Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: OJ5jgaejpSJAs+U9mr4NsuJbpotJMLpeGfcdufo25uc=
Subject key identifier: 77:CE:F1:B4:CC:8F:5B:DF:9A:98:30:4D:2C:22:FF:02:D1:B2:73:DB
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 01A08CB18755BE6BA3F17BF8101A303281D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 1A51
Signing time: Thu 10 Sep 2026 19:00:39 +0000
Manifest this update: Thu 10 Sep 2026 19:00:39 +0000
Manifest next update: Fri 11 Sep 2026 19:00:39 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: NCIxZQ+oe4IVLobzsYmTGI0W32ymXFn29eeGrSArDZ4=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:87:55:be:6b:a3:f1:7b:f8:10:1a:30:32:81:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Sep 10 19:00:39 2026 GMT
Not After : Sep 11 19:00:39 2026 GMT
Subject: CN=77cef1b4cc8f5bdf9a98304d2c22ff02d1b273db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:6f:35:83:02:73:49:61:5d:e0:db:f1:de:
c1:17:87:8e:09:a5:67:c4:e8:ae:13:18:55:d5:48:
02:ca:98:c0:4f:15:f4:8f:bc:ad:a3:a0:2d:f8:0c:
0a:d7:5b:00:62:74:6a:48:93:b7:83:c3:47:f7:61:
b2:ac:3b:0b:b4:49:2f:0a:6f:c9:b1:df:50:ee:e6:
c8:22:2d:8c:83:49:06:2b:ef:a0:f0:11:72:f4:26:
a4:de:8c:7b:9b:7e:85:e4:98:a9:af:f9:f6:25:91:
db:4e:45:8a:59:42:01:8f:11:8a:c8:d1:6d:6b:31:
6c:d3:80:92:6b:ba:00:ad:37:47:15:16:ff:2d:c8:
6a:e4:12:45:2f:0c:91:45:f1:a4:76:fd:be:66:a9:
0b:cb:db:28:b0:87:40:b8:a1:14:a1:b9:18:77:14:
49:44:9e:a9:b6:2b:53:e4:c4:ff:c5:5b:53:f8:4d:
36:77:54:0e:00:9d:58:ed:c9:69:ce:d3:c4:68:09:
b0:ea:ae:0b:26:2c:04:a3:33:07:53:19:36:9f:0f:
2a:2f:45:5f:8a:f6:15:db:98:a7:93:28:55:c3:1c:
82:0d:7a:32:33:0a:dc:5e:5b:d4:72:5a:a6:5e:34:
9d:22:37:b4:45:cb:8d:eb:ad:f7:14:c4:bc:99:be:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CE:F1:B4:CC:8F:5B:DF:9A:98:30:4D:2C:22:FF:02:D1:B2:73:DB
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:44:be:f9:32:90:8e:a1:83:11:e5:1f:7f:2c:bc:9a:17:1b:
90:a8:fd:34:87:65:58:0c:6e:23:0d:29:79:05:69:8b:3b:76:
aa:e4:1b:f3:b6:fb:b0:f6:2d:91:60:59:2a:57:05:6d:3b:53:
9a:f7:4b:59:30:ed:09:3f:8d:fd:1e:ea:29:7a:e4:e3:2d:1b:
73:af:3e:0b:69:1a:72:8f:4b:cc:26:b8:d5:05:38:33:fa:83:
61:d7:7b:c5:7e:34:f2:67:f9:b8:97:13:a1:23:44:da:a6:e2:
a1:dd:43:d4:a6:7c:bc:ff:cd:fe:d5:77:f5:6e:ab:d4:2d:8b:
55:8b:02:5b:c3:dc:5d:f1:d4:73:61:40:53:40:1f:9e:ec:9f:
fa:c2:27:95:e6:9c:54:6c:0e:42:ce:31:cd:11:ee:76:19:1d:
fa:a0:96:03:65:01:51:52:0a:6a:cb:52:9f:62:36:e6:89:73:
3a:5d:50:b2:b2:c6:4a:76:07:9e:d9:51:9a:83:c8:ae:d2:32:
ef:b8:b0:af:de:db:24:da:5c:64:be:61:ed:26:b4:b3:eb:14:
1e:e2:b0:dd:80:9e:00:20:5b:47:6e:43:a9:41:4c:a1:ab:15:
23:2e:b5:9e:ab:3d:9a:3d:61:d1:27:d3:01:69:69:00:b9:b2:
f1:d7:4f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:33:29 2026 by rpki-client