Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: Ul+qDcbksXTYTt/UKNjNwzgiGZ4hxHpwCDN3lU0obNM=
Subject key identifier: 65:02:88:B6:9A:4B:72:EF:6A:75:06:56:1D:37:E8:36:09:64:94:99
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 01A0C2C46B2C644A87232E03F219BF329B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 165C
Signing time: Mon 21 Sep 2026 07:00:47 +0000
Manifest this update: Mon 21 Sep 2026 07:00:47 +0000
Manifest next update: Tue 22 Sep 2026 07:00:47 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: GNKoV/u/yeQAdlfdC5BA092YHbjqABzsR5k+Wc/DJbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:6b:2c:64:4a:87:23:2e:03:f2:19:bf:32:9b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Sep 21 07:00:47 2026 GMT
Not After : Sep 22 07:00:47 2026 GMT
Subject: CN=650288b69a4b72ef6a7506561d37e83609649499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:d9:5d:d7:cd:07:39:75:9f:9b:33:df:b6:
b7:e6:3c:8c:1c:81:bf:9d:b4:32:8d:d8:99:fd:c1:
e0:cd:e2:50:f1:e5:ed:88:4a:fe:46:59:14:19:63:
d8:6b:3c:e6:3a:15:cb:59:cf:1b:7e:ca:0f:b3:78:
1a:35:1c:8e:02:74:2b:cc:ef:1e:37:fd:a2:7b:9a:
ac:01:8d:dc:86:96:62:b4:7b:71:2a:bf:ba:ab:af:
3b:97:20:5f:b9:5f:91:53:be:26:6f:f8:29:a1:51:
bd:cc:3c:43:32:d5:dd:6b:e9:ff:b5:76:3b:7f:3f:
4d:f8:da:22:d8:f2:b1:0a:6e:12:cb:b2:30:21:bd:
fd:2f:05:1b:ad:d1:b5:bf:99:a0:bc:f2:66:a6:b1:
36:17:2f:42:17:18:55:d3:16:53:4b:66:00:1c:f1:
59:ff:0b:6f:d8:61:a9:21:63:01:11:9b:66:3d:ef:
36:cb:51:96:df:eb:10:ac:57:e3:54:a6:76:48:02:
80:d8:3a:e0:85:41:83:51:78:62:4b:3a:ec:dd:bf:
4d:a0:f4:ed:33:cb:c8:d1:46:99:3c:ee:df:64:fd:
26:bc:0c:47:3a:ea:c8:1c:6f:fe:41:44:3f:e8:db:
01:08:94:a2:6e:ee:65:6e:c2:14:73:eb:ba:be:c1:
c1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:02:88:B6:9A:4B:72:EF:6A:75:06:56:1D:37:E8:36:09:64:94:99
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:06:36:c2:a3:2b:4e:8a:29:d7:09:1c:e1:83:f2:07:8b:7c:
53:a6:29:be:e1:9c:1f:9d:a8:4c:27:86:92:ff:04:ac:9d:42:
04:09:10:80:06:6a:6a:49:52:d3:86:e6:4a:0b:01:34:b4:b6:
ae:cd:9b:6c:16:61:7a:4e:60:97:b3:4f:3c:aa:ec:f6:31:1d:
12:cc:ec:be:d3:87:be:83:ae:73:e0:f0:44:4f:93:09:c2:fe:
a8:c5:e0:6e:8f:8e:b4:c0:24:04:43:9f:f4:da:04:4a:a4:a7:
ce:6f:6f:f0:92:c4:1b:e2:27:e5:07:27:5b:1a:b9:09:ff:a0:
0c:77:3a:58:11:e1:76:37:c9:bb:55:44:e9:1a:57:92:37:9e:
14:82:b9:57:3f:f7:f0:ea:57:79:df:6b:90:f7:3d:b7:22:40:
b5:b7:68:19:fb:be:f6:82:0c:11:48:2c:b4:86:0f:7a:55:20:
01:5a:eb:b0:a9:dc:c8:e3:9f:21:b5:b9:02:dd:58:0c:75:fd:
ec:8c:94:96:c6:dc:0b:b3:ae:c5:37:65:53:d2:c8:39:72:5c:
24:61:a1:9c:33:0d:94:3a:82:13:d9:86:2d:ba:38:1d:1f:af:
7b:0e:e7:bc:f8:57:fd:08:12:4d:1d:25:50:34:14:ab:a5:b4:
a3:7a:51:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:29:59 2026 by rpki-client