Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
File: 3Rc4MRWBIorSh1OUS-i88hafq6k.mft (raw, json)
Hash identifier: fSHMihoPslH++5l7Ye9srroPpelt+gdWLvy67uKcNw0=
Subject key identifier: B4:D3:DE:46:97:CA:EC:33:18:19:89:F7:23:6C:AB:C1:78:4F:10:DD
Authority key identifier: DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
Certificate issuer: /CN=dd1738311581228ad28753944be8bcf2169faba9
Certificate serial: 01A0C21FA7BA31E013DC9363923000724598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
Manifest number: 1205
Signing time: Mon 21 Sep 2026 04:00:49 +0000
Manifest this update: Mon 21 Sep 2026 04:00:49 +0000
Manifest next update: Tue 22 Sep 2026 04:00:49 +0000
Files and hashes: 1: 3Rc4MRWBIorSh1OUS-i88hafq6k.crl (hash: Fd9weXfOjBEZ24bFPyjhey+mdRN7kWCLzK3qIFtZsQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:a7:ba:31:e0:13:dc:93:63:92:30:00:72:45:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1738311581228ad28753944be8bcf2169faba9
Validity
Not Before: Sep 21 04:00:49 2026 GMT
Not After : Sep 22 04:00:49 2026 GMT
Subject: CN=b4d3de4697caec33181989f7236cabc1784f10dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:f6:ad:f0:53:79:de:3f:2e:8a:3a:f0:3d:
48:b0:c4:da:f3:a2:c5:7b:e2:2d:2f:69:08:dd:0e:
b0:2f:5e:39:83:c1:56:b8:87:b5:e1:b0:d9:0e:86:
62:64:78:10:a5:4d:b4:0f:29:28:e5:84:94:0f:88:
b8:f2:af:84:28:b7:53:93:70:98:eb:71:cd:e5:c2:
20:37:5e:9f:f4:80:06:df:b4:ac:b5:33:dd:c7:fe:
ee:42:69:04:1e:f6:01:72:29:a9:3c:04:b9:1a:ac:
40:ca:57:70:05:5f:85:97:ee:0b:64:75:b0:a2:40:
18:ef:7d:61:26:8a:c8:9e:ed:5e:1c:0a:56:ee:ae:
c1:5f:53:50:7f:1f:e8:a7:56:1d:a3:b4:cf:10:59:
50:40:59:bb:a6:21:a2:91:29:f1:31:9c:e0:07:a9:
e4:41:eb:f1:57:00:02:48:1b:82:87:a3:4a:97:22:
89:89:b4:6a:3a:c6:ae:a9:fd:66:6a:5f:a0:05:c3:
30:e0:4e:6d:4b:66:d1:5c:74:de:46:89:84:ba:29:
27:92:0f:d7:8f:a1:90:f4:90:6d:5c:d0:47:06:79:
6a:cc:9b:f3:7e:e0:d8:65:b5:51:99:d4:7c:e4:54:
aa:f3:ca:94:5d:b5:89:ca:9f:57:a8:14:38:6e:d6:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D3:DE:46:97:CA:EC:33:18:19:89:F7:23:6C:AB:C1:78:4F:10:DD
X509v3 Authority Key Identifier:
keyid:DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:40:6a:b4:e6:2d:81:74:e2:41:e7:a7:ca:87:42:e3:d5:bc:
c3:72:42:38:8b:bb:57:4b:31:af:a6:22:d6:50:1f:f2:69:4c:
1a:7d:ca:ff:e6:58:18:a2:d5:7e:10:97:e8:b8:87:0e:6c:64:
b4:4b:34:55:e5:e7:de:3e:7a:6b:25:ca:31:a5:ea:09:05:ad:
82:52:bf:fb:f7:e2:1a:34:27:2a:a4:32:42:cb:2b:9f:6f:fb:
da:6f:80:f9:0d:5f:38:9e:1c:80:4a:76:ab:6a:1f:df:ca:b8:
19:48:a3:30:4c:bd:4d:8e:d9:14:a3:a9:6f:40:dd:ce:cd:85:
b7:98:00:eb:ac:c5:4d:cf:11:e5:f5:25:38:16:51:59:17:26:
28:aa:a3:f4:a5:89:ad:08:38:40:35:80:d1:3f:a7:4b:31:c8:
c5:f7:c8:06:1c:4f:fb:09:a2:92:e1:fb:bf:a2:0a:22:74:5e:
3e:72:a5:b9:a4:8f:03:75:28:16:69:39:aa:d5:41:53:4b:e7:
2f:90:26:41:47:bc:ec:0f:d0:ac:6f:f9:9b:0c:ec:47:75:9a:
1d:71:ba:8f:6d:17:c0:c8:f9:03:70:f9:6b:41:76:e6:ef:e1:
35:76:d4:b1:2b:2d:ad:67:dc:bd:ff:1d:4a:2d:e7:01:99:b5:
54:9f:37:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCH6e6MeAT3JNjkjAAckWYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMTczODMxMTU4MTIyOGFkMjg3NTM5NDRiZThiY2YyMTY5
ZmFiYTkwHhcNMjYwOTIxMDQwMDQ5WhcNMjYwOTIyMDQwMDQ5WjAzMTEwLwYDVQQD
EyhiNGQzZGU0Njk3Y2FlYzMzMTgxOTg5ZjcyMzZjYWJjMTc4NGYxMGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l72rfBTed4/Loo68D1IsMTa86LF
e+ItL2kI3Q6wL145g8FWuIe14bDZDoZiZHgQpU20Dyko5YSUD4i48q+EKLdTk3CY
63HN5cIgN16f9IAG37SstTPdx/7uQmkEHvYBcimpPAS5GqxAyldwBV+Fl+4LZHWw
okAY731hJorInu1eHApW7q7BX1NQfx/op1Ydo7TPEFlQQFm7piGikSnxMZzgB6nk
QevxVwACSBuCh6NKlyKJibRqOsauqf1mal+gBcMw4E5tS2bRXHTeRomEuiknkg/X
j6GQ9JBtXNBHBnlqzJvzfuDYZbVRmdR85FSq88qUXbWJyp9XqBQ4btb1SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTT3kaXyuwzGBmJ9yNsq8F4TxDdMB8GA1UdIwQY
MBaAFN0XODEVgSKK0odTlEvovPIWn6upMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1JjNE1SV0JJb3JTaDFPVVMtaTg4aGFmcTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iYzQxZjEtY2E3ZS00MjA1LWI4MWIt
YmViZmEyZmNhNDZmLzEvM1JjNE1SV0JJb3JTaDFPVVMtaTg4aGFmcTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iYzQxZjEtY2E3ZS00MjA1LWI4MWItYmViZmEyZmNhNDZm
LzEvM1JjNE1SV0JJb3JTaDFPVVMtaTg4aGFmcTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEBqtOYt
gXTiQeenyodC49W8w3JCOIu7V0sxr6Yi1lAf8mlMGn3K/+ZYGKLVfhCX6LiHDmxk
tEs0VeXn3j56ayXKMaXqCQWtglK/+/fiGjQnKqQyQssrn2/72m+A+Q1fOJ4cgEp2
q2of38q4GUijMEy9TY7ZFKOpb0Ddzs2Ft5gA66zFTc8R5fUlOBZRWRcmKKqj9KWJ
rQg4QDWA0T+nSzHIxffIBhxP+wmikuH7v6IKInRePnKluaSPA3UoFmk5qtVBU0vn
L5AmQUe87A/QrG/5mwzsR3WaHXG6j20XwMj5A3D5a0F25u/hNXbUsSstrWfcvf8d
Si3nAZm1VJ83zQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:18:00 2026 by rpki-client