
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: sP0fIUTsWSrOpKbA3dbGdT7TNyEAbOAV7YqGjGXtF9c=
Subject key identifier: E9:0E:D4:72:7E:77:C8:EA:35:52:83:A3:76:85:4C:40:6C:D5:3F:2D
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 01A0C9D894E2D50B3CFCAA53837A3B30727E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 114D
Signing time: Tue 22 Sep 2026 16:00:09 +0000
Manifest this update: Tue 22 Sep 2026 16:00:09 +0000
Manifest next update: Wed 23 Sep 2026 16:00:09 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: iargnvwL1Ia99luj5Jcr4kKI7eAMq8FtpJpuD3Z+C08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:94:e2:d5:0b:3c:fc:aa:53:83:7a:3b:30:72:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Sep 22 16:00:09 2026 GMT
Not After : Sep 23 16:00:09 2026 GMT
Subject: CN=e90ed4727e77c8ea355283a376854c406cd53f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:1d:92:46:b1:10:0a:ee:53:93:16:94:db:
26:97:ea:c0:45:70:11:3b:73:54:46:e8:64:10:05:
99:1c:8b:86:a4:4d:c3:ff:40:fc:aa:97:24:42:c4:
42:e8:e4:a3:c2:e9:5b:e0:1d:65:a4:e1:ae:ef:26:
74:7a:fd:e6:3f:b2:ed:d7:be:d4:7e:77:c5:7e:ef:
af:2f:fd:41:3f:75:94:c1:c8:93:ed:ca:49:73:06:
aa:1d:17:4c:7f:ac:02:8c:6b:43:3a:d3:28:73:f5:
ee:a4:00:c1:c2:c2:82:51:49:9d:ce:6d:49:b8:2d:
42:7f:2e:34:f0:47:d6:52:5c:5b:44:c1:76:ce:6a:
ef:48:87:d8:2a:23:c4:59:94:c8:16:40:b8:1d:1b:
a2:14:aa:2a:c1:b0:8f:ee:94:1c:9b:0b:94:4c:79:
db:4f:78:39:db:b6:1b:48:c9:75:23:76:2f:c9:d4:
76:6c:18:c4:2e:f8:16:f2:89:92:25:66:81:52:78:
8c:74:40:af:0a:30:e0:5c:31:98:b8:c8:cb:81:5a:
35:1f:1d:51:a4:de:86:6c:b3:bf:72:e2:46:e4:6f:
c1:69:b9:7d:19:51:bd:38:e0:be:f9:6a:27:52:f2:
b6:ae:85:0f:61:04:1b:63:02:95:51:b0:92:fd:d2:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0E:D4:72:7E:77:C8:EA:35:52:83:A3:76:85:4C:40:6C:D5:3F:2D
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e2:a2:4d:d8:f0:93:37:26:5e:3b:8f:cc:c6:82:35:cc:2f:
a4:f1:27:6f:92:ab:e2:66:df:97:83:62:f5:70:d1:59:fe:2e:
ef:90:65:16:2d:63:7a:e9:ef:00:10:f6:87:5b:09:2b:ed:ec:
04:f2:fa:21:30:b0:ae:cb:bb:c3:3b:07:3d:33:d1:f3:54:a8:
fd:73:3f:1f:5c:c8:5e:1f:a8:1b:29:8d:71:0c:c2:d3:a0:4f:
bf:96:8c:40:4a:79:c0:ce:cf:a3:ca:c1:98:08:4d:e7:2a:66:
07:31:bc:99:b8:cb:9d:34:13:55:f1:77:47:98:44:8a:4f:fd:
33:00:35:ab:fb:9f:11:00:de:dc:91:8d:ed:5e:47:e0:de:da:
04:73:c6:71:80:f7:93:ee:85:74:46:0f:84:2f:bc:69:63:d2:
e3:67:0e:26:2b:59:f4:41:06:fd:bb:39:2b:6b:15:fd:06:4b:
bf:27:b8:f9:53:4d:89:0c:f3:76:f4:8e:5b:c5:2d:54:1a:d2:
e2:b9:f5:6e:18:3d:b2:bd:ae:af:6f:21:91:6b:f9:45:96:c5:
5a:ab:8c:07:dd:aa:c0:d1:3e:3f:59:0f:d2:af:0d:4c:40:e5:
4b:fa:21:56:c6:de:8a:28:99:b2:62:e1:fa:c6:7d:f2:4e:04:
ff:65:25:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:21:22 2026 by rpki-client