Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.mft
File: 3C0fLO003Hbb9H29ywGire36Y2M.mft (raw, json)
Hash identifier: pl+5EjgtP3dVcOUr4JOaVIylySDBU36LYRqQ+f++n/Y=
Subject key identifier: 74:71:67:E6:2A:4A:FA:93:C4:4D:2F:DD:1D:F1:7F:E0:8D:F0:3A:9D
Authority key identifier: DC:2D:1F:2C:ED:34:DC:76:DB:F4:7D:BD:CB:01:A2:AD:ED:FA:63:63
Certificate issuer: /CN=dc2d1f2ced34dc76dbf47dbdcb01a2adedfa6363
Certificate serial: 01A16B3621B821D8AF4619989689D4DE7D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C0fLO003Hbb9H29ywGire36Y2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.mft
Manifest number: 91
Signing time: Sat 24 Oct 2026 00:01:11 +0000
Manifest this update: Sat 24 Oct 2026 00:01:11 +0000
Manifest next update: Sun 25 Oct 2026 00:01:11 +0000
Files and hashes: 1: 3C0fLO003Hbb9H29ywGire36Y2M.crl (hash: 3wfVnQd2Bifz9ca8wCi4psjwKitW8OfyteJiFHnil3E=)
2: Lv4tkrl1ROKeBeNg2OOVq9IR6JM.asa (hash: h80di06neMgZtFFpFKJPRBlRLDBtQUhi6wm+vE3vCF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C0fLO003Hbb9H29ywGire36Y2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:36:21:b8:21:d8:af:46:19:98:96:89:d4:de:7d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2d1f2ced34dc76dbf47dbdcb01a2adedfa6363
Validity
Not Before: Oct 24 00:01:11 2026 GMT
Not After : Oct 25 00:01:11 2026 GMT
Subject: CN=747167e62a4afa93c44d2fdd1df17fe08df03a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:af:bf:7c:60:3e:3c:bd:f1:2e:a2:71:64:
18:64:6e:6b:07:53:35:35:0d:4e:29:f2:92:04:b6:
d1:0b:f0:10:60:bc:76:9a:3d:11:f2:92:c7:df:c9:
c5:01:f8:fb:63:fc:66:37:ca:dd:d9:05:86:5c:ed:
62:71:9d:eb:98:a7:04:71:86:98:71:f0:6c:de:6e:
0a:ef:09:c6:9d:a8:bd:0c:e1:b7:3b:4e:cb:c7:46:
65:99:80:0f:41:47:9b:19:d0:22:cf:16:d9:e1:b5:
b7:68:7e:0b:81:c3:74:24:9b:02:f2:c2:39:93:ab:
65:0f:0e:c0:bf:3a:b5:2c:8d:86:f4:b3:47:a7:90:
ea:fb:56:c3:36:79:5c:5c:6f:01:8b:75:5d:eb:73:
8d:fa:bb:4b:a7:b5:98:a0:45:69:e3:16:c3:5f:a5:
f9:55:24:46:06:4d:3a:ba:d7:9a:5b:df:6b:50:66:
7c:63:1b:9d:73:37:8d:0c:c7:c2:91:c3:e5:bb:82:
94:6e:34:e8:7e:bf:82:0a:9a:36:12:6d:2e:23:32:
cf:f4:ff:84:30:dc:33:d7:e5:4c:ef:6a:6e:3b:5f:
64:65:22:75:3b:c3:bf:d6:18:a8:66:cd:3c:fd:dd:
34:bb:dd:18:d2:f9:61:e3:52:a3:49:81:6a:9f:b7:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:71:67:E6:2A:4A:FA:93:C4:4D:2F:DD:1D:F1:7F:E0:8D:F0:3A:9D
X509v3 Authority Key Identifier:
keyid:DC:2D:1F:2C:ED:34:DC:76:DB:F4:7D:BD:CB:01:A2:AD:ED:FA:63:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C0fLO003Hbb9H29ywGire36Y2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3e:72:80:dc:1f:ea:42:27:00:74:23:26:43:c5:5e:a2:18:
57:f9:ce:e1:ff:18:c4:62:0b:67:39:ae:de:db:3b:86:b5:29:
57:64:3f:39:59:a8:af:ad:24:e2:74:92:bd:99:04:b4:17:dc:
85:83:f8:6d:92:20:71:07:56:7f:a8:6e:b7:e2:da:b8:e4:41:
3b:c3:4c:fa:22:4a:e0:73:6b:2f:ed:e5:2d:16:3a:00:8e:80:
03:b5:8d:02:1f:6d:6a:1c:8a:84:7d:0e:c2:81:86:ff:32:2f:
d0:e2:d0:5c:ac:b2:17:3d:28:db:67:5e:d0:12:34:48:fe:74:
8d:d1:d6:a2:c8:46:c2:cd:f7:7c:c9:9e:74:a5:b0:7e:97:6d:
65:e1:58:35:44:45:23:d8:a4:5c:2d:f1:a0:a3:47:bc:61:7f:
13:57:5b:09:80:05:55:83:e6:13:e9:35:31:58:25:5b:d8:4a:
6e:f6:77:6f:ff:9f:56:fd:2a:53:74:17:8e:20:73:67:7b:38:
d7:af:fa:21:5e:bf:da:4d:0a:cc:b5:68:48:10:8b:91:93:8b:
c5:27:a5:9a:74:b6:e5:6e:bb:81:d6:40:94:6c:1b:15:f9:18:
a6:b2:0b:ce:5d:d5:84:2d:9f:ec:e3:41:64:16:9a:1f:bc:a7:
66:7b:98:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:13:40 2026 by rpki-client