Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json)
Hash identifier: IC2Htm4WmkMX/WWazjuuyFGq93vyo696TtgLcbtnueY=
Subject key identifier: 06:B1:13:A8:07:DC:42:06:45:AD:AB:63:5A:92:B6:18:51:DC:C1:8D
Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Certificate serial: 01A146F27B2115FCDB4AC4FC426A4EEAE168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
Manifest number: 09FA
Signing time: Fri 16 Oct 2026 23:00:58 +0000
Manifest this update: Fri 16 Oct 2026 23:00:58 +0000
Manifest next update: Sat 17 Oct 2026 23:00:58 +0000
Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: kAOPW5+zFbUAxTkxc7ptZ9u6enXLGGs0Uh/KBaVch1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:f2:7b:21:15:fc:db:4a:c4:fc:42:6a:4e:ea:e1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Validity
Not Before: Oct 16 23:00:58 2026 GMT
Not After : Oct 17 23:00:58 2026 GMT
Subject: CN=06b113a807dc420645adab635a92b61851dcc18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:6a:43:69:51:ba:70:be:a9:ba:99:f2:f7:
1f:46:50:f5:38:04:19:6b:0d:b1:3d:48:e5:6a:bb:
69:6c:0b:f3:21:aa:66:4d:b7:0d:18:25:45:58:8e:
a3:4c:df:87:9a:fb:2f:53:68:18:d1:cd:5c:a3:44:
4a:07:fd:6c:63:e5:a5:9e:25:6d:95:65:c3:42:be:
78:12:4e:fd:8a:d7:d2:d8:56:fb:d9:62:8d:12:62:
49:2a:1d:51:0c:72:b3:95:00:62:5f:a1:be:75:ca:
39:af:83:2c:36:ed:5b:13:af:80:86:2a:ca:81:cb:
5f:4e:16:e5:35:e6:7d:fe:f3:5b:da:0f:b1:f3:02:
a9:8a:6d:2a:22:d6:72:84:38:03:08:12:66:f8:64:
0d:2b:36:d8:85:40:2f:e2:28:ce:87:1f:56:58:4e:
f6:57:e0:50:61:e7:07:53:e8:c5:b6:b1:7b:91:30:
77:9c:2e:37:5e:ad:2e:39:d1:3e:ff:da:9e:08:3c:
b5:94:62:e5:3f:b5:6d:6b:bd:ce:1c:59:99:b4:05:
a5:65:d9:b1:66:3a:2a:d3:1e:5d:db:81:b4:3a:b9:
fe:8f:9c:f5:4f:01:bb:a5:db:c8:81:14:34:22:6c:
cb:12:a2:a8:b8:df:d4:4f:6e:c5:c6:ca:ee:f7:a8:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B1:13:A8:07:DC:42:06:45:AD:AB:63:5A:92:B6:18:51:DC:C1:8D
X509v3 Authority Key Identifier:
keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:41:19:80:80:a7:3a:0e:2e:3d:4c:26:bc:c7:d4:e3:9e:a7:
29:11:99:5d:c7:d3:5c:c8:8e:5f:70:6b:32:b5:4b:63:27:0c:
70:ee:d1:a1:42:4b:f1:a6:94:24:81:1d:cd:a0:67:e8:e2:f9:
61:ce:c5:24:a9:9a:0d:ac:fa:70:74:b1:e7:27:33:b9:6c:b5:
f4:93:9c:1b:85:0a:15:49:e9:c3:b3:59:86:84:a1:cc:5e:71:
10:8a:f3:ba:6f:2d:2e:c2:37:aa:89:40:63:61:78:b5:e2:94:
7e:8f:ca:29:a2:6b:29:8f:ef:6c:c3:6c:f0:0e:ca:9c:cd:c6:
71:f9:c4:ce:bd:cf:83:ad:81:59:44:6b:e0:07:20:1f:62:db:
7f:ee:a6:ee:3e:af:c1:29:ac:fb:13:8a:66:ce:6b:21:77:1d:
cd:6e:aa:df:cb:33:f9:77:67:ae:46:6f:ab:19:b0:70:88:e4:
28:81:56:cc:6d:19:c9:04:f1:66:ff:98:9a:72:29:e2:9c:9f:
ba:3c:94:80:dc:63:d9:9f:ad:fb:7c:ab:44:da:77:f1:b4:c8:
0b:97:41:fd:cb:e0:47:12:94:de:14:e3:e8:78:15:7d:d5:df:
1a:06:5a:0f:8e:4f:f8:ba:03:c7:40:c1:f7:a9:5a:76:39:d6:
55:94:ba:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:59:29 2026 by rpki-client