Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: pZWnKqXR+TvKR5n1QyqjrguzTtWBlG018yFHMvUAftE=
Subject key identifier: 05:D0:98:78:0F:FB:EC:9D:75:64:56:5E:D0:AF:E7:B9:80:42:6B:9A
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 01A0C28E2A84A9AD940274844998EE4F6DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 099B
Signing time: Mon 21 Sep 2026 06:01:31 +0000
Manifest this update: Mon 21 Sep 2026 06:01:31 +0000
Manifest next update: Tue 22 Sep 2026 06:01:31 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: PuEZwlFmaPMnp0cr4eEJbILjyHrh/VVe4rAelPIdedY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:2a:84:a9:ad:94:02:74:84:49:98:ee:4f:6d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Sep 21 06:01:31 2026 GMT
Not After : Sep 22 06:01:31 2026 GMT
Subject: CN=05d098780ffbec9d7564565ed0afe7b980426b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:c9:73:13:96:82:22:a7:1a:a3:0f:04:b1:
e9:4d:79:b3:cc:52:40:94:fb:c9:92:83:06:90:53:
63:ba:ea:33:4e:12:da:80:35:3f:82:c8:4d:7c:57:
ca:b2:5a:61:bc:35:bc:34:60:97:8c:7b:d3:9c:62:
38:27:15:13:23:ff:a6:97:cf:0a:a5:d2:28:77:32:
40:f8:fc:7c:a0:bd:b4:75:42:1e:f2:d0:89:59:c5:
e6:e4:1a:0e:bb:05:52:99:25:46:e8:1c:e8:58:ae:
fc:55:04:e2:a3:48:02:c3:6c:4b:7b:ea:e6:42:09:
20:f2:d0:ff:1a:fc:4c:2b:9e:95:a4:c4:95:25:4c:
b3:28:a5:d5:58:8a:55:64:57:e1:73:8c:8d:dd:58:
96:ef:03:62:73:87:02:9e:6b:d8:be:c9:47:fe:6a:
1c:fb:4e:4d:75:fb:26:95:43:7c:2c:0b:3a:89:68:
26:7f:0d:74:0f:73:6b:45:df:0e:d1:d3:b5:44:c7:
28:e6:fd:8f:ee:60:64:2e:32:ff:5c:e7:15:00:47:
f6:dc:d4:19:9f:ba:41:ba:59:d6:c3:40:b4:e4:a7:
30:82:60:b9:93:35:f5:d1:fe:d2:08:fa:56:2d:08:
ef:6c:8c:c0:ca:02:21:c6:76:5e:ff:04:06:0e:2d:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D0:98:78:0F:FB:EC:9D:75:64:56:5E:D0:AF:E7:B9:80:42:6B:9A
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:7a:18:4c:09:b5:2c:8d:96:eb:cb:61:6e:5a:4c:8d:3e:64:
6f:67:5d:3c:36:84:0f:f4:8a:c0:a7:3e:9c:dc:ee:d6:40:ee:
f8:87:ba:28:41:8a:5b:f5:58:fc:96:f1:d7:50:0f:6c:c9:51:
9f:31:b9:a3:69:ab:49:da:34:fd:a9:b9:1c:43:61:f1:a2:aa:
73:16:37:00:47:d9:af:8b:18:a6:c3:6a:70:98:9d:0d:82:70:
c7:81:97:73:07:df:71:77:08:72:5f:66:9c:44:7b:3e:27:67:
99:4d:16:a2:49:4b:d0:63:12:f4:bb:46:fa:2a:7e:9b:91:25:
fc:ef:09:f3:7d:30:d7:ae:b4:b8:2d:c4:09:0f:81:4b:da:01:
ea:f4:f5:56:6f:d1:fd:5c:86:95:a0:c4:a0:19:eb:c9:3b:cb:
ff:8c:f1:ba:c3:6d:72:d9:ac:8f:18:ef:6f:03:37:06:d8:9e:
a8:77:97:f8:5c:76:e3:33:7e:fc:67:75:c1:51:90:a0:84:ed:
04:dc:ce:c5:e1:d7:aa:0a:36:46:9a:2f:3f:da:3c:54:41:24:
7a:ac:57:a6:30:04:6b:5e:8e:78:f1:40:1b:39:4a:8e:f5:81:
5a:e2:be:d9:e6:f4:27:c8:cf:92:6f:38:c0:d0:6b:11:f5:0f:
57:0e:b7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:23:03 2026 by rpki-client