Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier: dtmGexCl46GTAkumj1Lg5RR/AyLIxtpq5AVToE5d4r4=
Subject key identifier: 98:93:60:18:41:E8:14:C5:D1:FE:0D:A9:13:26:84:B1:F0:3E:EA:1C
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial: 01A0DEE0C6175EAD5BFA9837C79D21FC9460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number: 13D0
Signing time: Sat 26 Sep 2026 18:01:07 +0000
Manifest this update: Sat 26 Sep 2026 18:01:07 +0000
Manifest next update: Sun 27 Sep 2026 18:01:07 +0000
Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: pz3D3TY+JJEFtM+pfbI8qQ0Rr3RgdqtrPMTk7jkDO2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e0:c6:17:5e:ad:5b:fa:98:37:c7:9d:21:fc:94:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de122d172c13b15291e41f945681525826fef892
Validity
Not Before: Sep 26 18:01:07 2026 GMT
Not After : Sep 27 18:01:07 2026 GMT
Subject: CN=9893601841e814c5d1fe0da9132684b1f03eea1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:d9:d4:3d:03:d3:9d:47:34:31:b0:32:c5:
03:25:63:f0:22:b7:1c:f1:1c:0d:0f:88:67:d4:cb:
95:b2:3e:29:60:ac:c8:49:19:a3:f9:f6:45:33:44:
d0:e9:00:8b:26:af:a0:cd:53:f0:9d:e7:aa:a6:d0:
31:0e:11:7a:ce:a5:83:97:aa:d9:44:86:bd:44:b3:
66:56:54:fa:6c:2c:ef:a4:f5:b8:03:3e:a3:95:2c:
0a:f4:5e:61:eb:ef:3f:48:ab:a9:89:94:ea:18:68:
12:17:dd:5c:30:ac:cd:32:8f:63:39:a7:f8:48:15:
5d:4f:c8:2a:d2:bb:cb:74:74:50:e3:b8:85:fa:16:
f4:27:03:65:6a:41:35:b5:a0:00:9b:d3:26:9c:95:
a5:2b:18:9a:76:ae:3f:43:b1:9d:3b:4a:55:15:d4:
5c:69:c0:81:9b:9f:cd:8c:44:4d:4e:94:e5:6f:29:
cb:13:d9:2b:e0:c8:9e:85:6a:15:06:c3:b5:3d:bb:
b4:1c:fe:df:37:c8:70:04:a6:97:ea:26:f9:54:91:
35:f5:44:a1:5d:b2:c2:db:e6:c1:f9:e1:2c:13:dc:
45:2f:75:3b:7b:fa:a2:ca:9c:1e:0d:a6:98:d0:b9:
41:02:87:78:96:f7:70:9c:5f:38:46:0d:46:d3:05:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:93:60:18:41:E8:14:C5:D1:FE:0D:A9:13:26:84:B1:F0:3E:EA:1C
X509v3 Authority Key Identifier:
keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:08:bf:f3:4d:d8:a8:05:50:43:65:ec:4c:c2:8a:8e:f8:39:
6f:22:47:b2:03:56:be:4d:f4:d4:cf:4b:ea:88:ef:84:ba:2e:
c8:36:8f:a1:d4:4e:4f:05:f5:b7:70:16:93:51:a0:70:60:31:
f3:bc:55:98:57:b5:6f:90:05:22:a1:b1:1e:b8:0a:18:3b:2f:
bb:c4:0b:c0:28:96:9d:d4:c6:9b:5e:d6:4b:b4:6b:b4:0f:9a:
1d:66:e3:ff:63:86:f8:a6:a6:bd:83:e8:f3:bd:44:d0:25:d3:
b8:28:ae:35:7f:d3:66:93:7d:0e:b9:a1:53:7a:33:0b:59:f6:
55:64:28:d9:8c:5c:2a:74:d9:78:65:c2:56:17:14:42:72:59:
e4:c8:54:dd:e3:36:82:6b:a3:76:f5:c6:35:ef:05:21:93:aa:
89:d8:ba:65:c0:32:bd:c2:22:40:21:6c:fa:65:0e:51:08:3e:
c8:11:99:db:90:a4:6a:bc:c1:6e:e6:60:ba:85:75:a0:e7:76:
27:42:53:5e:0a:6b:ad:b3:d1:60:be:a7:31:de:4e:93:9f:90:
6e:86:99:28:e0:9e:4a:6d:e9:00:18:3b:5e:9f:32:a3:0b:9b:
94:23:d3:08:dd:9d:df:a7:8e:7a:04:7b:4e:83:7c:d1:8f:45:
e3:83:d7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:50:43 2026 by rpki-client