Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json)
Hash identifier: 6cVy0/pTU2T9Xp1cfi3dFiDbvNqeEAcmSnJHA4V5AaU=
Subject key identifier: E7:54:C4:70:15:F8:77:B9:71:5A:B4:BB:DD:AD:22:37:2D:76:7A:AB
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01A0C7B3A09FECA822F0DDB073EB46F97A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
Manifest number: 1662
Signing time: Tue 22 Sep 2026 06:00:33 +0000
Manifest this update: Tue 22 Sep 2026 06:00:33 +0000
Manifest next update: Wed 23 Sep 2026 06:00:33 +0000
Files and hashes: 1: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: Ar0fnx5s+0jYMlqF4UeXQ1kRjEyfqNb7JJu4XqsSkEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:a0:9f:ec:a8:22:f0:dd:b0:73:eb:46:f9:7a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Sep 22 06:00:33 2026 GMT
Not After : Sep 23 06:00:33 2026 GMT
Subject: CN=e754c47015f877b9715ab4bbddad22372d767aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:48:7f:4a:e2:d9:fd:bb:3d:3a:a9:a0:3c:
a9:c8:0e:b4:90:d6:90:41:bf:d8:f7:ea:25:d0:cb:
a8:5b:cc:ef:a3:2e:4b:1d:09:be:5a:cf:12:2b:74:
d3:02:5a:d5:d0:72:25:de:57:c9:a7:f1:6a:52:6b:
a2:e5:f5:9d:e7:d4:27:03:30:22:50:22:fd:10:03:
f0:c6:74:27:73:99:3b:ea:d0:5b:94:70:2a:bd:2f:
7e:1c:07:ae:a1:5c:85:6f:a6:16:f6:c8:b9:46:36:
31:67:36:d2:60:72:b6:ba:d5:08:d6:ba:09:e2:51:
25:97:eb:d9:23:ae:11:9f:33:e5:31:91:b3:29:a0:
66:a0:46:b9:24:ce:92:16:4c:16:3f:8c:65:a8:2c:
f3:9a:6e:4d:17:b9:f1:43:ca:57:d4:9c:0c:84:67:
a9:34:59:30:8e:7c:af:85:9c:fb:35:43:df:c4:90:
b1:91:0b:78:e1:21:61:09:f8:f3:6d:19:c9:ef:02:
b9:15:60:3d:ee:f3:a9:c2:eb:c1:bf:31:2d:97:d1:
3a:f6:55:e4:bc:89:dd:a2:bf:c1:7c:e9:a8:f8:d7:
4e:4f:3e:66:85:75:07:a2:32:3d:68:c3:e4:3a:b5:
e1:1f:cb:11:30:5a:7d:f9:00:e7:49:8b:ea:03:6f:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:54:C4:70:15:F8:77:B9:71:5A:B4:BB:DD:AD:22:37:2D:76:7A:AB
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0e:96:aa:14:ce:d3:67:35:f3:97:a9:a9:52:4c:75:03:f2:
09:1f:cb:71:d9:f3:7d:a4:5a:8b:32:1b:cd:ee:36:cf:85:b2:
8d:b7:2f:39:9d:38:0e:5b:36:85:b6:1f:ab:96:81:81:fa:79:
26:cb:47:ca:9a:08:02:a4:e9:2d:30:1d:49:77:cc:cd:ac:db:
6d:60:e4:bd:6b:1d:f8:63:cd:fc:73:1b:c3:01:c4:f1:02:09:
10:f6:60:ab:a7:ce:3c:60:5a:bc:4d:e0:38:5b:18:09:11:73:
2f:5c:20:38:03:d7:be:56:54:1d:1d:d1:6d:73:cc:19:da:65:
17:ca:d1:26:5c:6c:c5:f5:55:df:de:1b:c5:b4:b3:48:5a:36:
7f:ba:83:4c:04:9c:c2:30:f7:33:51:9d:19:80:95:cc:22:9e:
34:5c:b6:ff:5a:2c:c3:66:a5:fd:e0:d3:59:8b:8c:05:4c:16:
46:0b:61:b9:61:0c:0d:1a:d5:13:e1:e1:82:3e:2d:99:40:0f:
a6:1f:19:a7:89:6a:d5:87:92:8c:51:4e:e9:94:f8:46:ee:0e:
75:83:f7:49:84:36:5d:c2:aa:74:8d:07:7b:70:60:c1:38:2c:
9c:60:70:1b:b3:50:75:7c:c7:9a:c5:04:c9:d4:16:98:d4:a2:
5b:bf:c1:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHs6Cf7Kgi8N2wc+tG+XpFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjYwOTIyMDYwMDMzWhcNMjYwOTIzMDYwMDMzWjAzMTEwLwYDVQQD
EyhlNzU0YzQ3MDE1Zjg3N2I5NzE1YWI0YmJkZGFkMjIzNzJkNzY3YWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm1If0ri2f27PTqpoDypyA60kNaQ
Qb/Y9+ol0MuoW8zvoy5LHQm+Ws8SK3TTAlrV0HIl3lfJp/FqUmui5fWd59QnAzAi
UCL9EAPwxnQnc5k76tBblHAqvS9+HAeuoVyFb6YW9si5RjYxZzbSYHK2utUI1roJ
4lEll+vZI64RnzPlMZGzKaBmoEa5JM6SFkwWP4xlqCzzmm5NF7nxQ8pX1JwMhGep
NFkwjnyvhZz7NUPfxJCxkQt44SFhCfjzbRnJ7wK5FWA97vOpwuvBvzEtl9E69lXk
vIndor/BfOmo+NdOTz5mhXUHojI9aMPkOrXhH8sRMFp9+QDnSYvqA2/1YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdUxHAV+He5cVq0u92tIjctdnqrMB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQ6WqhTO
02c185epqVJMdQPyCR/LcdnzfaRaizIbze42z4WyjbcvOZ04Dls2hbYfq5aBgfp5
JstHypoIAqTpLTAdSXfMzazbbWDkvWsd+GPN/HMbwwHE8QIJEPZgq6fOPGBavE3g
OFsYCRFzL1wgOAPXvlZUHR3RbXPMGdplF8rRJlxsxfVV394bxbSzSFo2f7qDTASc
wjD3M1GdGYCVzCKeNFy2/1osw2al/eDTWYuMBUwWRgthuWEMDRrVE+Hhgj4tmUAP
ph8Zp4lq1YeSjFFO6ZT4Ru4OdYP3SYQ2XcKqdI0He3BgwTgsnGBwG7NQdXzHmsUE
ydQWmNSiW7/BAw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:00:51 2026 by rpki-client