Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
File: 3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft (raw, json)
Hash identifier: kOk8O7gXNyU2Pggrr3zXbZMezBS/bq/V4iBkXdglRlo=
Subject key identifier: CD:DE:46:23:B6:33:BD:B3:1C:3C:92:7D:F7:06:ED:76:5E:F2:0C:74
Authority key identifier: DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3
Certificate issuer: /CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
Certificate serial: 01A0C40E6A887DF0F03454A658B7D73AA029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
Manifest number: 0B8B
Signing time: Mon 21 Sep 2026 13:01:13 +0000
Manifest this update: Mon 21 Sep 2026 13:01:13 +0000
Manifest next update: Tue 22 Sep 2026 13:01:13 +0000
Files and hashes: 1: 3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl (hash: VIqR0Y/B3TMnQsmqiDZj/llkR20k6St3D0Z/835VPDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:6a:88:7d:f0:f0:34:54:a6:58:b7:d7:3a:a0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
Validity
Not Before: Sep 21 13:01:13 2026 GMT
Not After : Sep 22 13:01:13 2026 GMT
Subject: CN=cdde4623b633bdb31c3c927df706ed765ef20c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:6b:89:41:82:5a:32:85:ac:d0:4f:a1:45:
1c:29:e5:03:50:2b:77:ba:49:2e:66:f7:5d:3b:21:
81:76:d0:2f:d0:45:46:c3:66:06:f0:6f:98:37:c8:
62:93:6e:3e:db:21:7f:85:4c:51:0a:38:0e:2d:ee:
ec:e1:22:b0:f9:b9:6d:01:9a:e0:5b:f9:2a:f2:11:
12:a1:b7:af:60:05:02:c0:ee:68:e8:11:02:6b:a2:
64:41:27:93:7d:51:22:0f:d4:f0:72:5f:c1:e3:b9:
89:d1:a7:dd:a6:05:72:2c:c4:df:87:a3:39:01:45:
89:87:9e:1e:af:bb:7b:cb:c5:b3:f6:88:8f:b2:38:
46:a1:ae:bc:bf:35:1f:e9:ea:3a:9c:35:3d:ce:3c:
0b:b9:99:58:2b:e3:74:31:93:05:d7:f0:be:cb:62:
05:ec:67:52:65:aa:ab:76:cd:97:a3:f9:80:42:7b:
ea:19:11:ab:eb:2a:9e:f7:a2:36:62:4b:25:a0:6a:
ce:5f:0b:dd:a2:64:f9:2f:22:42:8a:49:da:28:61:
d4:a5:d1:e5:f2:25:6e:09:fa:51:02:5b:20:ee:44:
20:13:67:64:b9:ea:1c:c4:85:f9:1f:f6:85:40:8c:
3f:50:f0:eb:cc:15:2f:a4:c0:a4:ff:66:52:68:68:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DE:46:23:B6:33:BD:B3:1C:3C:92:7D:F7:06:ED:76:5E:F2:0C:74
X509v3 Authority Key Identifier:
keyid:DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:df:b4:4f:af:f0:87:47:27:c5:08:17:b2:98:ab:26:e3:4f:
0a:e4:6e:1c:e0:ec:ac:7b:37:e6:6a:0d:bb:f2:a7:34:a2:bd:
9b:9d:96:4b:c2:dc:1c:3c:56:65:4e:1a:7d:6f:23:84:2c:cd:
2c:1f:b8:be:d5:68:f0:b7:2b:a4:0f:88:60:b9:c1:24:33:87:
57:e7:26:92:ef:fd:ef:96:0a:1c:07:67:55:20:72:53:64:10:
1a:ec:c2:71:0b:6d:dd:e8:e6:a4:71:04:70:e8:9c:35:89:b8:
5c:c5:9c:42:b2:68:22:a3:f5:e0:f3:95:a6:e5:be:63:19:95:
2c:8b:0c:a5:55:70:54:9f:15:52:66:a8:29:fc:e8:d1:01:51:
4d:74:9b:ad:75:1f:a3:fe:7b:fb:9a:7e:93:ed:d6:ff:de:e4:
24:b5:d3:fa:c1:b0:17:2f:56:d6:61:6a:86:87:19:94:bb:21:
27:7d:a1:4a:78:bd:9e:f3:89:6f:a8:70:ee:76:28:8d:b2:aa:
3f:af:aa:65:19:d4:43:6a:db:59:48:48:86:35:0e:7f:1a:f3:
75:ff:b6:61:1c:ac:1b:12:53:fb:f1:0a:02:5b:da:05:30:b0:
2d:d3:26:a1:f5:35:59:53:b6:22:84:fc:00:ad:bc:57:f3:a8:
2b:d6:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:25:30 2026 by rpki-client