Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json)
Hash identifier: PjpZTWdqJ2lg47/cDA89ZxqFbg6VDlmwOIEcjru9MVY=
Subject key identifier: CB:6A:9B:17:5D:8F:6C:83:59:A5:4D:1F:5A:7B:1C:A4:53:52:A3:EA
Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Certificate serial: 01A002820D32E5CEC71B196ABC9E3147478F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
Manifest number: 0952
Signing time: Fri 14 Aug 2026 23:01:12 +0000
Manifest this update: Fri 14 Aug 2026 23:01:12 +0000
Manifest next update: Sat 15 Aug 2026 23:01:12 +0000
Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: u+KIBQaCeO+z0QaXsoetRrikMxEKwqVBwlHsqWBk5fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:0d:32:e5:ce:c7:1b:19:6a:bc:9e:31:47:47:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Validity
Not Before: Aug 14 23:01:12 2026 GMT
Not After : Aug 15 23:01:12 2026 GMT
Subject: CN=cb6a9b175d8f6c8359a54d1f5a7b1ca45352a3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4c:dd:f1:15:76:d9:23:a2:cf:51:c5:f5:15:
98:79:fe:61:e1:d4:64:8e:a5:95:2e:df:6c:d2:8f:
de:79:07:42:03:c8:88:cd:2f:c3:e5:bf:6b:5c:1b:
3a:a7:e0:30:e5:70:65:b5:1e:89:2e:0a:82:64:90:
9b:a6:2d:82:c9:80:5a:08:88:78:81:29:4b:98:c3:
91:1e:ad:56:f1:f9:be:61:88:8c:f6:89:8a:08:2f:
01:eb:2a:6a:a3:ee:cf:de:45:8c:77:4d:33:35:de:
f4:06:09:e7:84:eb:ea:bf:e5:3e:c2:1f:49:2b:75:
0e:26:34:36:39:3b:9f:49:d4:7b:41:fa:38:ed:cb:
63:56:cc:cb:a7:c5:b6:2e:ff:3b:ef:ce:a0:f8:bd:
31:5e:4b:8c:98:7c:60:7f:e1:5d:91:68:89:df:a3:
2d:6e:6a:64:06:bd:df:5a:ad:4c:93:32:a2:b7:01:
d3:d7:97:16:3d:c6:65:f6:50:59:72:25:e1:a3:b3:
54:82:ce:d6:d8:0b:fa:62:7f:22:5b:05:7b:cc:73:
5f:3c:cd:f8:e4:23:ec:1d:54:25:f5:79:32:ed:4f:
ae:91:24:c0:06:3c:6b:26:fc:59:32:34:58:ac:7e:
d5:3b:02:02:13:c5:8e:f8:ce:49:34:93:4d:cd:f7:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6A:9B:17:5D:8F:6C:83:59:A5:4D:1F:5A:7B:1C:A4:53:52:A3:EA
X509v3 Authority Key Identifier:
keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:7f:71:48:8b:38:e9:a9:4e:29:df:5f:06:ab:7c:dc:ac:cc:
ea:84:ff:34:c5:18:3c:b1:92:99:d3:f1:20:94:a8:fc:c8:77:
0e:04:b6:52:de:6f:5d:4d:81:81:ad:a0:e0:cc:74:ca:f6:14:
5e:a0:c6:53:8d:c7:2e:e6:1a:9c:ff:61:3a:b5:89:7b:6f:05:
e1:4d:a6:9b:d1:de:9a:ba:6d:83:d5:75:fd:49:12:84:fc:28:
9f:ba:d8:50:52:ec:f1:93:9b:d2:b6:4e:38:fd:31:50:df:b6:
f6:17:70:3f:2e:e3:f5:34:fd:c8:60:c6:ef:05:af:49:75:ba:
1f:d8:94:33:2a:86:fc:6f:ef:63:46:15:39:21:76:06:2f:58:
ce:68:6d:c3:0f:e0:02:44:27:0d:58:f3:76:12:6a:ae:4e:e2:
2b:e5:25:39:35:3a:fe:88:b7:fb:75:09:3f:55:85:b6:fb:14:
0c:ec:4d:8f:03:57:3a:6d:fe:75:a8:3b:72:4a:b9:d2:b6:58:
81:ee:4c:44:41:4a:c5:a1:aa:9c:69:be:6f:b0:9a:26:99:8c:
8c:5c:ac:2c:5e:11:ff:15:79:35:0a:0b:48:7e:2c:d5:0e:06:
57:9f:38:30:e7:0a:a6:80:56:95:f0:3d:17:7a:ba:58:94:5f:
5a:bc:4b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:59 2026 by rpki-client