Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier: w1LO6GDQtjRYcwzfYEOFDb73Wqm6zgMUS6xvr2Lgwm0=
Subject key identifier: 37:70:08:D3:82:D0:F3:8B:61:8F:F3:4A:A2:E5:04:DE:5C:D7:25:FE
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial: 019EBE4777676C7C9841A339DCDCC9E4BBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number: 0C04
Signing time: Sat 13 Jun 2026 00:00:14 +0000
Manifest this update: Sat 13 Jun 2026 00:00:14 +0000
Manifest next update: Sun 14 Jun 2026 00:00:14 +0000
Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: binr5fpGPe48dxOV/R4slNb436/gbKYf6M1mOC21F4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:77:67:6c:7c:98:41:a3:39:dc:dc:c9:e4:bb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Validity
Not Before: Jun 13 00:00:14 2026 GMT
Not After : Jun 14 00:00:14 2026 GMT
Subject: CN=377008d382d0f38b618ff34aa2e504de5cd725fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:99:d5:a0:4c:57:be:08:f4:f2:be:ce:0e:67:
1c:6e:dd:4a:04:91:93:85:6e:b8:36:11:bd:df:40:
e5:a3:ed:2b:d3:6f:99:51:c2:bc:24:27:0a:95:26:
73:de:9a:ac:3e:72:7d:bd:9a:1e:c1:db:7f:d1:bb:
e3:bf:74:56:22:87:32:c9:7b:ee:e9:b6:e2:c5:aa:
83:6f:7b:6c:52:46:e1:d9:1b:59:d1:b1:99:29:df:
3b:ba:dc:a2:e6:ba:43:ec:cc:fd:ca:2d:80:f1:c9:
93:ba:e1:ce:17:94:68:69:93:57:95:bd:91:e8:63:
20:e4:a5:95:97:3a:3a:53:f7:ac:b7:c7:2f:aa:90:
98:ac:31:a6:81:a9:a6:c3:2b:c6:a4:fc:cf:c6:c5:
70:16:b9:35:6f:aa:90:d3:32:f2:be:6b:37:22:14:
c7:17:12:73:80:23:70:f6:a7:26:5b:d5:56:08:f9:
bf:9d:9c:e6:e5:91:9b:24:3e:0f:98:5e:74:21:4c:
be:63:76:19:0e:a9:1c:9b:76:70:a9:72:db:3c:78:
eb:07:9f:fe:71:43:c4:fd:69:85:e2:7d:4e:af:f6:
f9:e5:5e:0f:88:52:02:b1:ac:13:f7:e1:0c:54:c0:
f4:cc:7b:7b:81:0a:34:c6:f2:74:48:df:2b:3d:ef:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:70:08:D3:82:D0:F3:8B:61:8F:F3:4A:A2:E5:04:DE:5C:D7:25:FE
X509v3 Authority Key Identifier:
keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c6:06:7e:b0:9a:b5:59:81:99:17:47:b5:70:9f:47:46:70:
63:31:ab:fc:14:c2:54:7c:9f:06:72:7f:d1:a2:f7:fe:dd:d8:
19:87:d3:1a:5b:67:c2:68:6b:97:ab:8b:64:d9:78:9a:3c:6a:
1a:a3:cc:f4:70:43:e9:3c:78:b5:c5:ea:6e:24:a2:58:8b:5f:
e6:80:1f:a8:45:9a:61:70:09:74:90:ff:af:9d:ee:04:09:4e:
fc:b9:85:d9:c6:27:db:bb:d4:f3:b0:32:f6:74:31:27:5f:c1:
bb:0a:86:ca:99:50:10:42:77:f4:84:f2:2d:b9:32:e9:8f:96:
f4:12:5d:fe:e5:7b:b6:33:22:eb:70:de:f7:a5:55:2d:ac:2f:
9f:06:95:a6:ac:66:2e:ae:98:06:42:a1:38:3c:f7:77:e9:f0:
19:52:70:f8:0d:ce:e0:c4:cc:61:70:e4:c2:2a:25:82:b0:8d:
97:26:1e:8a:d0:ab:8d:cc:e0:4f:00:bb:fa:66:3a:9e:ca:b3:
77:e7:93:bf:95:cc:df:bf:52:07:22:a4:94:06:ce:6a:af:f2:
da:2e:2f:09:83:dd:ad:4c:ec:e2:00:1a:b4:c6:fc:69:1b:96:
cf:3c:c8:68:e3:3c:51:91:ea:65:1c:b1:bf:f8:91:ed:5b:1d:
15:a0:06:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:05:22 2026 by rpki-client