Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json)
Hash identifier: AZnn8Hcv/4vynNoOKwQXbm+fYxgHFZ7BXzAOHc/OD4c=
Subject key identifier: 54:59:05:C5:2F:25:23:19:A5:0C:16:5B:BC:B1:61:B6:C5:87:7F:9E
Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Certificate serial: 01A0C3A019E55D4E6B7D2F7B4293ADB2A82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
Manifest number: 09B6
Signing time: Mon 21 Sep 2026 11:00:44 +0000
Manifest this update: Mon 21 Sep 2026 11:00:44 +0000
Manifest next update: Tue 22 Sep 2026 11:00:44 +0000
Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: tHcwLz2JqREsaLzdd0+4TaoEE14mGpiMJT2HhVR3DYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:19:e5:5d:4e:6b:7d:2f:7b:42:93:ad:b2:a8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Validity
Not Before: Sep 21 11:00:44 2026 GMT
Not After : Sep 22 11:00:44 2026 GMT
Subject: CN=545905c52f252319a50c165bbcb161b6c5877f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:f4:86:33:fb:31:2b:cd:58:93:e4:1e:f9:
4c:e8:82:3b:bd:c9:85:7d:79:dd:46:ae:d3:d7:00:
a7:4a:15:f6:c4:fd:81:79:58:3b:a8:81:42:fe:c2:
ad:a0:d5:8c:50:19:c2:a3:ca:f1:a7:53:15:1c:7e:
87:a3:df:50:71:4a:d2:6e:bf:cb:90:f4:f1:0b:e0:
70:09:15:0b:49:9b:60:ee:9f:78:ba:54:1b:61:2d:
09:4a:89:20:af:c1:03:ea:f3:a9:1d:7f:6e:34:27:
8c:4b:68:7b:60:53:cf:52:6b:cc:fa:d1:9a:6d:e1:
16:5c:f0:78:ea:dd:a0:eb:d6:7e:59:48:40:d1:f9:
32:c9:b2:e7:65:90:c8:54:8a:70:e2:de:db:c2:63:
69:c7:13:18:c4:cf:93:8d:1b:c9:83:f0:80:a8:ed:
73:ee:01:57:8a:99:c4:15:70:8f:f7:8e:16:07:3c:
dc:ed:c1:42:ee:dd:d8:43:da:43:8b:e2:fb:95:d0:
8e:a1:5a:4d:ca:cd:a8:a4:e6:5b:3a:fd:26:cf:70:
6e:c6:6a:49:68:d2:10:d4:97:df:fc:34:3d:18:10:
86:f0:80:60:78:9c:4d:4b:27:de:bf:80:42:8e:80:
d1:0b:4f:53:38:c6:9d:01:75:bd:c2:c2:41:5f:8a:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:59:05:C5:2F:25:23:19:A5:0C:16:5B:BC:B1:61:B6:C5:87:7F:9E
X509v3 Authority Key Identifier:
keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:60:45:d1:04:0a:c1:5b:d3:cb:54:61:b2:d8:73:86:6b:b9:
4a:de:85:8d:f4:9c:a8:e2:10:3f:ee:ad:88:dd:9a:6c:75:2f:
93:8e:a3:66:78:ee:df:a5:b6:cd:da:fa:72:e5:1b:cb:54:ff:
9b:d8:af:a9:4e:54:e6:c1:84:02:e6:86:77:e0:dd:e2:34:96:
65:1f:8a:eb:ba:af:5b:c3:32:90:d1:96:88:a4:20:1a:28:be:
4c:6f:47:e2:b2:aa:2c:f5:99:aa:98:18:18:e7:3a:8b:85:90:
38:b9:98:fe:a3:74:a7:49:70:c4:de:94:49:4a:b1:38:75:c4:
28:d8:b9:26:15:2d:6a:1e:9f:86:ce:d5:d6:05:51:5d:aa:e1:
83:41:e8:8f:28:a0:40:fa:70:e8:d1:69:b6:56:33:d7:e4:25:
27:02:0a:af:36:6c:17:60:a8:4d:fd:4b:18:85:ab:4c:7a:1f:
fd:7e:87:c6:38:2b:0d:ad:71:5c:e2:96:5e:ba:c5:13:93:6c:
46:ff:66:50:fe:e6:92:9c:16:21:09:55:16:86:35:6b:80:a5:
b2:c7:43:95:3c:0a:21:01:30:98:95:4b:ed:c9:30:0f:e6:7f:
00:03:f7:ea:15:d2:ff:75:a5:3d:d7:ea:6b:68:47:c3:f5:83:
61:46:09:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:45:46 2026 by rpki-client