Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
File: 3IiUXIhnpyYro3mzpphACRpPGQQ.mft (raw, json)
Hash identifier: 5iMaBqjFIuDfEW1xFp4C+qDGzrEx5iUD9hgCh1mhhpE=
Subject key identifier: ED:61:75:96:D7:89:F0:F3:1E:BE:25:B9:54:30:71:D5:32:03:73:A8
Authority key identifier: DC:88:94:5C:88:67:A7:26:2B:A3:79:B3:A6:98:40:09:1A:4F:19:04
Certificate issuer: /CN=dc88945c8867a7262ba379b3a69840091a4f1904
Certificate serial: 01A0CC6BBFECAE2ABC74F0AE562A36BC78C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
Manifest number: 0E3B
Signing time: Wed 23 Sep 2026 04:00:08 +0000
Manifest this update: Wed 23 Sep 2026 04:00:08 +0000
Manifest next update: Thu 24 Sep 2026 04:00:08 +0000
Files and hashes: 1: 3IiUXIhnpyYro3mzpphACRpPGQQ.crl (hash: +wanDPm6QQ5PxzZZyty+s2Ecx1sKaypz5s4ZHL3cESE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6b:bf:ec:ae:2a:bc:74:f0:ae:56:2a:36:bc:78:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc88945c8867a7262ba379b3a69840091a4f1904
Validity
Not Before: Sep 23 04:00:08 2026 GMT
Not After : Sep 24 04:00:08 2026 GMT
Subject: CN=ed617596d789f0f31ebe25b9543071d5320373a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:08:40:86:ef:01:d6:59:46:70:b4:2e:36:93:
bc:2f:69:5f:e8:97:06:7c:a1:9e:48:9d:54:6a:56:
ca:d0:a3:3c:cb:fc:05:9d:86:f8:e6:0d:9e:10:01:
80:b7:41:59:a2:0b:ab:e9:c6:db:8d:cf:d1:bd:9f:
d2:02:68:82:cd:13:9c:b3:80:99:31:df:75:3e:f8:
b0:02:b9:d4:39:f3:c3:b6:bd:5d:fe:6d:fe:0f:75:
95:22:3e:d6:22:06:3f:f1:aa:5d:48:8b:d1:88:98:
e1:08:2a:a7:b2:b2:e3:7b:be:ae:97:98:9f:39:44:
97:a3:ee:8d:f4:5c:eb:a8:1b:07:bb:e6:b9:cf:11:
09:83:98:60:74:61:72:aa:62:d6:dc:8a:85:a9:09:
53:25:f8:95:35:ce:9a:21:e1:f5:17:e5:c5:e1:7c:
46:c4:da:97:e4:1d:54:de:49:05:ba:00:13:9e:d1:
6a:bd:76:2c:38:ee:56:6c:0f:54:22:ae:db:c1:59:
7d:2c:eb:09:2a:42:72:fc:14:0b:ec:39:3c:8e:20:
b5:04:71:7d:e0:5a:dd:1c:6b:97:ac:10:f8:02:09:
16:8a:39:56:a5:e7:56:8b:9b:60:81:4c:e7:0c:d3:
0c:05:4b:46:ce:63:83:ef:0c:28:c3:f8:a3:14:4b:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:61:75:96:D7:89:F0:F3:1E:BE:25:B9:54:30:71:D5:32:03:73:A8
X509v3 Authority Key Identifier:
keyid:DC:88:94:5C:88:67:A7:26:2B:A3:79:B3:A6:98:40:09:1A:4F:19:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ca:67:df:e0:da:b3:24:4e:c6:23:9f:ae:16:70:f4:c9:0f:
cb:cb:24:bc:6d:7d:2b:06:49:e0:ac:69:b6:5a:3c:d4:c3:7e:
ba:a4:a9:75:71:b7:0d:8f:5b:39:f3:06:c2:6b:e2:c6:19:d4:
d7:e7:9f:83:c6:0e:c9:b0:f2:cc:6b:8c:d2:1e:72:b6:01:fb:
4e:be:d2:82:95:82:85:29:15:aa:bb:0d:75:e8:3e:0e:b0:63:
df:06:ff:86:d2:57:d1:b9:1d:88:69:a1:17:53:bb:c1:c0:cf:
c0:40:91:12:75:f9:eb:9c:14:60:10:04:87:fa:dd:87:4e:ed:
25:8d:9a:36:5a:aa:65:6d:fc:19:94:78:fe:a9:44:7b:fb:f4:
85:a9:8c:08:23:59:78:0a:b9:28:0c:3a:a8:96:e5:37:76:05:
7d:9a:cf:25:24:f8:16:4d:b5:c7:5b:51:88:be:4a:28:dd:12:
21:15:9c:27:55:83:b0:14:6c:08:a6:f1:f3:5f:6f:eb:4d:2c:
d4:78:a8:d7:f0:c0:1f:16:1c:ef:fe:66:e4:e2:f0:0d:63:81:
18:01:3f:10:fb:e4:8d:79:e4:ed:20:e0:33:12:3b:c2:27:5f:
bb:21:dc:f7:b4:46:9f:52:b3:1e:32:99:36:8e:2d:66:19:8e:
6b:92:27:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:32:32 2026 by rpki-client