Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: IPRTGcUmj3JmRBh6G7w+6xljuuQnDndwZhIeib1Vmh8=
Subject key identifier: 8B:73:37:50:EB:18:90:F1:57:E3:99:5C:BD:69:97:8D:AD:FF:06:12
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 01A0D26DEE46CBD06658E121CA4A0310BC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 1421
Signing time: Thu 24 Sep 2026 08:00:14 +0000
Manifest this update: Thu 24 Sep 2026 08:00:14 +0000
Manifest next update: Fri 25 Sep 2026 08:00:14 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: qhmVYtef9aYPneOTwuD+64fI0Y2YCipmhVyB6B9cL/Q=)
2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6d:ee:46:cb:d0:66:58:e1:21:ca:4a:03:10:bc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Sep 24 08:00:14 2026 GMT
Not After : Sep 25 08:00:14 2026 GMT
Subject: CN=8b733750eb1890f157e3995cbd69978dadff0612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:40:3c:d0:aa:04:ef:07:88:75:13:8c:8d:
0c:bd:81:bb:c1:fd:67:a1:89:db:62:66:5e:a1:68:
13:ff:ad:94:fa:d7:29:19:41:b5:ea:6a:1f:12:9c:
64:c8:0c:59:5e:c0:6f:77:38:a2:2f:78:3d:47:41:
38:18:01:9e:60:fc:6e:44:76:33:8a:8f:3b:0f:6b:
77:e4:c7:a4:ac:f0:95:87:c3:23:9f:c1:a4:17:58:
24:ed:f4:65:a0:2f:6a:93:e4:ef:d6:b8:fb:03:9f:
5a:fe:86:84:b5:7e:4d:f5:de:dc:38:ba:0b:ca:6b:
a6:8d:90:10:89:8f:08:a8:82:5c:af:d8:c0:01:61:
65:28:4f:9f:4c:ad:d9:b7:30:ba:3c:2c:17:84:da:
2e:60:02:f8:d1:d2:90:1f:fa:44:f2:3a:1c:83:a0:
9f:8b:b7:d4:37:59:9e:5c:57:0c:92:54:0f:14:d8:
34:a9:88:ca:61:ad:53:7a:de:21:68:e3:64:11:65:
80:46:20:0c:c4:7f:06:23:e2:3a:6a:d6:b5:bb:0f:
85:75:b7:74:33:7d:09:8f:b7:23:42:58:07:a3:5d:
a7:c2:a8:eb:f6:54:9d:e7:71:f4:0b:f6:00:03:13:
e8:80:94:fc:7a:a2:dd:4d:ca:56:4d:a8:90:a6:2f:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:73:37:50:EB:18:90:F1:57:E3:99:5C:BD:69:97:8D:AD:FF:06:12
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:db:1c:d6:e7:f9:8a:02:5d:e0:30:ae:70:16:e1:0b:bd:e7:
d5:00:8a:3b:ca:27:13:90:4d:ec:e0:6f:50:f1:e7:7e:e5:ad:
43:30:99:67:80:39:f7:9b:36:1a:a7:3f:cf:fb:8a:2f:c9:0b:
ad:66:3f:ae:4e:6d:79:b4:8f:79:6f:98:d8:19:76:19:cb:e6:
01:2b:6f:e5:6e:f0:b8:90:34:ff:e7:9e:52:1f:80:83:cd:6f:
50:43:f6:29:66:a6:9f:39:3d:18:39:3e:c8:67:44:2d:a6:ff:
c5:e0:f8:b9:77:54:74:45:e4:95:40:23:e1:17:2e:71:53:5e:
24:f2:50:f0:5e:21:d4:a8:31:14:0f:d1:34:c1:24:c6:81:8b:
9e:25:ef:85:8c:1f:70:2a:8e:84:b3:ec:ac:ef:1e:7f:b5:2e:
a0:49:87:c6:f3:57:bc:3c:b5:83:4b:b3:0e:15:84:58:e3:e3:
7e:b2:ab:14:d5:76:30:27:6d:20:23:10:c6:cd:db:51:46:9f:
03:ec:4a:38:b5:83:ad:ff:fb:2b:17:0c:99:0e:10:a2:e1:ea:
b5:fe:c6:69:15:83:46:40:fd:42:71:18:52:a7:ae:a9:a4:f2:
b3:fd:67:4d:7b:33:0b:42:b8:5b:2f:67:69:7e:43:cf:28:9b:
e3:37:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:50:49 2026 by rpki-client