Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
File: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft (raw, json)
Hash identifier: cQgot6Lk1F7oSQipDQjpeDZs6O1jv+A59UOdYib77MY=
Subject key identifier: EE:F7:84:50:AE:6F:FA:81:F3:0A:D6:C9:6F:F8:C9:B0:99:FB:0A:26
Authority key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
Certificate issuer: /CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Certificate serial: 01A13E947F071A76EBAD95BD7D83DE7C40ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
Manifest number: 13A6
Signing time: Thu 15 Oct 2026 08:01:21 +0000
Manifest this update: Thu 15 Oct 2026 08:01:21 +0000
Manifest next update: Fri 16 Oct 2026 08:01:21 +0000
Files and hashes: 1: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl (hash: 6yAp1UtQ9M6ut3jqIpNx3hGoghrlmRtCpX3eZTP0zZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:7f:07:1a:76:eb:ad:95:bd:7d:83:de:7c:40:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Validity
Not Before: Oct 15 08:01:21 2026 GMT
Not After : Oct 16 08:01:21 2026 GMT
Subject: CN=eef78450ae6ffa81f30ad6c96ff8c9b099fb0a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:cc:ce:03:22:dc:4a:93:6a:c4:d5:8b:3e:
e9:95:d2:84:c3:d5:c7:63:48:5e:ff:09:8c:85:45:
5d:5f:a1:16:83:c5:8b:c8:76:af:64:0c:a3:5a:34:
45:37:51:60:99:8c:3c:f9:1b:51:6d:5b:95:e5:da:
0e:88:ba:1b:19:e6:15:4d:58:36:d7:e1:42:22:f4:
4c:ef:86:cf:aa:ec:c6:1c:d7:58:cc:20:99:1f:c4:
66:82:fb:29:f8:d6:1b:ff:ca:a0:bb:a6:4c:9c:05:
62:2d:56:a9:36:cb:ab:86:cb:e4:fc:91:32:e7:98:
a5:7e:7a:61:fd:89:e5:24:67:1d:d5:0e:66:6f:ea:
6d:e7:5a:9d:35:99:6b:52:8c:d6:2b:f3:6b:74:b9:
99:df:0b:c7:83:3e:42:07:19:59:a4:da:34:a6:62:
95:cc:02:aa:a1:c9:aa:62:48:62:11:7c:18:c9:17:
da:0a:0f:3b:ac:be:ae:ec:7b:7b:e5:67:78:0b:09:
df:35:9b:16:cc:b4:6a:2b:20:41:16:d9:f6:fa:ac:
14:d2:6a:bc:f0:64:38:e5:90:c5:3f:02:d8:77:09:
b6:8b:55:92:a6:15:8e:79:de:ec:d0:17:d7:42:00:
9a:bb:e6:2e:4b:9d:e4:11:42:68:80:2c:1c:58:bb:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F7:84:50:AE:6F:FA:81:F3:0A:D6:C9:6F:F8:C9:B0:99:FB:0A:26
X509v3 Authority Key Identifier:
keyid:DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:87:59:9b:e3:58:0d:5f:29:df:0e:c9:0b:14:d8:bf:33:b1:
52:b5:d5:a3:29:80:1f:63:75:15:98:6c:06:89:a5:3f:54:23:
65:5e:01:91:60:06:e0:24:53:d9:64:18:21:58:2f:09:b3:09:
cd:cc:e0:05:bc:0e:13:91:4d:80:e2:ef:5e:3d:05:ec:8a:e6:
9e:e4:db:0d:e3:d7:77:e6:01:fb:74:db:ba:d2:e3:84:d1:e9:
05:43:9d:a7:e8:6c:be:ca:b0:94:94:ed:ad:67:0b:4d:38:ea:
42:37:3f:4b:d9:59:50:57:ee:37:4c:5c:76:2a:07:63:4d:d0:
0e:28:83:91:bc:e0:12:1c:d6:d3:7a:87:64:09:c8:22:6b:37:
b8:53:54:3b:81:db:55:aa:ac:c1:d7:4a:93:96:58:57:4a:97:
1e:ea:cb:a2:23:ca:f3:6f:cd:bb:b5:2a:96:cf:98:51:a8:dc:
2c:4b:6a:cc:06:5c:9f:c4:00:b8:d0:89:83:33:9a:c2:59:b8:
d0:17:c1:0a:68:7c:c0:ae:11:d8:c9:17:5d:5b:86:77:fc:1b:
eb:92:a6:49:b5:59:1a:51:b0:ed:da:fc:e7:7f:ce:cd:02:e6:
71:d8:d4:cc:fb:2a:49:fc:12:be:19:69:29:b6:38:ee:ed:53:
d5:db:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:22 2026 by rpki-client