Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
File: 3kK6kvCUZ8GIi16eNEiVB0SweYE.mft (raw, json)
Hash identifier: Yo3jE+FZxP7jhvvtCNIpBwKwtLUIrfQnUuWW7Vi3FgE=
Subject key identifier: 74:EC:74:80:41:26:9A:00:50:0D:E8:7E:84:7A:09:F5:D2:B0:47:3B
Authority key identifier: DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
Certificate issuer: /CN=de42ba92f09467c1888b5e9e3448950744b07981
Certificate serial: 01A0C40DD20EF5F75B368F5BA36C40BE1714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
Manifest number: 14D4
Signing time: Mon 21 Sep 2026 13:00:35 +0000
Manifest this update: Mon 21 Sep 2026 13:00:35 +0000
Manifest next update: Tue 22 Sep 2026 13:00:35 +0000
Files and hashes: 1: 3kK6kvCUZ8GIi16eNEiVB0SweYE.crl (hash: J325nlQzmZPVqH3XhMyjvHtwFbkKQv6urSCKSlKPb/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:d2:0e:f5:f7:5b:36:8f:5b:a3:6c:40:be:17:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de42ba92f09467c1888b5e9e3448950744b07981
Validity
Not Before: Sep 21 13:00:35 2026 GMT
Not After : Sep 22 13:00:35 2026 GMT
Subject: CN=74ec748041269a00500de87e847a09f5d2b0473b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:fb:47:40:77:57:ec:b8:c4:ab:03:9e:6b:
bd:cf:85:3f:48:ab:e1:d5:3e:60:a5:ea:c7:55:b3:
94:8e:5c:d3:b8:a2:df:52:24:5d:c7:e7:39:0a:fe:
27:ac:62:46:fa:3a:22:9d:95:f4:8a:1d:bf:14:21:
9c:0e:55:03:f6:22:1a:21:8a:0c:da:59:9f:3d:4e:
c9:fa:c6:70:c7:97:0c:8d:31:da:24:99:bd:13:95:
1c:44:0c:a5:39:93:6f:8f:83:84:c2:5b:7c:dc:0a:
12:38:87:c3:f5:55:df:87:cf:7e:c0:26:2a:5d:9c:
dd:33:b5:3e:48:7a:60:dc:df:71:5f:1e:67:6c:42:
10:ff:f4:e0:a4:3d:5b:7a:37:b9:d5:5d:7d:d7:fc:
b6:0d:9b:2b:8e:55:2c:f3:17:34:6b:93:45:8b:57:
f4:de:95:be:ef:43:fc:7e:63:d8:58:f3:6f:9c:68:
b8:95:22:d9:47:fb:e8:8c:41:0b:e5:1f:92:d9:41:
5c:96:2b:52:dd:2c:b1:b0:f0:42:f0:56:a7:c2:8b:
f2:b9:f2:a3:95:fe:53:30:3d:67:dc:67:c4:f4:e0:
62:23:eb:93:c6:22:fa:54:13:25:d8:b7:7b:17:5f:
a7:04:29:70:27:ef:a3:23:b4:5d:8f:5a:fa:4d:b0:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EC:74:80:41:26:9A:00:50:0D:E8:7E:84:7A:09:F5:D2:B0:47:3B
X509v3 Authority Key Identifier:
keyid:DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e2:39:b1:75:31:49:7d:e1:bd:d3:73:01:9e:e9:81:21:75:
d7:d1:a2:86:73:6d:90:62:63:ed:b0:cf:78:ea:1b:2b:e1:aa:
f5:26:40:0f:8e:99:27:11:ad:0a:eb:99:86:52:25:87:a9:f6:
80:ec:86:ea:cc:b6:c9:d4:28:d0:c4:8d:b3:85:1f:cc:8e:c3:
e7:5e:11:34:0f:39:8c:59:88:22:5d:d6:b4:14:74:66:10:ca:
33:53:87:9b:63:cb:24:d2:31:7a:a2:fb:d2:db:b4:c2:e3:22:
15:d1:19:7d:dc:07:a8:d6:0a:63:d8:e3:3c:07:9c:5c:2e:7b:
15:39:4e:9f:34:1c:75:89:8b:27:07:b2:94:42:b4:fa:07:62:
6e:f0:b3:2f:1b:b3:7e:7b:41:21:dc:9d:83:21:22:8f:d1:a2:
9e:29:30:86:b0:5b:e9:ce:9d:1a:05:74:3b:99:8c:5e:1a:25:
77:78:a9:4e:51:b4:62:d4:9b:b7:25:f4:54:09:22:5b:22:3d:
17:89:bb:42:0c:96:85:1c:b3:22:8d:0a:98:e8:da:c4:af:a4:
fb:38:8a:f2:84:96:e8:e5:bd:6b:4b:ce:45:24:70:da:0d:57:
45:f3:df:f7:1d:f2:0f:9e:ec:52:d2:4e:e0:99:d0:61:6a:17:
e8:b3:75:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:52:50 2026 by rpki-client