Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
File: 03h3GhBvaw0FSld4U1aSLK8C40M.mft (raw, json)
Hash identifier: MR/aI1eddrOq5SWNzl4ezY3yF+gZjWkPjgvZTTGti8M=
Subject key identifier: 75:3C:C2:63:B9:5E:0A:9F:25:AB:70:55:14:50:BC:B0:06:5D:6E:9E
Authority key identifier: D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
Certificate issuer: /CN=d378771a106f6b0d054a57785356922caf02e343
Certificate serial: 01A0016F7C66995A0F6AE89A6E082BBAA512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
Manifest number: 0DAA
Signing time: Fri 14 Aug 2026 18:01:18 +0000
Manifest this update: Fri 14 Aug 2026 18:01:18 +0000
Manifest next update: Sat 15 Aug 2026 18:01:18 +0000
Files and hashes: 1: 03h3GhBvaw0FSld4U1aSLK8C40M.crl (hash: DsbItZewOdfP6ScKK1Da8m3n5eUZBGVKQBrL0rgQoJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:7c:66:99:5a:0f:6a:e8:9a:6e:08:2b:ba:a5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d378771a106f6b0d054a57785356922caf02e343
Validity
Not Before: Aug 14 18:01:18 2026 GMT
Not After : Aug 15 18:01:18 2026 GMT
Subject: CN=753cc263b95e0a9f25ab70551450bcb0065d6e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:35:19:6b:e0:71:1c:3b:d8:d9:a9:c4:58:
a9:80:25:26:e8:35:28:92:3c:ef:ec:54:0d:a6:95:
65:50:38:48:66:5e:a8:b2:16:19:e9:78:c0:55:c3:
8d:67:91:58:04:39:73:7a:dc:b2:36:03:97:76:ed:
27:30:ec:73:ec:b2:08:1e:60:fa:bc:c3:5f:b1:aa:
b6:17:ae:72:23:3d:25:37:c0:e9:cf:63:71:86:c7:
22:05:04:26:3b:c1:49:7b:11:28:70:bf:fb:a6:2c:
4f:67:8d:af:cd:e2:76:c7:90:fc:0d:5f:55:93:ad:
bb:e0:b4:24:ef:38:7f:3e:e3:f6:16:ae:5d:7e:38:
55:17:0b:dd:2b:48:f7:fe:3a:d7:dd:73:60:75:9a:
fd:fd:b8:10:09:db:05:0b:fb:5c:ed:40:41:28:d6:
fe:a8:1a:b0:2e:c9:1a:4d:4b:a9:e3:05:46:f1:3f:
7c:cb:97:a9:9e:cc:1d:77:ea:30:d1:9d:3a:f7:07:
f2:7b:b1:9f:4d:e2:f0:c0:6b:55:5b:78:9e:f7:0d:
59:94:8c:12:23:7c:2b:a6:7a:7b:79:01:88:da:77:
39:c7:9a:a5:98:9e:25:f2:23:bb:fd:30:3b:54:01:
e2:9f:8e:4e:1d:0e:39:22:90:40:3f:95:f7:22:22:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3C:C2:63:B9:5E:0A:9F:25:AB:70:55:14:50:BC:B0:06:5D:6E:9E
X509v3 Authority Key Identifier:
keyid:D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:13:bd:c8:dd:97:e6:5a:89:a5:f9:d2:3c:78:b5:07:64:e5:
1f:9c:e4:3c:56:24:1f:ff:aa:3e:a2:c8:78:5e:43:ef:0f:31:
ea:02:23:d1:99:e2:b2:1a:92:63:71:2a:85:b1:50:14:f1:f7:
ea:70:ab:86:60:fc:73:42:69:f5:d4:67:65:2b:7a:54:e0:b3:
d5:2b:98:53:40:b9:fd:79:51:c1:b8:61:98:dd:84:9c:7d:c8:
49:8e:f4:b5:53:81:a6:16:41:01:ff:57:97:fa:dc:86:c9:27:
87:0c:91:7f:b6:4f:db:68:b0:06:bf:f9:00:7e:79:e0:19:67:
d3:00:02:64:f9:a6:e2:dc:be:b1:1d:2f:f8:20:71:5c:b8:82:
74:1d:c7:1b:f5:ba:55:84:8c:b3:f5:e9:b0:fb:c2:9e:4e:13:
b9:ac:a3:b4:da:b3:55:28:bb:73:21:92:c3:b5:71:68:32:5e:
63:f5:26:8d:fb:b8:a2:3f:3b:22:0f:2e:5e:1a:07:94:5c:bf:
c0:eb:c2:59:dd:fd:54:2c:28:08:db:48:72:f9:36:82:1c:f6:
03:11:f0:0e:c5:23:43:90:21:be:ee:11:48:bb:9e:b1:5e:d0:
23:76:5d:ca:88:af:e3:af:96:cc:da:9e:23:b4:d1:52:2d:7e:
b6:c0:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:13 2026 by rpki-client