Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/adfe9c-4871-436b-b1af-f53980cd12a9/1/3q1CDzu36fnFhEOZXD3udERG0y8.mft
File: 3q1CDzu36fnFhEOZXD3udERG0y8.mft (raw, json)
Hash identifier: 9AUpaCJeCLLKv0Q1p5rUs8/LagidEWdmT5GA1ZmZvDI=
Subject key identifier: E9:23:E9:A0:7E:67:30:4E:C0:82:4F:49:9E:7A:F6:10:13:67:5A:AF
Authority key identifier: DE:AD:42:0F:3B:B7:E9:F9:C5:84:43:99:5C:3D:EE:74:44:46:D3:2F
Certificate issuer: /CN=dead420f3bb7e9f9c58443995c3dee744446d32f
Certificate serial: 01A0404DC26A3BDE0FA18F2E1DCBC74D581D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q1CDzu36fnFhEOZXD3udERG0y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/adfe9c-4871-436b-b1af-f53980cd12a9/1/3q1CDzu36fnFhEOZXD3udERG0y8.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:00:32 +0000
Manifest this update: Wed 26 Aug 2026 23:00:32 +0000
Manifest next update: Thu 27 Aug 2026 23:00:32 +0000
Files and hashes: 1: 3q1CDzu36fnFhEOZXD3udERG0y8.crl (hash: wQh2dFbgRtOusOJLj0P8S9EvBhbJcOy/1pltWa66fxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/adfe9c-4871-436b-b1af-f53980cd12a9/1/3q1CDzu36fnFhEOZXD3udERG0y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/adfe9c-4871-436b-b1af-f53980cd12a9/1/3q1CDzu36fnFhEOZXD3udERG0y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q1CDzu36fnFhEOZXD3udERG0y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:c2:6a:3b:de:0f:a1:8f:2e:1d:cb:c7:4d:58:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dead420f3bb7e9f9c58443995c3dee744446d32f
Validity
Not Before: Aug 26 23:00:32 2026 GMT
Not After : Aug 27 23:00:32 2026 GMT
Subject: CN=e923e9a07e67304ec0824f499e7af61013675aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:46:4a:fa:ab:2a:39:1e:43:41:87:c8:25:
c2:5b:5b:1f:fe:2a:eb:e5:a9:82:65:05:eb:1d:b1:
34:a6:03:d3:e5:8e:05:ce:63:67:0b:49:29:c5:92:
9b:c5:de:d4:31:8b:21:52:84:f1:3e:e9:c9:d4:8e:
ab:5a:b0:7a:9e:06:ce:a3:46:4d:c6:9d:47:97:d2:
6f:bf:9b:fe:78:b2:2f:92:33:58:1d:52:d1:3b:2b:
b5:3d:34:ac:97:71:f1:02:ae:82:a0:5f:2e:ea:c7:
11:07:6f:91:d0:24:c2:b5:80:a9:e7:93:ce:c5:2d:
d7:96:84:bf:88:f2:c6:f3:8b:19:71:39:46:4e:b0:
3e:78:e6:89:d4:91:26:4f:30:61:91:01:be:e0:db:
75:45:72:45:08:7f:e6:6e:05:3c:e2:eb:b6:8c:67:
bb:02:63:06:de:78:9a:d3:5f:f8:ea:74:7c:5e:f7:
a8:75:10:4b:00:1b:62:3e:86:be:bb:98:f3:69:43:
0d:f4:de:e8:2a:6b:c6:01:ce:f8:da:56:7d:a0:54:
87:7f:fd:0f:a4:ed:6f:85:a6:8e:ce:10:a6:35:fd:
8d:f2:75:e1:ac:9c:bc:86:42:2a:49:95:84:ca:ec:
2b:91:08:82:af:86:a8:6d:61:f6:eb:0b:45:f6:6d:
78:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:23:E9:A0:7E:67:30:4E:C0:82:4F:49:9E:7A:F6:10:13:67:5A:AF
X509v3 Authority Key Identifier:
keyid:DE:AD:42:0F:3B:B7:E9:F9:C5:84:43:99:5C:3D:EE:74:44:46:D3:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1CDzu36fnFhEOZXD3udERG0y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/adfe9c-4871-436b-b1af-f53980cd12a9/1/3q1CDzu36fnFhEOZXD3udERG0y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/adfe9c-4871-436b-b1af-f53980cd12a9/1/3q1CDzu36fnFhEOZXD3udERG0y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:96:06:ed:bd:55:c4:95:1a:a2:b6:65:8b:31:94:44:a1:c7:
aa:51:0a:a6:a1:1b:5f:42:a8:9c:a7:3b:9e:72:10:d0:24:90:
ba:44:ca:1b:1e:fc:e0:2d:cb:e7:1c:0d:22:70:c1:3d:d2:aa:
2e:2c:8f:6d:a7:d2:b8:92:7c:28:61:32:02:53:94:6c:35:73:
de:1a:c8:2b:cc:f5:61:00:65:a4:fa:79:c5:15:9b:de:94:f5:
2e:77:da:2d:31:24:8e:06:f8:f6:3c:92:4f:76:44:bc:67:3b:
da:58:d0:bc:49:b7:20:5d:63:32:f8:07:3c:5d:2c:a0:7b:5d:
92:ab:9b:5e:01:21:45:e3:b6:f8:89:ac:66:49:fd:09:91:04:
4d:f9:c2:2a:8b:39:86:85:91:fc:bd:67:16:5c:00:96:e1:2f:
75:00:2d:3e:47:ea:b3:7f:b0:2b:c6:a2:11:06:98:5e:de:ee:
49:51:6e:32:5a:b5:ae:82:25:8d:74:a1:2e:5f:3f:9e:02:b1:
3f:07:19:34:c7:a9:3a:29:c0:8a:84:43:76:1c:12:e6:d6:a8:
ce:44:96:a3:d6:05:fa:22:a5:3b:9d:23:37:f1:82:26:9b:2a:
24:58:bb:67:e0:68:b0:32:cc:af:80:9a:94:cc:0d:95:eb:24:
b1:9f:ab:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:46:56 2026 by rpki-client