Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
File: 3APMhzX27sAjqfI6BLLpDVOpIVI.mft (raw, json)
Hash identifier: mibNPGvIhUnjChKCV/LcKVPaRjvYiDg65D012JS2mls=
Subject key identifier: 38:83:8E:F7:59:72:A5:F4:33:54:43:AB:C6:DB:8E:EA:F3:41:55:AB
Authority key identifier: DC:03:CC:87:35:F6:EE:C0:23:A9:F2:3A:04:B2:E9:0D:53:A9:21:52
Certificate issuer: /CN=dc03cc8735f6eec023a9f23a04b2e90d53a92152
Certificate serial: 01A0C7EAACA32D62081CAEEB0527E74B1B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
Manifest number: 0AF8
Signing time: Tue 22 Sep 2026 07:00:40 +0000
Manifest this update: Tue 22 Sep 2026 07:00:40 +0000
Manifest next update: Wed 23 Sep 2026 07:00:40 +0000
Files and hashes: 1: 3APMhzX27sAjqfI6BLLpDVOpIVI.crl (hash: G+YXXRFOct+rf1FqnjF9E7ea/6tNHzPdA1WrR0I/jXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:ac:a3:2d:62:08:1c:ae:eb:05:27:e7:4b:1b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03cc8735f6eec023a9f23a04b2e90d53a92152
Validity
Not Before: Sep 22 07:00:40 2026 GMT
Not After : Sep 23 07:00:40 2026 GMT
Subject: CN=38838ef75972a5f4335443abc6db8eeaf34155ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:4c:b8:a4:b8:f7:36:0c:b3:ed:e2:c1:c1:
ef:0f:4a:6d:fd:24:f5:13:cd:fd:e3:03:7b:a4:87:
81:47:ed:17:0b:ed:85:b9:59:9f:0b:18:23:90:86:
da:97:e6:ea:2d:7e:6d:ed:c2:23:32:ea:3d:29:ef:
4d:b6:d4:1c:9c:99:24:fa:42:38:1e:12:12:c0:ac:
d3:c3:f0:d7:45:df:09:e9:be:58:c9:68:ca:a5:d7:
3c:da:61:ed:b9:15:43:ab:4f:35:ca:fe:c5:e0:ac:
5e:55:ac:8d:07:69:b8:3b:8d:e6:41:84:90:9a:a8:
04:46:22:70:7a:d6:8d:09:da:03:a9:52:52:e5:4b:
46:6e:bc:04:8d:d4:26:5a:fb:60:d3:bf:60:ba:8a:
2e:99:0e:ba:37:e5:dd:bd:d8:e8:01:7f:ba:32:73:
70:42:b2:82:37:fa:d7:3b:01:9d:c6:48:7b:e3:6f:
75:c1:3f:23:c4:5e:42:ed:16:f6:1e:60:62:df:3e:
51:08:26:22:22:be:47:ee:61:68:68:f3:da:f8:0e:
f4:54:d1:19:e3:1d:da:97:3d:13:50:f2:4c:46:68:
f4:09:b5:c1:dd:6a:c3:00:6f:ec:ae:16:6a:37:d4:
28:3a:4a:fa:84:65:75:7a:78:7e:7a:f4:5a:a2:1e:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:83:8E:F7:59:72:A5:F4:33:54:43:AB:C6:DB:8E:EA:F3:41:55:AB
X509v3 Authority Key Identifier:
keyid:DC:03:CC:87:35:F6:EE:C0:23:A9:F2:3A:04:B2:E9:0D:53:A9:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ae:59:bf:03:97:66:8c:77:9b:6d:d0:3c:fd:59:19:15:9f:
fe:13:e8:3c:96:f6:e5:ca:54:b2:a2:fb:f6:74:eb:14:48:92:
56:39:46:83:5d:7a:66:cf:1a:6a:aa:2f:62:59:d1:1c:c0:2c:
39:63:49:42:d5:1e:17:af:ed:9f:fb:26:b2:d8:03:b7:a5:f0:
3a:d9:14:df:24:98:78:2c:db:b4:10:c6:23:8e:52:be:f9:b6:
da:3b:6b:ed:b9:b6:98:e0:f9:1e:2c:5a:fe:3b:3c:a0:c8:8e:
41:0b:26:0a:73:c7:83:da:7d:36:99:db:ae:b0:8d:c5:05:bd:
e2:b9:62:8e:c8:c5:28:12:ac:5f:86:38:27:66:fd:e0:a8:b4:
92:61:7e:8a:28:67:83:c3:76:24:d7:a6:b3:ef:00:d1:0a:e6:
18:ec:8e:2c:d3:41:96:28:62:20:94:37:47:a3:78:7f:99:0f:
c2:07:4c:3c:3d:74:cc:66:fa:6b:45:8b:69:04:fd:03:9d:f5:
90:fa:be:7b:d6:a6:6e:1a:fb:91:3a:21:50:00:34:37:34:20:
46:d5:9b:4b:90:5f:a4:02:eb:33:6d:ba:4a:2c:82:31:2d:37:
e4:73:b5:ee:67:2f:9d:c3:0a:dd:c3:5e:d0:df:77:59:21:3b:
a9:b6:2f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:20:30 2026 by rpki-client