Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json)
Hash identifier: x+kTn1VvlHnfWkcrgKbVzBTYHyDaiFGFXRnGl1JIT6M=
Subject key identifier: 07:47:3C:38:76:87:1A:A7:42:B0:9B:7F:81:60:D5:6D:2F:E9:3C:DB
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01A1569CB7BEE46FBC3B466B29F94698810B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
Manifest number: 16AC
Signing time: Tue 20 Oct 2026 00:01:13 +0000
Manifest this update: Tue 20 Oct 2026 00:01:13 +0000
Manifest next update: Wed 21 Oct 2026 00:01:13 +0000
Files and hashes: 1: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: 6BStY9gE7hw82T2NrnHmpHVLHo3LdpArO7sU8rxjexs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:9c:b7:be:e4:6f:bc:3b:46:6b:29:f9:46:98:81:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Oct 20 00:01:13 2026 GMT
Not After : Oct 21 00:01:13 2026 GMT
Subject: CN=07473c3876871aa742b09b7f8160d56d2fe93cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:f4:bd:3e:2b:ba:6a:96:80:fa:c9:fb:53:
9f:53:53:4a:4d:41:42:1e:8f:c7:5f:a2:0d:2f:e2:
e7:aa:71:62:5f:40:63:16:01:e9:df:83:6e:d7:19:
ef:3a:50:f8:4b:75:3e:ca:59:0f:69:ee:97:29:9d:
64:0d:9f:77:92:fb:91:2e:13:19:22:32:ae:4a:3e:
6f:4f:50:91:4c:93:36:3a:4d:97:96:ca:24:d2:3d:
e3:12:1d:ed:85:56:1a:7a:24:f2:c3:78:f0:54:d9:
59:74:46:b3:6b:5b:0f:0f:34:3f:9d:a9:38:41:e9:
c7:9d:94:b8:d8:ad:cb:a0:c9:14:51:89:74:fe:e1:
ae:6d:28:8e:9a:26:be:b8:01:8a:81:d7:2a:d1:14:
e6:69:3a:0e:6a:92:70:41:7b:c9:bd:54:0f:8f:0e:
f0:5b:7e:e3:7b:37:29:1e:af:91:85:9a:85:8c:3d:
d2:12:ca:f0:41:70:28:34:76:db:89:44:af:02:ca:
e7:de:30:17:12:13:32:9c:08:35:bb:57:af:48:b7:
83:d7:f1:15:4d:c9:e3:de:73:8e:67:e0:24:13:4d:
b1:05:ec:90:aa:0c:52:2c:92:9f:82:88:80:ad:6e:
49:0b:ed:f7:6c:6f:42:8a:dd:11:1c:00:ab:34:fb:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:47:3C:38:76:87:1A:A7:42:B0:9B:7F:81:60:D5:6D:2F:E9:3C:DB
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:95:05:1a:ec:6a:6f:71:1e:b7:09:91:5f:57:6f:a6:b3:9d:
06:3f:4e:5f:98:5b:0b:2c:66:dc:c8:26:b7:d3:66:bf:b1:77:
45:90:b3:a8:4b:52:05:e6:ff:13:8d:ec:2a:9b:43:6e:36:d6:
13:e1:d0:8a:3c:ec:70:f1:3e:e7:72:2b:45:ef:03:0c:ae:c1:
94:79:95:79:da:c2:44:c2:f2:40:ae:f2:f2:89:aa:3b:55:68:
cc:12:c8:23:02:98:60:19:18:d2:2d:5f:53:ef:d9:1e:c7:4d:
97:d5:0e:4c:3a:ae:16:e1:42:5f:d6:48:82:e0:04:9a:d8:d1:
ce:d5:5d:5a:87:31:09:3a:7e:28:83:25:9a:47:05:e9:d7:01:
d4:49:19:92:57:c2:f0:28:b1:ca:e8:fe:21:ca:47:09:68:2c:
2c:6c:4b:26:b4:66:31:17:5a:fc:32:d4:58:c8:3f:41:b8:bb:
d1:69:2e:a9:21:e7:e0:6d:77:1f:5c:b7:ab:57:d0:fb:75:64:
d3:ef:f1:ff:39:5c:89:ac:ec:c2:90:42:47:3c:bf:2e:3b:19:
fc:57:09:30:0a:79:06:90:dc:0b:32:d1:60:a6:81:ff:33:f4:
0a:5e:17:ba:83:96:ec:82:7c:63:44:36:32:ea:53:75:6c:4e:
2b:3f:f7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:52:42 2026 by rpki-client