Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
File: 3dStS_QUF7o4OE1lvC0HwPaFCeE.mft (raw, json)
Hash identifier: ofcJUFYz/mju8vpDz+PB0QhVWungEk5ZgnUAyZiRN7c=
Subject key identifier: 88:95:1F:34:01:3A:BA:15:DC:89:56:12:D5:72:59:BC:DB:89:F9:17
Authority key identifier: DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
Certificate issuer: /CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Certificate serial: 01A149BC3BD3A6D07404A581BBCDE913B8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
Manifest number: 1A3B
Signing time: Sat 17 Oct 2026 12:00:35 +0000
Manifest this update: Sat 17 Oct 2026 12:00:35 +0000
Manifest next update: Sun 18 Oct 2026 12:00:35 +0000
Files and hashes: 1: 3dStS_QUF7o4OE1lvC0HwPaFCeE.crl (hash: EnoNC7X+eMOV0bSb5ge1232XDofbgRT+KhTEZObW4vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:bc:3b:d3:a6:d0:74:04:a5:81:bb:cd:e9:13:b8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Validity
Not Before: Oct 17 12:00:35 2026 GMT
Not After : Oct 18 12:00:35 2026 GMT
Subject: CN=88951f34013aba15dc895612d57259bcdb89f917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:24:08:3a:bf:51:7b:de:a3:b2:57:27:94:b1:
bd:18:79:41:de:75:9f:fc:21:de:0f:9b:88:a3:96:
44:bb:c9:24:d0:8e:43:b9:1a:ea:26:60:52:c1:56:
1a:95:22:f4:6b:32:a4:50:5d:b9:4c:48:56:a1:ed:
fa:40:54:32:ea:8d:04:6c:57:4a:50:86:8f:04:86:
80:c3:85:2b:fc:4d:d0:9c:ea:c7:b1:86:f6:d7:08:
f6:89:1e:fb:61:f7:9d:a7:48:17:0a:71:e3:70:f9:
b6:82:b6:3c:d7:de:35:1f:4e:9e:45:13:27:e9:60:
eb:88:a1:42:79:36:f2:23:3a:78:7d:7a:17:ce:75:
e6:ae:c1:4d:91:ea:16:bc:2d:bf:e6:19:5c:d7:b6:
07:72:74:03:65:d0:fe:73:71:1d:1f:2d:7b:fc:47:
8a:9d:9f:b7:73:bb:53:12:b9:8c:17:d1:74:5a:a2:
7c:e9:74:8b:1b:fe:28:05:bf:67:31:99:e1:53:29:
da:ac:56:40:b8:8f:45:a1:77:dc:dd:ca:6a:6c:87:
64:85:1d:95:6f:e6:33:8a:5f:0a:f6:c3:9b:20:7d:
72:6d:29:ff:3f:6f:5f:60:8e:82:be:ab:c0:eb:b3:
38:43:92:b3:13:06:eb:6d:af:97:b4:64:a9:29:26:
aa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:95:1F:34:01:3A:BA:15:DC:89:56:12:D5:72:59:BC:DB:89:F9:17
X509v3 Authority Key Identifier:
keyid:DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f0:b8:e8:7f:61:80:49:77:66:57:83:71:5b:e1:0f:1c:66:
85:c8:10:48:87:2a:c7:b1:d4:a0:b2:8a:ea:e0:a8:5e:d9:a3:
18:fb:f0:7c:c5:55:c1:93:94:f1:4d:75:2d:3c:37:12:3d:eb:
03:25:02:9e:92:eb:01:79:6d:36:9c:a5:07:f0:53:70:6e:dc:
b0:ce:5e:33:5b:3b:8c:65:d9:62:b0:52:f4:9f:ed:3f:65:f8:
63:8f:62:04:12:98:b2:5f:d7:5b:bd:5e:21:1e:4e:89:e1:cb:
7d:07:cb:51:da:29:eb:bf:48:0c:41:aa:08:87:3e:c3:50:15:
ad:52:be:58:48:ec:65:c6:cf:3b:2c:31:5e:4b:f6:b0:e5:d2:
fd:40:da:61:8d:e5:7e:4e:15:e3:0c:b5:5b:ee:74:37:7d:35:
d0:d9:d4:93:3b:ed:be:49:bc:2d:54:ab:a3:66:53:aa:4e:18:
5a:a2:f4:e6:7d:7e:95:93:c2:4a:df:77:46:2b:4b:03:a9:c2:
be:25:26:6b:d8:ce:a9:59:0a:18:e0:3f:00:0a:c0:4b:ac:8c:
9a:da:1b:90:23:3e:18:51:b6:80:de:c1:b9:b1:d8:94:d9:15:
03:35:5d:83:5c:92:a3:36:43:eb:70:20:fd:9f:7c:eb:40:ca:
e1:cd:01:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:22:37 2026 by rpki-client