Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json)
Hash identifier: VfXlhFcyiFthVIEkbobJq41KG704Tz/Yf6946ofX7zA=
Subject key identifier: 92:1C:C0:9E:F8:6E:75:A6:FD:9B:42:9E:F1:16:02:1C:0E:B1:60:FF
Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Certificate serial: 019D9A751267146B5045996401A4C8F28676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
Manifest number: 0813
Signing time: Fri 17 Apr 2026 08:00:56 +0000
Manifest this update: Fri 17 Apr 2026 08:00:56 +0000
Manifest next update: Sat 18 Apr 2026 08:00:56 +0000
Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: Y22/FJkn2jjLz8/2cT9jnHIpgr5RZUvBBiMuMuWsSxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:12:67:14:6b:50:45:99:64:01:a4:c8:f2:86:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Validity
Not Before: Apr 17 08:00:56 2026 GMT
Not After : Apr 18 08:00:56 2026 GMT
Subject: CN=921cc09ef86e75a6fd9b429ef116021c0eb160ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:db:04:f5:ab:70:73:b8:37:46:9d:5c:4d:
dd:ba:0b:e0:15:79:e2:c6:10:9e:83:5a:c5:39:14:
f9:de:bf:a3:6c:c8:be:51:01:d3:1a:31:e0:44:9f:
c8:8f:39:c4:18:32:5a:0a:a0:48:cf:59:ea:51:fb:
cb:f7:bc:e1:5f:85:58:a3:b7:24:e3:9f:1b:cb:67:
98:30:73:94:fa:83:d3:87:14:72:1d:d1:04:d5:55:
81:d5:49:e3:85:a0:b3:ee:06:86:67:f8:14:cf:54:
67:13:5b:c4:10:01:52:93:c7:85:92:c8:55:1c:4b:
81:3d:bc:dd:85:3b:97:01:71:69:44:ab:06:9c:85:
0c:4e:5f:7a:42:b1:3b:23:59:70:00:62:c0:c6:73:
34:7c:bc:83:b1:24:ee:62:dd:15:c6:6d:dd:91:3d:
a0:88:35:ca:f6:95:b6:31:53:8c:b0:f0:3a:dd:13:
7a:70:00:3b:bb:02:38:43:0d:4c:19:3e:b3:ce:71:
ef:50:07:c4:3d:59:83:a9:a9:73:53:24:2e:e9:c9:
fa:cc:03:77:29:e9:4d:d8:18:86:8c:5d:7f:3b:79:
48:c9:4f:8c:88:83:59:1f:b2:ca:8b:7c:f0:e7:54:
35:64:29:6d:33:c6:64:6b:a4:8c:98:71:6a:69:28:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1C:C0:9E:F8:6E:75:A6:FD:9B:42:9E:F1:16:02:1C:0E:B1:60:FF
X509v3 Authority Key Identifier:
keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6b:db:84:02:0e:d4:7c:48:0b:43:5f:24:fd:05:c4:2d:30:
ee:a0:03:d1:8d:23:dc:06:4d:26:12:82:a8:21:27:b1:67:f3:
35:71:72:dc:30:6c:db:35:a8:17:62:b9:e6:23:fd:88:27:90:
6f:43:b4:1c:1a:f5:76:9e:aa:50:c2:a9:cb:25:da:2c:36:14:
13:13:91:4b:f5:6f:af:9f:98:7e:e3:bd:eb:cd:b2:45:8a:76:
35:59:7d:a5:b0:8a:b3:73:5c:05:62:da:a1:a9:d9:99:9e:11:
f2:86:67:a1:5f:83:ef:41:b2:4f:61:0b:91:32:c9:a6:74:9b:
29:83:7c:64:a3:0a:38:04:ac:31:ac:32:1c:4c:d3:a0:b7:ea:
02:31:59:18:c1:fe:d7:ae:6f:b7:31:86:48:9e:e0:38:fe:1a:
35:08:2f:ee:ac:63:12:4c:66:a8:4b:de:b7:6b:38:c0:f1:1d:
05:12:0a:e8:f0:0a:bf:2f:e5:8e:d1:46:97:bb:d7:d1:6c:ee:
bb:ac:52:93:24:d0:3c:66:66:ca:82:2b:ce:ff:46:b2:65:9c:
18:18:05:24:1f:a7:c1:94:80:4b:7f:08:2f:e0:9d:cb:fe:50:
5e:76:75:58:7a:ee:67:c5:98:fd:47:3c:92:02:16:d3:c1:aa:
36:4e:08:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:00 2026 by rpki-client