Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
File: 3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft (raw, json)
Hash identifier: iNLVamuUj08iYCdG/N0l1pr9QILGlDctMXb8/zrFII0=
Subject key identifier: AB:1B:9F:94:45:03:A3:FD:8D:A6:BE:FF:2D:35:69:45:83:E9:F2:1A
Authority key identifier: DD:6C:CD:C5:78:E5:B7:CC:97:5E:9F:53:8E:B9:41:F1:92:AD:42:8B
Certificate issuer: /CN=dd6ccdc578e5b7cc975e9f538eb941f192ad428b
Certificate serial: 01A0408502EB8A9E346B32D3425FBDAFBD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WzNxXjlt8yXXp9TjrlB8ZKtQos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
Manifest number: 0155
Signing time: Thu 27 Aug 2026 00:00:53 +0000
Manifest this update: Thu 27 Aug 2026 00:00:53 +0000
Manifest next update: Fri 28 Aug 2026 00:00:53 +0000
Files and hashes: 1: 3WzNxXjlt8yXXp9TjrlB8ZKtQos.crl (hash: C5hwep0QNZVKf4faLUUsHEPe27eVvvHSa+/8OHFCzMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WzNxXjlt8yXXp9TjrlB8ZKtQos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:02:eb:8a:9e:34:6b:32:d3:42:5f:bd:af:bd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6ccdc578e5b7cc975e9f538eb941f192ad428b
Validity
Not Before: Aug 27 00:00:53 2026 GMT
Not After : Aug 28 00:00:53 2026 GMT
Subject: CN=ab1b9f944503a3fd8da6beff2d35694583e9f21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:34:a8:f1:0d:94:04:5d:ce:a9:e1:bc:c8:
3b:33:f6:63:8c:47:7c:cf:3c:20:06:97:01:bd:c0:
e6:40:30:ab:3c:7f:47:2d:3c:8e:74:0c:a6:cc:fa:
63:8b:a2:1d:76:e5:ec:54:db:64:34:6c:8e:5f:a6:
09:ea:fc:97:dd:8d:9b:d8:1f:3c:72:ad:76:9c:f9:
81:e3:ff:af:32:b1:c8:6c:81:ff:34:b3:09:1d:20:
c2:09:62:0c:75:80:47:89:f4:eb:21:c6:7c:6c:32:
a5:a5:4b:b3:fa:a8:e8:2a:6e:07:56:30:0f:dc:d8:
ec:43:40:6c:1d:b3:12:78:32:0a:b7:c0:db:d2:1e:
68:9c:89:93:af:0c:d7:94:fa:9c:b3:c3:8e:e2:33:
c6:50:23:81:f3:4d:e1:5d:8f:63:9e:f4:c4:18:95:
0c:59:3f:47:70:f8:42:83:be:f6:14:41:05:00:86:
03:eb:b0:9b:ab:3a:42:ea:26:94:bd:65:b9:b9:03:
b9:d4:ec:1a:0d:3b:8e:b4:72:b6:ab:75:3a:ff:a0:
18:e9:d6:24:1d:f3:38:a7:36:98:96:4d:31:34:7f:
f0:df:69:06:48:20:3c:f1:9b:fb:50:1f:38:1e:f0:
f1:da:98:6a:9a:bf:d8:96:89:1e:8e:80:d9:a7:f7:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1B:9F:94:45:03:A3:FD:8D:A6:BE:FF:2D:35:69:45:83:E9:F2:1A
X509v3 Authority Key Identifier:
keyid:DD:6C:CD:C5:78:E5:B7:CC:97:5E:9F:53:8E:B9:41:F1:92:AD:42:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WzNxXjlt8yXXp9TjrlB8ZKtQos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:49:37:cc:20:72:f1:90:ab:d0:f0:62:4c:bd:9e:79:06:41:
0e:81:3f:3d:cd:1f:e7:af:16:5f:6c:9f:28:c2:a8:38:a1:19:
da:ce:9d:00:7e:3d:4c:4d:d1:dc:82:5c:75:81:13:6e:b9:15:
49:b2:b4:08:8c:9a:af:9a:d7:24:d7:91:e4:a8:d5:8c:00:6b:
15:87:5e:29:42:91:fd:37:d9:55:66:ae:4c:05:57:2e:a9:f3:
b4:17:c1:bc:fc:02:6e:61:4f:98:67:ed:a9:94:89:b9:fa:4e:
95:45:f7:f8:80:96:23:a1:03:79:c9:e8:49:c8:2e:01:4d:13:
60:28:45:17:4b:90:51:17:06:7d:ae:fe:09:56:62:08:fd:e8:
90:de:49:eb:86:e3:39:09:cc:3b:a7:d3:4a:7a:b3:30:3d:fe:
a3:70:7b:08:46:a2:ea:84:c4:81:bf:24:98:5c:fd:dd:0e:9a:
4b:7e:3f:40:ae:1d:4c:8b:aa:04:2f:57:e2:8b:3b:b7:3f:e4:
42:30:55:6a:fa:1b:15:d2:93:50:7b:b5:b7:9a:87:ed:56:c4:
0a:e9:0c:a4:fa:54:8f:59:42:72:11:a1:d0:f6:c3:17:b2:33:
85:a4:a1:c0:a5:03:0a:7a:fe:8d:e4:cf:59:6c:b3:ba:ba:d1:
62:b2:5b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:01:36 2026 by rpki-client