Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: 1IrOlgrbd/hsu867msVSnawEBihBsDvy64YH+/TD5F8=
Subject key identifier: 79:18:EC:1B:E7:A9:96:BF:9E:A0:A6:B2:15:88:E6:D9:4B:E2:B3:E4
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 01A14C1988F75ECF3C1409219C36DE7DAD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 118B
Signing time: Sat 17 Oct 2026 23:01:44 +0000
Manifest this update: Sat 17 Oct 2026 23:01:44 +0000
Manifest next update: Sun 18 Oct 2026 23:01:44 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: iJsY+xccW7AAV5wR5wn0yoQMm3R9KHuTtiLWlirrK+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:19:88:f7:5e:cf:3c:14:09:21:9c:36:de:7d:ad:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Oct 17 23:01:44 2026 GMT
Not After : Oct 18 23:01:44 2026 GMT
Subject: CN=7918ec1be7a996bf9ea0a6b21588e6d94be2b3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:3f:00:0b:bf:19:27:35:7b:07:f5:0e:0c:
e5:cc:1a:f3:c8:a3:a6:ca:62:86:09:34:33:1d:31:
94:da:53:e0:f5:ec:4f:ae:3d:d4:f3:23:18:51:e6:
43:32:1d:8b:0f:73:88:af:e7:c0:b9:be:c5:38:25:
5c:d9:ca:99:ef:09:c0:83:55:1e:28:71:5f:bf:e5:
a7:a1:b3:b6:2d:5b:fb:4b:1b:89:23:7f:7b:10:e7:
2f:c7:e3:93:aa:b5:69:03:e5:98:db:b0:3d:9f:04:
f8:9d:d2:6d:be:06:e4:70:d9:26:0e:d6:24:ea:b1:
a4:93:fd:31:d1:21:6b:5b:58:99:cf:88:3d:cb:ee:
dc:a8:ba:43:36:46:5d:3b:5c:1c:54:7d:c9:ec:d3:
e5:8b:5a:51:ae:d8:f7:f5:37:c3:dd:ca:ba:16:19:
6b:ee:12:37:5c:21:80:67:ff:73:2f:82:38:08:a9:
16:c7:eb:3c:c8:78:91:28:e7:c8:3a:36:73:11:8e:
41:28:78:98:9c:86:08:a6:26:a6:bd:62:87:3b:ec:
fb:60:15:c3:70:bb:04:3f:cf:eb:75:51:b0:29:e8:
0a:b4:e8:0e:1c:06:6a:0c:dc:1a:73:04:0b:49:90:
45:22:e2:88:a1:c9:1c:a2:eb:05:58:2b:a3:a3:ed:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:18:EC:1B:E7:A9:96:BF:9E:A0:A6:B2:15:88:E6:D9:4B:E2:B3:E4
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cb:cd:be:b7:12:49:2c:eb:83:a5:ec:80:98:92:8a:4d:a0:
36:b5:30:68:27:a9:ad:4c:7c:27:a0:3f:11:5b:2e:a9:2f:5b:
b4:2f:61:fc:c3:d5:fe:98:ca:10:96:6b:11:ee:96:71:f7:9a:
0c:c7:f1:be:0c:fe:63:2e:06:db:92:44:df:9e:dd:a0:2b:3d:
f7:9d:d0:3c:ba:e3:d1:bc:36:7e:a9:35:c8:2a:e5:42:68:4a:
ef:d6:13:34:70:2b:7e:44:7c:8d:7e:30:7e:ea:37:95:53:cf:
27:23:d1:de:95:66:5e:f6:a3:ba:09:b0:92:92:99:17:64:64:
b4:41:cc:18:9a:c1:05:10:77:5d:eb:05:c5:68:ab:26:fc:44:
31:e1:da:c8:9d:55:b1:e5:5b:f3:e6:61:53:9d:9e:30:31:7a:
31:ce:a7:d4:73:22:1d:c8:a5:49:f8:8f:cf:56:f9:72:cf:97:
71:fa:1f:e0:ab:ec:cd:ba:a7:6d:70:c7:f4:9b:d8:01:5c:81:
90:90:cf:3c:f4:3f:d5:a5:6b:af:3a:75:c1:21:03:f7:a3:19:
9f:22:03:4f:1c:da:4a:2d:ab:be:a6:9a:c6:1d:5a:65:fe:ef:
40:6c:a2:6e:0d:c4:3c:b7:90:a2:33:4c:a2:b7:d8:4a:10:50:
79:19:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 06:54:29 2026 by rpki-client