Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
File: 3dStS_QUF7o4OE1lvC0HwPaFCeE.mft (raw, json)
Hash identifier: D7ioKBJRm9B1vsTCOwCIORJIKbYWkq76bYKvKwiuBoc=
Subject key identifier: 1D:93:6D:F7:24:F4:AC:A8:6B:93:6D:CA:00:D0:C7:59:8B:56:F7:CF
Authority key identifier: DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
Certificate issuer: /CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Certificate serial: 01A0016EFE65AF30223394A4B652D08D0B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
Manifest number: 1991
Signing time: Fri 14 Aug 2026 18:00:46 +0000
Manifest this update: Fri 14 Aug 2026 18:00:46 +0000
Manifest next update: Sat 15 Aug 2026 18:00:46 +0000
Files and hashes: 1: 3dStS_QUF7o4OE1lvC0HwPaFCeE.crl (hash: AFrX35hBZopuO7p097RX267xc/iGiQKR/p5Sc9JAQtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:fe:65:af:30:22:33:94:a4:b6:52:d0:8d:0b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Validity
Not Before: Aug 14 18:00:46 2026 GMT
Not After : Aug 15 18:00:46 2026 GMT
Subject: CN=1d936df724f4aca86b936dca00d0c7598b56f7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:04:d9:f1:93:43:dc:f0:ca:43:f3:8c:04:
35:b9:80:53:15:1f:f2:32:8d:8c:62:19:40:de:6d:
39:d3:de:80:df:05:31:c1:f3:46:5e:43:7b:87:5f:
a9:7d:52:88:6e:67:3d:1a:d3:a8:71:5b:0a:a8:1f:
79:fb:87:68:3c:76:46:35:a4:1d:15:14:be:74:62:
b6:e8:7e:23:5f:e8:2c:91:89:9a:2c:ed:f9:b7:47:
90:c1:1a:12:f9:65:e9:cb:27:5e:fd:25:7e:c2:ff:
fc:7c:f3:b3:b3:a2:3c:fc:2e:41:c5:25:7f:bc:f6:
78:d5:55:a3:27:76:2d:f4:10:d8:6a:0a:61:fb:67:
c6:59:cb:ea:96:3b:c5:bd:5f:f1:12:25:6b:84:b8:
d8:73:01:3a:23:04:ea:c6:be:e4:41:66:6c:a2:63:
44:7d:0e:1f:b4:72:9b:b3:ea:09:46:c3:76:34:6c:
16:50:0f:0d:89:92:c3:95:cb:64:4a:29:ba:ed:8e:
29:b2:dd:e7:36:71:35:d1:e0:58:74:f0:62:62:82:
96:d0:94:81:5f:18:e4:e7:27:4a:c4:9f:8c:ef:38:
4e:64:6e:78:64:bb:da:8d:1d:e9:40:da:ac:97:88:
fb:ab:62:62:b4:9d:73:41:8f:f5:39:6e:da:96:b8:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:93:6D:F7:24:F4:AC:A8:6B:93:6D:CA:00:D0:C7:59:8B:56:F7:CF
X509v3 Authority Key Identifier:
keyid:DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:56:57:d3:2c:87:dd:c3:30:32:c1:cc:20:88:36:5a:7d:95:
ac:2e:2e:23:db:3e:e6:43:d6:48:d4:3c:a5:68:ec:fb:04:e6:
12:90:e7:71:e0:8c:5d:6e:04:ec:44:34:be:1e:05:66:fa:62:
da:74:46:06:65:6b:5e:b9:5b:0b:78:0a:2f:e0:72:ed:0d:bf:
a7:63:f2:00:11:cd:f4:e9:cf:5a:73:59:fb:db:c4:63:06:cf:
88:90:1e:af:8c:b0:d2:88:9a:a9:e8:56:17:47:56:bb:99:7e:
aa:e4:5a:50:40:67:7c:8d:5f:19:f0:67:72:87:6e:6c:07:f8:
33:7f:bc:32:03:27:8e:c9:2a:aa:a4:dd:d6:49:fe:6f:e4:2a:
d1:5f:9b:0c:12:a4:63:30:7b:e4:3e:73:14:4d:22:cf:47:a9:
bc:18:ba:85:6f:24:38:cd:7a:21:7f:94:72:29:1c:22:ce:d4:
c0:8c:c0:a1:3c:e3:20:d2:c3:94:4a:f4:1d:b7:05:0a:d6:a1:
a9:5b:83:73:99:e1:59:6f:fa:c9:08:0e:db:c2:45:5e:45:9d:
12:09:e3:83:88:a0:9e:49:0b:4a:d8:2f:85:78:ad:32:81:89:
dd:14:d4:01:b4:b9:bf:26:2e:8f:e0:86:1f:15:65:54:b9:2c:
68:3d:63:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:36 2026 by rpki-client