Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
File: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft (raw, json)
Hash identifier: xG1K22a549iaTYk029kLkGMunxLGB6QHTbV89knzbeE=
Subject key identifier: 9C:DE:D4:20:BB:67:32:50:C2:BC:10:41:8B:FF:08:45:85:F4:1C:2A
Authority key identifier: DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
Certificate issuer: /CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Certificate serial: 01A13A7FE70CC1A301CAA8A70B5ED969B08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
Manifest number: 0A0F
Signing time: Wed 14 Oct 2026 13:00:23 +0000
Manifest this update: Wed 14 Oct 2026 13:00:23 +0000
Manifest next update: Thu 15 Oct 2026 13:00:23 +0000
Files and hashes: 1: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl (hash: B0VV40BexjRKEuYpjMMkURqkIzvAAYhtCDVtjHNTO+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:7f:e7:0c:c1:a3:01:ca:a8:a7:0b:5e:d9:69:b0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Validity
Not Before: Oct 14 13:00:23 2026 GMT
Not After : Oct 15 13:00:23 2026 GMT
Subject: CN=9cded420bb673250c2bc10418bff084585f41c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:71:e0:30:d7:b3:10:a5:24:09:8b:9b:d0:
a6:41:25:41:73:30:a3:50:8c:0c:57:84:72:95:4d:
02:33:bd:7b:b0:66:1e:b9:c4:90:f5:d8:74:30:9b:
ff:a9:ab:25:1c:f4:fe:dd:2a:81:8c:62:3e:45:1b:
3e:4b:bc:cb:8c:17:b6:aa:f3:86:b9:ab:fc:bc:96:
ab:1d:09:7e:0d:43:5e:be:d4:5c:ea:3d:de:b6:8d:
12:20:9f:c1:a0:4d:33:a4:df:1c:0c:e2:35:53:27:
fa:a7:1d:a8:18:95:b9:ea:8d:05:b0:4c:2a:76:b6:
2f:73:0e:0c:37:bc:57:f2:c7:74:8d:90:cd:2b:96:
4d:7f:27:d6:41:93:2e:66:7c:bf:bf:b5:3c:b3:69:
ad:e0:86:a3:27:cb:18:96:ba:8f:7f:bb:09:72:c6:
fa:32:7f:8f:2b:c1:2b:a3:89:09:5a:06:d1:c4:92:
98:e8:74:39:95:8f:e3:f0:b3:c2:de:c5:a0:37:5d:
6f:4d:fd:5a:9a:7f:b6:e5:8e:6e:7d:f6:b6:73:29:
fc:40:ef:2e:9a:aa:50:8f:f5:d7:ea:3d:a4:7a:72:
7b:db:16:09:37:f1:46:e0:5f:5c:4d:80:ec:d1:b1:
fe:45:6b:51:4b:7f:0d:f9:ab:85:99:44:f1:bd:5c:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DE:D4:20:BB:67:32:50:C2:BC:10:41:8B:FF:08:45:85:F4:1C:2A
X509v3 Authority Key Identifier:
keyid:DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:57:51:97:24:f7:f3:d5:00:bf:55:8c:52:d3:df:ed:6c:35:
ca:a8:0c:9d:06:ff:89:62:de:92:92:5d:f9:ed:9d:a4:93:1b:
2a:a2:9c:9b:3e:25:c6:55:eb:ac:20:8a:c0:66:10:7c:d4:c6:
58:7b:89:5b:b8:33:5d:fe:2e:a3:f9:62:df:6b:9f:23:f4:8f:
c1:d3:3a:cb:c5:5c:5c:8f:55:2d:89:69:41:49:72:a1:a2:57:
0c:49:f5:ad:b9:b3:45:d9:55:8b:5f:d7:62:8d:30:60:81:8c:
a9:92:85:68:a8:4f:51:e1:6c:3e:9b:4f:f5:a3:3c:c0:f6:da:
d1:13:73:85:07:68:3c:24:89:d1:35:45:e1:87:3a:8c:9e:10:
64:22:10:15:d0:53:d3:37:93:0a:0d:66:ae:bd:53:d9:bc:64:
6f:70:71:5a:df:ba:8b:6e:59:e1:8c:f2:3e:bd:37:50:ed:e6:
ed:52:5f:17:24:0b:0c:15:19:55:b4:94:4e:36:cd:b6:dc:7b:
8e:b4:d9:22:56:b0:5e:96:7d:76:64:44:a1:55:25:bf:6b:4b:
6e:e8:e3:6d:05:e8:95:0f:c7:15:47:13:44:5f:95:8a:66:97:
66:90:3d:a5:d1:70:e6:a3:af:56:a1:d8:84:93:41:1e:94:38:
24:78:3a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:56:31 2026 by rpki-client