Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: 853ksIyJsZNn8dsQN+HuzgHkMNR61UcWpz27qlIRjmw=
Subject key identifier: 61:C9:90:65:31:6E:D8:95:B0:6C:5E:49:DF:B6:CE:1C:6C:AC:20:60
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 01A0C7464220F64F8F515E205B418A8A71C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 089C
Signing time: Tue 22 Sep 2026 04:01:05 +0000
Manifest this update: Tue 22 Sep 2026 04:01:05 +0000
Manifest next update: Wed 23 Sep 2026 04:01:05 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: Q8aq1P4hDz78SNu16NrOcuxDQcK/CCIFJTKHHegrwmc=)
2: HrUPMg6A27LayY1nzJVXakWil-8.roa (hash: 6oiaD9+R084Ie04PfQ9j94YYcX9VFnuvxlsXJPk70DA=)
3: LsW7E92fgqyb4h0SFoyQ1iS_A-A.roa (hash: lZdLHI5/Pom2chJvXWn7/eiTGrnfbJ5HoDaiu046MUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:42:20:f6:4f:8f:51:5e:20:5b:41:8a:8a:71:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Sep 22 04:01:05 2026 GMT
Not After : Sep 23 04:01:05 2026 GMT
Subject: CN=61c99065316ed895b06c5e49dfb6ce1c6cac2060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:ff:8a:e0:d0:c4:db:d4:51:fd:ac:f8:08:
14:f6:00:0b:b1:7d:9f:91:10:53:d6:7c:f8:11:21:
73:d1:96:fc:cd:79:cb:93:ad:ef:26:34:dd:ca:65:
e1:af:4f:07:97:28:cf:20:2b:a7:2f:9d:80:0b:10:
22:73:53:33:9e:4f:85:4c:28:b0:48:64:93:78:83:
bd:48:6a:35:0f:b9:e0:76:5c:17:18:9f:51:57:38:
11:94:af:0a:3b:dc:b2:85:05:52:0a:d5:b4:9a:df:
8d:0f:95:1f:f0:63:57:a9:67:69:06:f4:6d:73:29:
74:16:16:ac:6d:3b:40:a3:c8:14:2e:d8:8a:ae:f0:
8d:f4:fa:05:83:99:86:48:1e:ef:86:c3:f1:6e:54:
41:e0:7d:9a:4f:2b:11:a7:2d:1c:ad:ed:84:ed:e3:
8b:01:43:41:8e:e4:42:86:2d:bf:29:de:27:0a:67:
3c:b1:bc:ea:94:5f:0d:e4:03:ad:b0:45:76:bd:e0:
0d:41:3f:b4:ab:ae:8a:f4:09:a2:93:ad:be:15:db:
49:bb:e6:09:ab:57:ae:77:65:4d:f3:63:7b:c2:d3:
af:ad:b0:88:c8:bc:5b:59:e3:c2:b2:ff:89:89:74:
ad:69:66:80:72:c4:e6:0d:bd:49:86:e6:bf:17:be:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C9:90:65:31:6E:D8:95:B0:6C:5E:49:DF:B6:CE:1C:6C:AC:20:60
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2b:8b:f1:14:96:f4:73:d8:e3:8f:aa:2b:8e:c0:63:3d:f3:
9d:3c:ba:d7:d7:0b:01:57:7c:3d:72:93:51:c1:a3:3e:19:28:
1c:1e:65:c6:22:34:57:30:b5:3d:af:0e:6a:0e:b0:38:3d:02:
4c:c2:db:cc:81:74:e0:f9:a5:5b:1a:4f:39:24:02:14:0c:88:
14:22:41:6c:04:47:44:e0:d4:8f:fd:47:58:18:f9:74:d7:fd:
f9:6a:6f:d6:0d:71:2e:6d:80:da:29:90:ab:56:fb:a8:20:68:
95:7e:fc:d8:2d:67:98:0e:62:8d:6b:17:f3:d6:49:cf:3d:1d:
02:2f:71:4b:07:d8:04:68:26:c9:bf:f3:8a:0f:3b:20:53:69:
13:25:dc:4f:b1:0f:b5:e3:ef:25:d0:5c:fc:43:24:4f:7e:87:
77:99:cf:5f:6c:28:7d:61:88:db:80:8d:1e:11:62:7b:8a:49:
e4:b7:77:1e:de:f9:34:81:07:80:6f:9b:11:9b:93:e4:4b:3b:
77:91:45:b3:d2:9e:40:0d:6d:ef:c2:4f:33:ca:8f:d4:52:bd:
5a:9f:2f:37:90:53:f8:e0:26:bf:c2:d3:c9:14:76:76:fe:0f:
82:a9:66:9b:01:42:ac:fd:cc:8d:80:e5:0d:2b:02:81:62:62:
9d:fa:3d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:27:06 2026 by rpki-client