Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
File: 3DC4_dBG72WGgJfwNrinyFVyqtA.mft (raw, json)
Hash identifier: U9v5GlAaN8yjUFrNYSwGJysGJiDLZPrwWWWqj1sbZus=
Subject key identifier: 14:15:2A:17:73:F0:1E:EE:2A:28:1F:2C:25:58:03:7C:59:E8:62:7F
Authority key identifier: DC:30:B8:FD:D0:46:EF:65:86:80:97:F0:36:B8:A7:C8:55:72:AA:D0
Certificate issuer: /CN=dc30b8fdd046ef65868097f036b8a7c85572aad0
Certificate serial: 01A0D5DDA4E8F3D3829CC46A6375B0529A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
Manifest number: 1A6B
Signing time: Fri 25 Sep 2026 00:01:07 +0000
Manifest this update: Fri 25 Sep 2026 00:01:07 +0000
Manifest next update: Sat 26 Sep 2026 00:01:07 +0000
Files and hashes: 1: 3DC4_dBG72WGgJfwNrinyFVyqtA.crl (hash: 8LBu2c3NGS8LxksQWzScOZu89W11awv6XgyD7umDKsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:a4:e8:f3:d3:82:9c:c4:6a:63:75:b0:52:9a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc30b8fdd046ef65868097f036b8a7c85572aad0
Validity
Not Before: Sep 25 00:01:07 2026 GMT
Not After : Sep 26 00:01:07 2026 GMT
Subject: CN=14152a1773f01eee2a281f2c2558037c59e8627f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:23:d0:0f:6e:c9:e1:20:13:48:b4:a9:76:
a1:db:cc:7e:50:35:d4:e0:f0:42:97:ba:28:f5:ed:
a8:80:c5:4a:7b:d2:a1:4a:22:9d:bd:b2:43:ba:d0:
68:88:57:94:2d:08:40:e5:b7:af:6d:fb:1c:a0:dd:
8c:d8:a9:a5:c6:8e:d4:9d:f8:40:ec:af:91:a0:f7:
88:29:c9:84:35:95:57:8b:0d:fa:2f:5e:77:35:38:
1c:4d:fd:c5:8f:b2:0d:36:66:90:c5:01:cd:a7:45:
e7:e2:53:34:a0:e5:09:79:51:1d:bb:46:b0:c6:af:
2d:87:8f:cc:10:20:18:ff:9b:8f:9c:dd:9c:93:e4:
a9:4d:67:8c:f3:dd:d3:75:14:7c:dd:7b:7e:aa:31:
62:0b:07:76:5d:4a:80:3b:ec:71:17:4f:49:0a:80:
a1:fa:26:24:2d:ff:47:83:75:06:8f:d1:54:37:be:
25:32:4f:20:2a:31:66:3b:69:3a:ff:c9:12:04:42:
76:a0:28:4d:38:80:76:f9:67:99:15:e8:3b:10:74:
43:ea:06:e2:78:e7:19:45:e3:e1:11:da:7e:bf:c5:
36:9c:50:5f:bc:a6:cb:65:68:9a:bc:45:b2:69:80:
55:8c:22:de:ac:37:57:c5:e2:e7:fc:4d:bf:44:13:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:15:2A:17:73:F0:1E:EE:2A:28:1F:2C:25:58:03:7C:59:E8:62:7F
X509v3 Authority Key Identifier:
keyid:DC:30:B8:FD:D0:46:EF:65:86:80:97:F0:36:B8:A7:C8:55:72:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1a:88:0c:a6:44:f5:1c:56:9c:6c:3f:1e:dc:a0:cd:f9:48:
fc:b7:36:ac:40:81:43:d4:bd:61:04:57:e1:d1:97:57:c0:ac:
a0:95:83:a1:74:c3:fd:c0:f1:b7:35:8d:f8:b3:db:ce:2b:41:
a0:60:bf:3a:11:e1:80:22:1f:9d:b8:24:56:5e:04:e1:77:dd:
a1:8d:ef:67:7a:06:60:50:37:01:a8:f1:68:fa:5e:b0:b3:7d:
2e:e8:f3:c8:0c:9a:97:2a:58:26:4f:24:d0:57:88:d0:6c:c8:
b6:19:aa:d3:4a:2c:4f:a1:e0:b5:c6:bb:f7:6e:59:d8:36:a3:
e6:e7:20:37:4d:76:29:5e:fa:c3:cc:dc:6d:53:39:7b:df:f8:
f5:89:3c:c1:a6:f8:ab:9a:8a:23:1e:bb:46:58:36:4d:d7:c6:
1a:5f:1e:53:0f:69:da:86:f8:8d:83:fc:bb:37:ac:9e:98:c3:
5a:d0:41:f6:19:00:4e:a4:18:70:7a:b5:17:63:ea:4f:57:d6:
24:9f:dc:87:6e:2b:11:d1:11:26:6d:31:83:65:7d:53:56:a1:
17:e1:78:4e:0e:75:80:53:13:6a:4d:99:07:bc:5d:f4:a2:65:
6d:b4:3f:dc:20:ee:22:f4:90:2a:9f:b9:65:ac:99:6d:c4:60:
06:4b:05:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:40:00 2026 by rpki-client