Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
File: 3frtS0AyNuLKi-twkcug4GpUPQo.mft (raw, json)
Hash identifier: GbmIZAJSL4tKTTTDbUg4MwfUlpAwhvncwcvOBOeI9qw=
Subject key identifier: 68:11:15:D4:09:DD:D5:12:4E:6A:9C:2A:12:5D:A0:84:AB:C1:66:40
Authority key identifier: DD:FA:ED:4B:40:32:36:E2:CA:8B:EB:70:91:CB:A0:E0:6A:54:3D:0A
Certificate issuer: /CN=ddfaed4b403236e2ca8beb7091cba0e06a543d0a
Certificate serial: 01A040BC5FEF18592502E453F4C12ACDB8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
Manifest number: 0564
Signing time: Thu 27 Aug 2026 01:01:22 +0000
Manifest this update: Thu 27 Aug 2026 01:01:22 +0000
Manifest next update: Fri 28 Aug 2026 01:01:22 +0000
Files and hashes: 1: 3frtS0AyNuLKi-twkcug4GpUPQo.crl (hash: 2aqSrNpYWHPQFW+yvw3RzUuWwQdTOeznk+el+fjbhXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bc:5f:ef:18:59:25:02:e4:53:f4:c1:2a:cd:b8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfaed4b403236e2ca8beb7091cba0e06a543d0a
Validity
Not Before: Aug 27 01:01:22 2026 GMT
Not After : Aug 28 01:01:22 2026 GMT
Subject: CN=681115d409ddd5124e6a9c2a125da084abc16640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cf:d5:c8:d2:02:47:e1:d3:da:3f:b1:c8:c9:
97:f7:91:80:fb:3f:75:a6:87:af:b1:a3:3c:92:26:
28:ef:8c:c0:e5:39:bc:82:97:ad:4b:a6:53:a5:0c:
39:09:b8:bb:d0:8e:3c:19:99:90:43:c6:eb:82:c3:
0c:28:d5:7f:f1:3f:fa:9f:0f:bc:51:03:2f:1a:85:
7f:7e:b4:b4:5d:3e:6a:0a:71:dd:53:9c:c0:17:84:
d1:0a:a5:ac:27:e2:f0:6d:eb:4b:14:33:79:9c:ae:
b0:0c:fa:c7:1f:75:a0:c8:e6:69:69:ca:8d:ae:8f:
8e:91:1d:05:b1:ec:ad:a3:b9:52:95:ef:12:6e:fa:
74:bf:a8:4d:49:63:c1:88:db:11:cf:b1:e8:f8:a9:
63:d4:ad:60:d7:cf:cc:03:44:d3:5d:9a:de:6f:3b:
65:ba:b0:d4:70:68:72:bf:26:68:1e:ba:80:1c:c5:
d0:e9:2a:bb:00:3a:ca:95:1b:7a:d3:46:fd:2a:15:
44:de:d1:2d:6a:10:1d:7d:71:4b:8c:bd:41:42:c3:
12:6e:27:63:3c:ec:76:ca:56:e7:80:9d:90:c6:8e:
13:2b:89:39:4b:88:b0:8b:8f:6b:82:1b:92:79:49:
d3:97:7b:ff:60:16:9c:64:c9:d4:c6:26:0e:3a:7b:
30:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:11:15:D4:09:DD:D5:12:4E:6A:9C:2A:12:5D:A0:84:AB:C1:66:40
X509v3 Authority Key Identifier:
keyid:DD:FA:ED:4B:40:32:36:E2:CA:8B:EB:70:91:CB:A0:E0:6A:54:3D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a6:d1:ef:79:95:63:b3:ee:2c:45:19:1e:b3:42:64:6d:16:
e5:73:96:6d:a7:96:fb:2e:b0:ee:a8:f4:1e:b2:87:07:30:fa:
c5:c5:be:53:53:bc:d4:bc:8f:8b:18:f2:6e:fc:ed:3f:39:66:
39:d7:0f:33:17:f4:11:fe:96:b9:b5:be:96:10:61:d4:18:cc:
91:4e:5c:d3:a9:75:c7:f3:af:9b:34:fb:da:ac:45:8f:6f:ed:
87:12:14:f9:75:e3:21:64:90:16:e7:1b:a5:59:f0:82:0d:84:
ff:7e:3a:3d:f1:35:72:da:b0:30:8f:ff:5a:3f:eb:25:26:23:
6d:8b:c3:d2:1b:49:41:40:72:73:04:b3:8b:70:00:ce:a2:d2:
5e:f3:49:65:7e:9d:84:1f:db:f7:3c:b8:cc:a3:68:0f:1f:b9:
db:fc:88:ed:4e:1b:73:c5:4c:92:2d:66:ac:44:21:68:e6:07:
ef:31:1f:46:e6:90:1c:ae:61:0d:d1:b2:10:4b:b0:ab:b0:b3:
2b:9c:93:0d:d6:35:b8:a1:16:65:5a:80:67:b7:88:31:e6:72:
b6:58:78:b0:12:d9:dc:b8:58:c1:d5:90:da:ef:a6:81:3d:43:
e3:09:c1:d8:50:66:1c:46:a0:6c:81:e7:fb:c1:45:bf:90:33:
1a:ef:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:20 2026 by rpki-client