Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier: Cus9RD3AXXM0aBGxwUrg1zLd/7+oqFwtJHdKds2gMZE=
Subject key identifier: 4A:B0:B9:02:F1:4C:7F:F0:69:9D:60:D6:5E:CC:20:F3:C0:C7:A0:12
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial: 01A0E475AFDC54FABDAB203A4C6AF1570DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number: 1186
Signing time: Sun 27 Sep 2026 20:01:53 +0000
Manifest this update: Sun 27 Sep 2026 20:01:53 +0000
Manifest next update: Mon 28 Sep 2026 20:01:53 +0000
Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: CELjq1SXmzSFXw5mOtYEuQxEjmTnpqLe8cU6V1JFg58=)
2: KdEq-OeVxvI5CqMaBlN9K8-QwE0.asa (hash: bM3X6ryr93DZAzA3CFAR2S/fr/RWSQdRtJYrZgQf3n0=)
3: MJozjNqLnPQyzg6RwUr67wJnDj0.roa (hash: GrVcVPg8QNDGergH76PpUDqLKrseVEoNPTuvrqjQXRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:75:af:dc:54:fa:bd:ab:20:3a:4c:6a:f1:57:0d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Validity
Not Before: Sep 27 20:01:53 2026 GMT
Not After : Sep 28 20:01:53 2026 GMT
Subject: CN=4ab0b902f14c7ff0699d60d65ecc20f3c0c7a012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:d0:6f:e4:07:8a:56:bf:b7:ae:5e:20:f1:
bf:e0:e8:9c:19:28:59:4b:5b:df:47:35:bd:77:3d:
96:83:c3:c0:f9:f5:7c:19:9a:0d:74:cd:cc:a8:97:
17:cc:f5:97:0b:2a:d1:41:e1:a4:75:9b:8a:d3:b0:
92:3a:e7:ba:06:ca:16:e3:cc:0d:3c:85:b5:75:d1:
d9:78:c5:10:ec:8b:8b:95:ac:ee:48:e5:7d:f2:8e:
a5:2f:f8:e1:fa:c7:b1:1d:d3:6a:ad:3c:ab:d3:ea:
b6:ab:fb:e4:0e:72:c7:c6:ad:b5:46:14:3c:2d:90:
9f:31:2c:52:a2:4b:c3:87:e3:9e:43:b0:aa:0a:ee:
2e:e8:54:3b:b3:66:66:49:f2:d1:4e:9f:03:ea:03:
71:9c:a1:37:02:27:0c:2a:db:38:d3:c0:3b:23:26:
53:60:fc:e6:f4:38:f1:eb:00:b7:10:a3:c0:8e:4c:
c3:59:6a:59:ea:f6:f6:45:f8:30:32:1e:ff:a5:b9:
7e:00:f6:e1:63:de:96:3b:db:b8:e8:4b:3b:9a:01:
c6:99:3c:e8:6d:14:77:f6:77:0f:c9:d4:03:52:d6:
2c:10:b8:32:48:48:cc:90:4f:f8:37:5a:f6:8f:2f:
36:a6:c1:cb:7c:38:e2:6f:f6:02:51:ce:83:5f:21:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B0:B9:02:F1:4C:7F:F0:69:9D:60:D6:5E:CC:20:F3:C0:C7:A0:12
X509v3 Authority Key Identifier:
keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:81:b3:6d:a7:07:b9:33:6b:bb:13:98:41:14:33:7f:6c:51:
7d:5c:8c:91:27:2e:39:cd:79:94:ef:70:e4:ef:21:93:34:88:
d4:b5:4c:86:31:58:f3:37:5b:15:8d:38:72:5c:57:3f:b2:2e:
0c:7d:f9:0c:2c:aa:f3:7e:89:1c:60:5d:60:d8:03:d7:c2:a1:
86:67:c0:3a:b7:16:a3:57:0d:7a:e1:b8:24:a8:3d:ae:98:cd:
c8:0d:e0:2d:2e:2e:7d:d1:6d:6b:13:23:24:a4:29:9e:8b:23:
80:ba:8a:41:08:20:2a:7e:d7:a0:1f:17:e7:db:39:0c:49:fe:
18:68:d8:c9:ef:fd:bd:da:59:e6:56:51:08:1e:be:83:45:cf:
26:a3:b3:05:ac:7e:a9:0d:3b:15:a6:18:bc:d2:b2:27:a1:2a:
73:18:5b:0d:47:dc:c5:f0:21:0f:3a:dd:c8:96:25:9f:6a:bb:
42:e9:a0:a0:51:56:c3:5d:f2:39:55:d0:d1:51:33:07:35:4b:
69:4b:0f:cf:51:03:ee:51:5d:38:82:59:bf:d8:2e:28:dd:1e:
ad:e3:08:05:99:46:83:30:4c:1b:c9:d8:0f:45:92:b1:48:3e:
98:0e:4c:5b:78:98:10:7a:a5:42:5e:4b:f1:f4:45:1f:9e:6c:
1f:b4:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:05:21 2026 by rpki-client