Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier: ThbIVe5mZ7LMWh0q/1dIEnhFvadhDCJSOWcQKypWpwU=
Subject key identifier: AF:EE:A2:95:5B:6F:1B:6F:6B:D7:B8:A3:C9:17:89:10:92:B0:24:91
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial: 01A0C17AD5C03D67AC36EFB374C420841C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number: 0665
Signing time: Mon 21 Sep 2026 01:00:47 +0000
Manifest this update: Mon 21 Sep 2026 01:00:47 +0000
Manifest next update: Tue 22 Sep 2026 01:00:47 +0000
Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: AsH3PSM+3dUC0XJM3LA/22u8CHN0eexVQNaHJu0kO7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:d5:c0:3d:67:ac:36:ef:b3:74:c4:20:84:1c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Validity
Not Before: Sep 21 01:00:47 2026 GMT
Not After : Sep 22 01:00:47 2026 GMT
Subject: CN=afeea2955b6f1b6f6bd7b8a3c917891092b02491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:27:09:94:6c:55:54:11:71:63:12:b3:59:
34:fc:3e:73:b1:da:5f:a0:74:1c:59:ba:1a:e6:a0:
c6:c6:15:80:42:d8:ca:63:4c:94:8f:74:d4:8b:e4:
08:07:be:11:85:4f:9e:a6:ac:60:79:01:d6:91:38:
e7:8d:19:46:bf:87:68:e1:28:55:f2:bf:c8:d3:32:
77:3d:cb:5f:35:f0:5c:3e:de:a6:38:8d:85:9d:3e:
91:b6:17:12:b0:ad:82:1e:98:13:fc:34:7a:53:aa:
5e:bc:6d:3f:37:11:ae:9c:61:e1:dd:1e:bf:36:80:
d2:a3:ba:df:5a:e4:cb:46:52:e5:0d:12:c8:e3:ce:
b9:d9:50:40:bc:c0:78:c3:50:a1:69:e5:38:a7:65:
cc:1c:d3:db:a1:a7:01:dc:0f:10:2a:0e:49:89:ed:
d1:c3:5a:7b:4c:67:6c:ac:d8:ec:3e:a1:e7:e5:bc:
b7:e7:7a:85:9b:d5:1a:fe:57:6a:63:45:3b:09:39:
01:4a:47:fa:e5:8d:dc:23:76:66:3c:55:95:c3:a8:
74:7e:2f:f1:6b:36:a9:96:ae:0b:d2:6c:4c:46:4d:
a3:45:6e:99:a9:d3:a8:9d:8e:d4:3e:9f:ab:80:39:
5f:55:5e:22:9c:19:1c:11:2d:0c:67:2c:e5:1c:55:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EE:A2:95:5B:6F:1B:6F:6B:D7:B8:A3:C9:17:89:10:92:B0:24:91
X509v3 Authority Key Identifier:
keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c8:66:45:27:65:43:27:d1:57:07:1b:4d:43:39:47:d2:55:
43:c2:6a:f3:fd:be:c5:02:41:02:f5:8f:24:ec:ab:64:35:43:
70:d1:6d:65:97:38:a9:c8:bc:83:f7:67:b7:1c:69:67:c5:14:
9b:62:50:7e:7c:43:e0:63:1d:43:8c:1a:90:f5:e6:00:da:e7:
63:a9:24:cc:63:81:b9:5e:99:12:85:af:45:27:0b:05:15:84:
ed:a5:06:0f:f3:c9:31:6c:54:56:14:ca:0e:70:54:fa:8e:09:
77:22:ec:1f:d2:a0:8b:4a:5e:3c:b8:e0:cb:7c:df:ef:df:13:
33:0c:00:61:c7:cc:d9:c7:e2:ba:fc:50:33:2a:7d:df:52:23:
95:34:44:8f:56:05:88:cf:b0:97:80:77:a4:10:5a:da:2e:1b:
60:87:bd:bd:60:f6:80:b6:79:4e:93:34:40:e9:86:97:88:6e:
bb:5a:82:ff:ed:fc:45:14:23:3b:ef:17:60:82:79:22:77:4d:
5c:76:aa:fc:13:6d:5a:f0:70:04:43:61:f8:e3:94:53:6a:5c:
ac:53:d4:fc:78:84:5e:0a:ea:19:10:80:c1:9c:74:1c:1b:1a:
0a:ac:d9:58:af:f8:5c:2a:df:aa:0f:70:78:3b:c7:a1:28:5d:
b5:fa:39:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:17:59 2026 by rpki-client