Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
File: 3VShBsGZ81M-VritvPpLGsPmkJ8.mft (raw, json)
Hash identifier: 6hKnzcuu9eF6DBBTxIqex6PpE65L0YYuZLnSzrJuOjk=
Subject key identifier: 48:E5:1D:E7:55:54:A9:90:27:8C:20:FC:5F:E8:13:E4:5E:A8:37:78
Authority key identifier: DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F
Certificate issuer: /CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f
Certificate serial: 01A0E8C12808AB568E2DBD35BC80213853F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
Manifest number: 0D44
Signing time: Mon 28 Sep 2026 16:02:47 +0000
Manifest this update: Mon 28 Sep 2026 16:02:47 +0000
Manifest next update: Tue 29 Sep 2026 16:02:47 +0000
Files and hashes: 1: 3VShBsGZ81M-VritvPpLGsPmkJ8.crl (hash: 4tgW5LW1jamuCfXSvZNFVy0r4m6yhNEm4vBEEDagQDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c1:28:08:ab:56:8e:2d:bd:35:bc:80:21:38:53:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f
Validity
Not Before: Sep 28 16:02:47 2026 GMT
Not After : Sep 29 16:02:47 2026 GMT
Subject: CN=48e51de75554a990278c20fc5fe813e45ea83778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:51:2d:63:3d:3e:fa:e5:3a:bb:96:2c:55:
db:ae:8a:6e:38:45:6c:ad:0c:b4:a8:98:05:d8:67:
a2:cb:ca:e0:6a:ed:f9:51:7f:93:0c:1a:27:aa:95:
ec:d7:cc:74:de:a3:7e:20:68:2b:db:ac:65:59:e5:
5b:4b:3e:ae:dc:a7:61:10:35:b4:d8:df:b8:86:2a:
31:76:6e:a9:fc:fd:3c:90:f5:39:1e:d3:ed:30:cb:
ba:c9:ee:9e:0d:5c:d1:94:0a:21:ea:4e:14:5c:3a:
54:ac:b2:32:15:a6:16:ad:e9:cb:c4:80:20:6b:be:
a0:81:e7:b3:f1:0e:b9:2f:13:a2:dd:df:f6:33:a5:
ec:3d:a7:fc:7d:96:85:3f:d6:18:52:3c:53:10:e6:
51:74:3a:1d:63:b3:33:c5:dc:6b:08:54:a6:8c:df:
2a:68:1c:40:db:3c:df:15:33:3f:25:35:96:75:de:
b0:35:ae:26:9c:0e:74:b9:31:4a:2d:76:69:65:7a:
69:89:96:92:36:72:30:47:f7:fc:38:4e:68:68:65:
5c:dc:fe:26:7a:0b:ad:21:56:13:63:15:8a:d0:a9:
1b:fc:92:c0:12:3a:2e:d9:7e:b6:41:c1:94:ab:cf:
f2:95:e0:eb:11:8b:79:58:d2:c6:f4:a2:86:d5:32:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E5:1D:E7:55:54:A9:90:27:8C:20:FC:5F:E8:13:E4:5E:A8:37:78
X509v3 Authority Key Identifier:
keyid:DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2d:1c:b8:c9:7d:7f:39:78:6f:a2:2b:21:c2:36:f3:30:df:
aa:c7:94:58:6e:03:3a:cb:14:27:2a:b7:a9:b1:79:e3:25:84:
c8:35:dc:9d:0e:4b:7b:bd:34:dd:65:e8:e9:41:89:fd:7f:40:
7d:e0:d5:82:24:4e:9e:5f:fc:25:9e:48:fd:7c:b8:e5:f5:ae:
66:b9:20:03:fb:03:0f:15:17:7b:fb:a2:96:76:53:f5:ed:bd:
55:82:fc:0a:a6:f7:ae:2f:38:d9:64:3d:c4:15:27:6e:ab:0b:
ea:1f:7b:8a:42:72:d6:e9:ff:b1:54:6e:cc:b0:90:95:42:d8:
a6:30:e4:84:d8:09:01:c2:40:c1:49:f9:a8:4f:a4:f3:ec:8e:
cf:c4:73:37:ad:cb:2c:49:b7:59:b7:23:98:68:a8:9e:80:c1:
e9:a0:3d:67:42:c4:00:db:55:4c:88:d0:12:3a:c4:6c:3b:35:
6c:bf:76:be:79:b7:25:a1:5d:5e:f0:f0:b2:2d:42:cf:51:e1:
62:9c:25:9a:01:cd:91:07:5d:e8:20:12:83:f8:b3:97:9a:ad:
81:2f:6e:cc:c6:39:da:9b:65:34:ac:5a:c5:d7:91:af:1d:52:
18:9a:90:df:1d:db:81:6f:75:48:e2:ef:5c:de:38:84:20:1f:
a2:90:88:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:07:13 2026 by rpki-client