Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
File: 03h3GhBvaw0FSld4U1aSLK8C40M.mft (raw, json)
Hash identifier: m+URou4EhIqUtflkgG5c9E3MSnyjd9blY2T86FjnOJk=
Subject key identifier: A4:24:E5:44:92:DF:78:58:B8:D5:09:8A:68:B1:66:F5:5A:10:96:1A
Authority key identifier: D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
Certificate issuer: /CN=d378771a106f6b0d054a57785356922caf02e343
Certificate serial: 01A13E265328FE93B5E25FCDCB2DF99EB9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
Manifest number: 0E4E
Signing time: Thu 15 Oct 2026 06:01:01 +0000
Manifest this update: Thu 15 Oct 2026 06:01:01 +0000
Manifest next update: Fri 16 Oct 2026 06:01:01 +0000
Files and hashes: 1: 03h3GhBvaw0FSld4U1aSLK8C40M.crl (hash: WPwWcdvD7XJlY2RdDu+QAnfXaquzW9ITLtZrliq1d34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:53:28:fe:93:b5:e2:5f:cd:cb:2d:f9:9e:b9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d378771a106f6b0d054a57785356922caf02e343
Validity
Not Before: Oct 15 06:01:01 2026 GMT
Not After : Oct 16 06:01:01 2026 GMT
Subject: CN=a424e54492df7858b8d5098a68b166f55a10961a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:3c:51:80:fc:bf:e2:4a:b3:cc:b3:e2:f3:
32:cf:b2:55:da:75:53:e9:4c:72:c9:f4:5f:fc:2b:
87:85:3f:62:00:5c:f6:27:91:d8:99:27:eb:69:89:
60:2a:26:93:bc:75:7e:dd:b4:e7:f0:e1:4c:06:b2:
a4:40:f9:32:63:1a:45:24:69:eb:f6:99:c7:d3:f1:
4a:96:b2:eb:8f:12:0e:a3:77:cd:da:19:c3:5f:4c:
42:68:0a:75:a2:44:0f:33:cc:94:38:5b:38:36:81:
4e:d9:45:37:ff:cc:18:88:64:4f:2f:dc:15:7d:b1:
8a:54:9e:00:9e:5d:2b:65:a6:28:99:fa:6d:34:cd:
86:c2:91:0a:de:bd:f6:d2:c9:0f:7f:b8:27:ad:22:
3e:f6:e6:62:2c:9a:71:e1:a6:e9:93:8b:ef:1b:f9:
7a:f2:55:6c:f0:c1:94:c3:e5:2f:c3:9f:1d:99:0b:
4a:e1:6e:a1:d4:d0:ce:22:62:83:87:5b:9e:04:32:
bb:50:07:e2:9e:e2:36:ca:ab:63:26:08:4f:34:5f:
0b:03:1e:37:bb:12:f2:95:37:a6:da:11:71:f5:0e:
a6:fc:5e:91:4e:54:31:53:53:44:f4:6b:93:4d:57:
fc:11:95:62:a1:4d:4d:69:0d:af:9e:43:f4:db:1b:
24:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:24:E5:44:92:DF:78:58:B8:D5:09:8A:68:B1:66:F5:5A:10:96:1A
X509v3 Authority Key Identifier:
keyid:D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d5:84:9b:68:7c:31:39:cd:f5:59:bc:10:27:ae:b8:ab:a4:
08:a1:94:d9:89:98:3d:9a:a2:8f:06:c9:9b:1f:3e:5c:85:eb:
82:b7:e8:fd:85:cb:1b:91:82:1c:36:bb:98:56:6a:91:d9:60:
19:02:9b:9a:19:22:18:5b:85:2b:5c:c6:01:4a:ff:6d:53:c5:
60:af:e4:59:13:61:99:b2:eb:fd:72:46:b0:8d:e0:bf:b7:ba:
86:ef:7f:2c:c4:3d:ec:cb:be:cf:38:cb:a1:cd:6a:cf:f7:30:
49:f3:1c:41:81:51:22:5d:be:91:da:80:14:a4:88:95:55:bc:
35:09:94:01:ec:d2:bc:76:b3:5b:00:fa:d6:cf:f7:c0:94:51:
04:63:8e:45:7b:25:0f:87:e7:03:43:45:4f:7f:40:fd:5b:4e:
c4:49:e9:ea:d3:13:18:4a:1e:53:fb:eb:6b:b7:8f:5b:9b:54:
61:aa:0b:c6:9b:c0:f5:a8:93:c7:08:ec:b1:9b:0b:86:eb:78:
98:bb:ea:09:63:d8:3e:b9:d9:27:96:c1:10:21:64:3d:d0:42:
e2:3f:bb:43:36:1a:09:f7:37:a6:15:c0:60:46:6d:cf:54:cb:
ae:89:4e:86:77:ee:aa:42:9e:1e:34:b3:47:7b:e8:60:af:19:
6a:8d:25:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:23 2026 by rpki-client