Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
File: 03h3GhBvaw0FSld4U1aSLK8C40M.mft (raw, json)
Hash identifier: o0fL9JOB/zLiHnZTpY+um7L/4ru4QqJSUvLmtQb2hXg=
Subject key identifier: 1D:E3:77:C0:35:4F:E9:BD:C9:41:05:3E:9C:8F:90:56:ED:11:25:A2
Authority key identifier: D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
Certificate issuer: /CN=d378771a106f6b0d054a57785356922caf02e343
Certificate serial: 01A0C28E4576B9CFBE7A903119F7CDE45E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
Manifest number: 0E0E
Signing time: Mon 21 Sep 2026 06:01:38 +0000
Manifest this update: Mon 21 Sep 2026 06:01:38 +0000
Manifest next update: Tue 22 Sep 2026 06:01:38 +0000
Files and hashes: 1: 03h3GhBvaw0FSld4U1aSLK8C40M.crl (hash: DABZoPFpe3TwQKICfSSDoRyaOEAiDUYCjbrGih2j430=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:45:76:b9:cf:be:7a:90:31:19:f7:cd:e4:5e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d378771a106f6b0d054a57785356922caf02e343
Validity
Not Before: Sep 21 06:01:38 2026 GMT
Not After : Sep 22 06:01:38 2026 GMT
Subject: CN=1de377c0354fe9bdc941053e9c8f9056ed1125a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:3d:38:30:06:b5:48:98:65:96:eb:25:48:
b4:ed:c1:4b:69:19:31:7f:c3:28:6c:cd:ff:8f:4a:
35:04:41:a2:9d:e1:00:d4:e7:36:77:42:4b:90:f7:
5b:44:07:c4:ef:ea:11:95:46:9b:9c:c5:e3:25:88:
1b:02:66:9a:e7:ce:b3:dd:89:bf:f5:cc:ea:fe:09:
70:0f:f7:ff:be:5d:b0:d7:e1:fd:2f:c8:5a:47:29:
0f:12:73:30:53:12:0c:ee:3b:90:64:bf:05:b1:a7:
51:24:ef:5b:04:0f:5d:af:c6:b9:b9:a0:a8:a6:fd:
89:e8:34:fa:79:19:e0:0e:49:cb:68:f6:eb:02:63:
d7:59:c0:a6:c4:e2:9d:de:f9:b2:e1:4d:4f:b5:a0:
54:85:28:7d:e2:3f:a3:cd:df:bc:ff:d9:f3:18:06:
8f:58:f3:be:cc:e5:da:09:42:7a:b6:a2:8e:57:06:
aa:4d:b8:c0:0a:cc:11:fb:f0:31:91:28:7a:46:25:
e1:44:6f:b3:c5:0b:d2:57:01:86:60:8e:0c:87:64:
2d:12:52:fe:67:ab:2b:57:65:f1:4a:1e:e8:7e:2c:
cf:74:60:16:38:78:f3:d1:3a:23:fe:f5:48:bd:b9:
29:2b:0c:40:83:b0:1d:06:5c:b5:d3:5e:ae:d0:4f:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E3:77:C0:35:4F:E9:BD:C9:41:05:3E:9C:8F:90:56:ED:11:25:A2
X509v3 Authority Key Identifier:
keyid:D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:48:dd:1a:aa:6d:5f:d7:4a:43:a5:ea:98:f1:a7:d8:1e:44:
ab:32:9e:1a:78:54:14:f1:20:e1:61:a3:42:be:39:d8:13:c6:
dd:61:bc:fc:fd:68:15:49:7a:88:bf:f6:a3:a6:56:8e:64:34:
08:2b:e7:61:24:a8:21:7f:de:db:77:71:e0:58:f2:8b:66:82:
c1:4a:e4:6f:5c:81:62:dd:ad:4b:59:cf:44:7e:84:2e:65:25:
4f:84:a8:9f:26:bb:fb:2d:28:9e:b5:d4:85:16:6c:de:da:2e:
20:32:e1:8a:62:cd:c4:b6:d3:fa:8a:eb:be:9f:f8:12:21:d7:
ac:7d:6e:98:38:3c:b1:db:ba:06:27:a0:df:2a:d3:5d:1f:cb:
47:17:9c:ea:ea:3f:31:c8:e0:2f:22:83:e0:e3:59:80:72:52:
25:e6:13:5a:32:c5:6c:27:89:84:85:f6:a0:78:73:64:5d:37:
fe:f5:68:a8:60:ac:ba:92:91:f1:d6:b6:28:d9:77:64:07:22:
fe:d6:63:22:01:57:0e:62:37:9f:dd:41:a6:0f:9e:3a:4e:19:
3e:f2:56:59:8c:c6:7d:3d:c4:ba:47:8d:e2:6f:26:aa:2a:88:
9b:04:40:ac:fb:27:4e:4c:0c:d7:f2:5c:e0:d0:09:0f:b2:8d:
cf:14:90:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:06:14 2026 by rpki-client