Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: BrbkGyNbxnF3h/eexaLGZECNQK+tEo7Frc6mZgp+SwY=
Subject key identifier: 2F:23:13:65:F7:A3:DA:78:84:96:47:51:8C:29:13:C3:61:58:FE:7B
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 019FA898E262DAE2CA223718AEFBF6B89C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 0909
Signing time: Tue 28 Jul 2026 12:00:19 +0000
Manifest this update: Tue 28 Jul 2026 12:00:19 +0000
Manifest next update: Wed 29 Jul 2026 12:00:19 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: 3bcrSvHIFeAr7bXn5oSY4WIgSq5YO4KQyhBlyxGu9X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:e2:62:da:e2:ca:22:37:18:ae:fb:f6:b8:9c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Jul 28 12:00:19 2026 GMT
Not After : Jul 29 12:00:19 2026 GMT
Subject: CN=2f231365f7a3da78849647518c2913c36158fe7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2f:52:6d:cc:5d:cb:98:57:5a:42:81:55:66:
bd:92:a8:5b:7c:fe:15:2e:33:67:bc:b2:89:ff:98:
bf:13:5f:06:81:e9:cb:69:11:5a:54:84:c3:b5:d4:
6f:78:49:59:f6:09:0c:f7:82:9b:b4:47:66:78:1c:
a8:29:28:44:19:2f:a9:17:42:d5:3f:17:df:4b:1e:
1a:85:b5:89:48:8f:a5:30:fa:ac:e8:5c:67:24:86:
d5:52:ae:91:d1:51:bd:e0:35:05:94:54:1f:48:a7:
be:93:22:c7:3b:d6:71:c3:0d:fe:99:96:61:64:1d:
7d:50:09:82:78:63:35:4d:d9:8f:7c:b1:4d:b7:ce:
d1:27:f4:57:78:b2:ed:17:6f:82:f6:8a:77:1a:5b:
ac:fd:96:be:c9:7e:c4:90:1c:f0:be:ca:82:ce:53:
b3:fd:b9:eb:ba:f5:f4:b5:04:f9:b5:13:0c:95:49:
26:67:49:45:a7:23:a9:90:96:9e:4e:be:87:92:cc:
f6:f5:67:34:46:88:7f:52:e5:5e:9c:68:f2:70:47:
ff:14:e4:12:1f:5d:c5:3d:a8:65:3c:12:9a:2d:66:
a8:51:53:39:a8:7f:bf:ed:2e:90:39:c0:1f:e1:a1:
a2:70:0e:6d:ec:f8:df:9c:37:34:c1:fc:ec:d8:42:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:23:13:65:F7:A3:DA:78:84:96:47:51:8C:29:13:C3:61:58:FE:7B
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:52:53:0c:09:3a:7d:c3:45:93:2f:c6:85:25:e2:6d:9f:31:
45:9c:cb:77:56:9f:0d:7b:f6:a6:34:74:ea:cc:23:7d:e5:e2:
56:b3:db:b1:b2:a5:86:dd:72:56:ca:cf:3d:fc:d1:07:4d:0a:
6f:8f:f1:ca:2c:70:1b:fc:d8:6e:55:7f:58:f1:7c:e9:f2:36:
58:99:5a:0a:f4:d5:54:5e:95:a5:96:52:47:73:c2:f6:8e:5c:
83:bb:d5:c0:08:1d:5b:a6:4a:ac:77:db:f6:4b:61:d9:9e:a6:
f6:c3:91:50:4d:18:62:1a:65:f3:d9:bd:6c:84:63:b9:92:f8:
58:13:77:45:00:27:2f:e2:86:c7:34:06:66:57:51:66:fd:c2:
38:c4:65:72:09:3c:79:2d:6c:bd:70:83:0b:18:4d:b7:fe:5b:
58:b0:20:54:a8:bd:5b:4c:8b:09:7f:40:00:22:7a:d1:73:ca:
7e:a6:e2:40:31:a7:e8:82:5c:73:26:87:9d:dc:04:5e:ab:e7:
e3:ba:c1:c7:d1:67:de:e8:4b:a2:d9:d8:9e:73:53:b5:8b:ab:
91:65:8e:f0:90:c6:ad:40:80:19:dd:6c:0e:9f:db:aa:b7:49:
fb:ea:1d:72:1b:44:45:69:ea:c7:98:06:6a:37:21:b1:ba:0b:
32:07:a2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:16 2026 by rpki-client