Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
File: 3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft (raw, json)
Hash identifier: HlicY0CQ/N+Q+/wkXYgKy6iW6As/nohskzTluz5TSxc=
Subject key identifier: 53:97:8E:67:32:6F:34:AA:5C:14:8B:07:A8:B0:5B:83:92:96:41:1C
Authority key identifier: DC:75:85:2E:B3:D5:F4:BF:A7:E4:4E:80:EE:A9:88:19:86:40:3C:D4
Certificate issuer: /CN=dc75852eb3d5f4bfa7e44e80eea9881986403cd4
Certificate serial: 01A0C40E77C1B24F7F290F4236BD07BEF8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
Manifest number: 1157
Signing time: Mon 21 Sep 2026 13:01:17 +0000
Manifest this update: Mon 21 Sep 2026 13:01:17 +0000
Manifest next update: Tue 22 Sep 2026 13:01:17 +0000
Files and hashes: 1: 3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl (hash: TbxlipSW9K0JKYONK1Td6lmhLheH4EGnkPrx+qSLtxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:77:c1:b2:4f:7f:29:0f:42:36:bd:07:be:f8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc75852eb3d5f4bfa7e44e80eea9881986403cd4
Validity
Not Before: Sep 21 13:01:17 2026 GMT
Not After : Sep 22 13:01:17 2026 GMT
Subject: CN=53978e67326f34aa5c148b07a8b05b839296411c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:4e:24:18:3f:d2:ca:c2:45:27:fe:42:f8:
3d:f3:8a:2a:c3:85:6b:2a:8d:41:43:3c:39:1c:71:
29:ea:f5:54:a2:5c:93:7d:8e:20:a9:56:49:c7:52:
5a:10:fe:a9:b7:d1:bf:4e:5a:82:8d:2a:2b:97:a4:
e6:5f:39:2f:73:59:68:15:96:de:c1:47:e7:c0:cb:
78:77:3c:31:22:b7:2f:a8:2d:2a:7e:6c:f2:92:03:
25:d4:60:44:70:63:09:5b:aa:75:39:7e:af:b0:cc:
1b:38:a8:1b:87:36:24:04:f0:1d:ff:b4:60:0d:f0:
8c:a6:e7:5f:24:d9:0a:ab:7d:f8:aa:25:a3:44:0a:
59:ab:9d:d5:4b:df:90:73:07:be:bc:88:15:0b:61:
3b:26:46:34:8c:f7:04:0e:85:e1:e7:be:2e:71:8d:
ac:3b:f4:ef:c0:7b:7c:d1:34:69:78:a5:0f:8b:00:
53:82:a4:71:41:23:d4:26:d3:d4:02:d9:13:ce:71:
9e:5d:31:f6:6f:0d:cf:50:e7:36:fd:f0:92:1d:d7:
b6:85:03:eb:ad:15:5e:9e:6b:56:aa:6f:85:22:cf:
c1:cb:18:9e:7a:62:bd:48:6a:e1:5b:9e:4a:d0:34:
c1:58:7d:a1:06:51:62:67:15:05:d2:3c:1a:d1:54:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:97:8E:67:32:6F:34:AA:5C:14:8B:07:A8:B0:5B:83:92:96:41:1C
X509v3 Authority Key Identifier:
keyid:DC:75:85:2E:B3:D5:F4:BF:A7:E4:4E:80:EE:A9:88:19:86:40:3C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2a:f6:13:2e:1f:6d:2e:52:08:d4:53:b5:2a:27:a1:eb:ca:
90:22:4d:54:54:40:96:91:81:c5:58:66:01:89:aa:4e:75:e3:
c8:a0:93:fb:ed:ca:b0:0a:50:14:77:e2:b8:56:7c:66:32:4b:
4b:6b:ab:0c:fc:3a:cb:70:b9:7b:6b:fb:b7:0c:58:bd:ed:f3:
fe:48:b3:13:8c:3b:de:16:6a:ce:42:b3:cf:3a:a8:b6:f7:ca:
b2:9a:42:c6:4a:df:e6:cd:35:8f:74:16:f4:cb:1d:b4:88:f7:
7f:5e:ea:7a:a2:6a:e0:69:63:ae:cb:e9:4f:9a:b7:02:b4:ad:
85:ce:45:09:85:2a:ca:32:1b:10:1f:04:62:bd:7a:c0:25:b7:
14:4d:ab:7e:94:38:a2:7e:3f:b8:4c:18:13:a6:92:97:51:b6:
f9:2c:ce:85:ff:df:3f:cc:da:4b:e7:51:30:37:21:89:d3:6b:
37:69:04:60:60:93:ca:ef:10:61:4e:e2:eb:41:35:33:4f:97:
80:04:cf:40:0c:10:a6:41:54:b1:5e:e6:51:be:eb:01:35:58:
42:fc:04:75:dc:25:fb:86:48:46:f8:fd:8a:13:a0:5f:7c:3d:
e4:c6:c9:44:0b:fb:96:37:85:76:27:8a:5a:0b:5a:58:d2:94:
e0:f5:f7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:21 2026 by rpki-client