Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier: K0dKOO6n3GyB0UMX4cAWXHA9aVsEMC1HmcyalNKIjHM=
Subject key identifier: 14:56:3F:A2:4A:0B:0F:B9:66:87:B7:66:86:E2:CB:D3:11:DB:BE:4F
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial: 01A13DB8044A2EC83525551E8055AAA09A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 04:00:32 +0000
Manifest this update: Thu 15 Oct 2026 04:00:32 +0000
Manifest next update: Fri 16 Oct 2026 04:00:32 +0000
Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: OQ+DlVsaHSrPI7kbp9zF1pBWeipgFEUoL4WoA9nMf3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:04:4a:2e:c8:35:25:55:1e:80:55:aa:a0:9a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Validity
Not Before: Oct 15 04:00:32 2026 GMT
Not After : Oct 16 04:00:32 2026 GMT
Subject: CN=14563fa24a0b0fb96687b76686e2cbd311dbbe4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:7f:a7:dd:d6:d2:4f:84:23:77:c5:a0:48:
9a:e8:e8:b7:8e:75:68:51:f4:ee:3f:bb:f9:6c:59:
d4:b2:cd:b4:49:11:b0:91:77:54:18:34:39:19:71:
0d:46:a6:93:c8:9b:11:2a:9c:68:c5:7e:a4:19:f6:
d3:b1:65:58:8a:4c:bb:eb:63:6c:6c:61:fa:6b:f5:
c6:29:ae:8a:75:7d:31:8c:4a:a9:80:6a:18:c5:e6:
c6:e8:89:b7:be:5a:6b:80:f0:08:e0:86:00:45:ed:
be:a9:0f:7d:c0:59:f5:67:5f:f5:40:04:7f:ea:f3:
e3:c2:c1:46:ee:ea:22:8a:6b:0e:2d:31:af:a4:ee:
09:13:83:db:e8:40:45:4f:6d:bc:76:64:37:9f:da:
9d:d0:6b:ce:8d:58:0d:a8:f5:32:fc:8a:b6:06:9c:
e5:af:55:38:ff:3b:38:c3:4b:2a:d6:08:f8:ff:a6:
1e:0c:3d:85:86:4e:b5:e4:bd:d0:74:ea:0b:46:6c:
78:4c:13:4a:30:98:f4:8e:fa:3f:1d:48:ef:69:14:
15:a3:0f:e9:36:b9:00:f1:ef:1c:18:0f:24:3a:6b:
c6:a9:19:d6:74:83:bd:7f:1f:b9:a3:89:35:dd:52:
46:0e:b7:51:72:1d:31:2e:c6:6a:04:95:13:dd:da:
39:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:56:3F:A2:4A:0B:0F:B9:66:87:B7:66:86:E2:CB:D3:11:DB:BE:4F
X509v3 Authority Key Identifier:
keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5a:5f:ac:23:80:0a:ef:ea:58:1b:6c:69:c9:0b:91:f6:e2:
c0:72:a2:5f:e7:93:c1:39:2d:cd:27:ed:d5:2c:f0:e4:08:25:
39:17:2a:51:9e:6f:58:c0:53:37:2a:c8:ed:19:f3:af:85:fb:
5f:3e:6e:50:dd:d8:f3:28:0a:9f:8f:c9:dd:0a:d5:0a:4d:8f:
c4:36:32:ba:8e:c5:c2:97:de:74:43:d8:bf:d5:d5:78:a2:3e:
26:28:b7:41:aa:e2:07:bf:60:94:0e:f9:6a:14:0a:e7:c9:bb:
82:d0:af:d6:dc:4a:86:a6:ec:c7:1e:f8:bb:21:f2:b6:3f:1e:
92:bc:fe:77:6e:28:18:c4:30:6e:ba:b5:fb:75:b6:20:cb:0f:
62:c3:9b:f1:53:00:3f:e7:f6:26:2a:c5:56:ab:c9:b6:38:a0:
ee:6b:ec:72:74:b6:e0:f9:33:34:44:33:7c:fb:55:14:44:fd:
1f:9b:57:56:eb:6a:20:d0:25:49:c8:ff:b7:71:a7:03:cc:c8:
86:55:bd:69:5d:f1:19:94:7c:e1:fb:ad:b4:c5:56:50:94:c1:
be:7e:85:83:83:f7:5d:02:e7:7c:bb:23:06:79:b4:6a:a2:2d:
b5:cc:98:57:2a:1f:78:c4:2f:2d:81:0b:24:d2:e8:c4:a5:08:
29:cc:c0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:24 2026 by rpki-client