Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
File: 3Rc4MRWBIorSh1OUS-i88hafq6k.mft (raw, json)
Hash identifier: dFSJLGiNowaR4olpsXE9VMdgsHybbuSE3iGYITnKbcA=
Subject key identifier: 0A:4C:FB:73:FF:F4:18:02:E4:1C:35:00:1E:73:6B:53:D1:EC:E0:AA
Authority key identifier: DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
Certificate issuer: /CN=dd1738311581228ad28753944be8bcf2169faba9
Certificate serial: 01A1C4E7C11B03943CA74BB5EDCD058BA06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
Manifest number: 128B
Signing time: Tue 10 Nov 2026 10:01:24 +0000
Manifest this update: Tue 10 Nov 2026 10:01:24 +0000
Manifest next update: Wed 11 Nov 2026 10:01:24 +0000
Files and hashes: 1: 3Rc4MRWBIorSh1OUS-i88hafq6k.crl (hash: 6VCgLC4YvY8Woe7jvxv5hpXiIO9SQgUnKH69uDlnxm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:e7:c1:1b:03:94:3c:a7:4b:b5:ed:cd:05:8b:a0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1738311581228ad28753944be8bcf2169faba9
Validity
Not Before: Nov 10 10:01:24 2026 GMT
Not After : Nov 11 10:01:24 2026 GMT
Subject: CN=0a4cfb73fff41802e41c35001e736b53d1ece0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:c5:46:cc:80:25:c1:d6:fe:ca:02:cc:4a:
22:74:72:5d:0a:d0:ce:b2:bb:5f:cd:88:e5:6f:1c:
36:ed:df:db:e4:b4:d2:1c:64:7c:81:f5:5e:e3:7d:
bb:09:cd:29:b9:a5:33:01:78:a4:9e:e5:9e:c9:85:
b3:ce:a7:77:97:1a:3d:6c:d6:e1:6a:1e:1d:8c:35:
87:35:9b:31:b3:94:52:02:ab:2f:02:aa:84:d8:2b:
30:a2:11:70:8f:2c:2d:68:96:2a:b0:eb:4e:ea:db:
8b:4f:81:c6:96:b8:56:21:53:46:0c:74:93:be:56:
ac:48:e3:19:48:a6:6a:29:ef:e2:83:55:62:d0:85:
81:94:b1:93:e6:54:5d:91:1a:cc:01:97:6c:df:1a:
d8:c7:0e:77:c2:2c:b1:29:aa:8c:b8:a5:b7:3b:79:
b0:1b:fd:c9:98:aa:ed:9f:6d:55:63:1a:87:46:b1:
d2:94:e6:af:5d:c7:a8:1b:e7:10:f5:37:28:ff:1c:
7f:3f:a6:45:d1:44:5d:08:68:b5:d5:76:b3:9d:dc:
fa:92:0b:b9:1e:61:73:7d:30:4f:9e:fa:2e:f3:50:
3d:da:cd:10:56:fd:bc:c3:d6:01:c2:b9:43:70:b0:
90:42:f4:19:94:85:51:38:66:45:42:8e:24:35:b7:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4C:FB:73:FF:F4:18:02:E4:1C:35:00:1E:73:6B:53:D1:EC:E0:AA
X509v3 Authority Key Identifier:
keyid:DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:28:a2:50:37:f7:1c:63:61:64:e8:8a:8a:34:fe:52:6c:f4:
f1:e2:28:03:97:ae:a7:61:b7:56:9d:a2:c4:4a:17:66:6a:96:
33:44:d1:32:7e:6c:79:a7:e6:5c:41:64:4f:2d:9d:7f:3c:cd:
c3:ba:f5:ca:3b:9e:1e:21:ab:d9:77:9a:0a:6e:1a:e5:be:0c:
fb:7f:40:2f:16:9a:b7:ab:1e:c8:0f:83:43:ad:74:1b:b3:b1:
39:fe:fa:96:69:59:94:60:d9:6e:5a:e4:d7:b8:2e:0d:42:8b:
1d:59:8e:c2:f1:09:3b:73:c6:78:d1:c1:86:cd:52:d9:94:5b:
45:b7:b6:ac:3a:48:40:8a:2a:ff:12:a2:e7:b7:0a:3a:46:c0:
2b:fa:2a:2e:4a:92:3f:a6:2c:b1:29:3e:af:34:6e:b4:fa:d0:
94:d4:82:3f:76:43:ea:ef:63:f9:7a:9e:ea:3d:58:8d:f1:06:
45:57:9d:07:1c:4d:a4:9f:e5:8d:b8:e6:a5:d2:14:e4:b1:4c:
f6:72:27:ff:fc:89:8e:a7:ad:51:10:90:d4:9c:d8:bb:21:38:
45:74:69:98:01:55:06:da:96:2f:aa:14:17:70:d7:d1:ea:5b:
88:b7:84:6d:8a:26:04:38:e3:68:bc:b9:93:a8:08:6c:86:e1:
2e:e5:db:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:06:14 2026 by rpki-client