Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier: 0mRagf/gLUlS2sWcL2mVyMWUeU6IpynggdxMAlh+sxc=
Subject key identifier: 1B:22:D0:60:EA:46:FB:C7:9F:40:C2:8E:34:2F:45:84:FB:EB:62:97
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial: 01A0C3D72FB29F996967923EABC071C7644A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number: 0D10
Signing time: Mon 21 Sep 2026 12:00:54 +0000
Manifest this update: Mon 21 Sep 2026 12:00:54 +0000
Manifest next update: Tue 22 Sep 2026 12:00:54 +0000
Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: tf3axT6jg0uXiqEwn/0SidS69sLgt5FZ0V+v3Jfa1v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:2f:b2:9f:99:69:67:92:3e:ab:c0:71:c7:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Validity
Not Before: Sep 21 12:00:54 2026 GMT
Not After : Sep 22 12:00:54 2026 GMT
Subject: CN=1b22d060ea46fbc79f40c28e342f4584fbeb6297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:2a:c2:ac:2c:29:23:e1:54:11:34:a5:8e:
26:9f:cd:f9:bd:d8:69:d7:11:31:4c:12:7d:f3:7e:
5f:dd:f7:44:75:de:14:3f:cb:4d:fb:d7:38:bf:63:
c2:96:4f:be:7d:f5:a7:f9:b3:93:19:b8:6f:52:f9:
cb:20:01:94:40:af:5b:c2:e7:6d:47:1e:f7:fe:7b:
79:96:4c:05:20:37:99:c9:62:d5:30:c6:f6:79:ed:
e4:c6:c7:83:67:9d:c6:89:46:c1:fa:9f:b2:8a:1d:
f2:8e:19:3a:eb:12:ac:46:fd:29:a2:f0:f6:53:6f:
f1:4a:c9:e7:8c:bd:bf:dc:e4:23:86:03:a7:69:03:
56:02:6e:80:f0:db:23:3d:15:60:10:ba:bf:53:8f:
89:1b:cc:ee:f6:e7:a6:71:90:62:7d:02:b7:54:38:
f1:03:f1:0e:02:72:09:32:b7:f8:cd:d5:27:05:21:
ce:5d:c6:6c:77:b3:99:d5:bd:f3:1e:f1:9a:41:54:
5c:fa:67:19:c7:3b:bb:48:d8:5f:27:71:4e:ab:77:
64:8b:75:8e:41:bc:d4:a3:df:29:f0:25:80:26:1e:
57:c6:f7:80:f4:de:05:fd:4c:4d:99:3c:be:dc:e6:
c5:4c:bc:bc:9a:e3:75:fd:b9:10:dd:bb:a0:18:a6:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:22:D0:60:EA:46:FB:C7:9F:40:C2:8E:34:2F:45:84:FB:EB:62:97
X509v3 Authority Key Identifier:
keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b1:a4:8c:4e:cd:62:79:ee:07:2b:7f:b4:cd:23:7f:4e:06:
11:c3:2a:ac:4d:ef:a0:0b:43:73:4c:59:60:fd:82:7d:ae:34:
fc:fe:2d:04:59:c4:75:8c:62:44:0d:d1:d5:c3:e4:e7:da:d5:
c4:57:13:0c:4b:bb:9f:d8:ae:36:1d:8d:3c:be:6a:81:16:05:
09:40:ee:0d:da:f9:35:13:8f:df:5b:57:84:ad:6b:19:f0:07:
20:1a:50:84:52:ac:fe:9e:03:a7:5f:be:62:84:0b:e1:49:0b:
7e:6d:59:be:20:c3:7c:0a:77:74:6e:92:91:16:b4:20:8f:27:
9b:9e:66:01:ab:86:03:b6:d7:73:29:1a:f0:90:35:0c:45:eb:
59:55:15:57:c1:c6:cc:cb:7d:1c:67:7b:1f:04:1b:e3:80:b8:
35:e5:67:c7:e0:4b:ca:0e:91:02:ac:63:43:a5:b3:31:0e:40:
7d:c5:bf:a9:f3:30:dc:2f:db:65:be:63:73:34:d6:63:b1:2a:
45:18:0e:27:57:dd:0c:7c:9b:2c:1c:64:4f:f6:80:c5:bc:1a:
2d:0f:66:7d:e9:78:c8:69:e6:67:43:17:73:84:ce:b4:9c:02:
80:83:7f:c2:e5:a4:29:fa:0e:91:29:88:2e:2f:22:51:e3:68:
be:e0:be:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:01:27 2026 by rpki-client