0a:41:
83:34:e3:88:ef:00:58:13:55:fd:f5:45:40:d0:67:
fa:f1:0a:83:7b:64:df:56:6c:75:72:1c:ea:b5:d5:
ea:71:3b:70:59:b8:4f:15:10:b1:70:55:87:37:1e:
a1:91:d2:41:a1:35:fd:87:0e:71:c5:b3:99:94:4b:
1c:5c:5e:3c:e5:50:4b:0b:53:be:85:10:18:4d:f6:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:92:D6:F4:A6:99:54:55:85:69:53:02:C0:86:B9:DA:6E:4C:BB:34
X509v3 Authority Key Identifier:
keyid:DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:8c:c1:2f:e0:8f:51:7e:bd:94:b1:bc:76:17:aa:8d:f4:d5:
46:dc:e6:02:9b:1b:06:3e:c4:8c:7c:f8:9a:77:0d:f8:b1:28:
29:10:dd:2e:39:48:77:82:a4:7a:8b:0c:41:72:9b:4d:1d:49:
de:db:cb:99:62:43:31:8a:bf:9a:7f:f1:b2:37:b8:75:4e:92:
5f:11:c4:97:4b:6e:e2:7d:1a:f7:51:5b:3a:c9:37:36:8d:40:
77:4d:39:df:ac:37:a7:5c:e3:15:6b:cf:06:90:fe:02:f5:24:
df:52:1c:c9:2f:37:2b:b3:7d:a4:93:00:a9:0a:c0:bf:62:7b:
a5:ab:73:a0:f5:03:c5:9a:f9:a9:9d:06:69:ab:b5:aa:76:f2:
f4:8c:1d:76:c3:4a:a9:03:76:c8:cd:94:a5:e3:34:ed:79:67:
b0:6b:37:ee:ed:7e:79:21:b4:f3:ff:0c:6b:21:52:03:2b:d6:
2b:8e:98:65:92:d5:32:bb:19:93:b7:ad:36:48:6c:6b:a2:b9:
9b:45:f2:99:a4:cd:6c:81:e5:6e:03:67:3a:c5:b4:15:19:d7:
ff:16:d1:d9:fb:c5:0f:50:3e:6b:1d:26:c0:27:3d:ed:6b:20:
bf:31:75:da:f3:ae:5a:7e:e8:c7:1a:75:df:81:65:f9:b8:cd:
e4:b4:d0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:06:45 2026 by rpki-client