Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
File: 3dStS_QUF7o4OE1lvC0HwPaFCeE.mft (raw, json)
Hash identifier: kxyTPQMeN7hd685UHpx3tHsBJbNUCkP7fESoScNdAZU=
Subject key identifier: 3D:40:EA:23:4D:AD:91:30:57:B7:C8:DB:1E:01:0B:32:82:E2:3B:A6
Authority key identifier: DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
Certificate issuer: /CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Certificate serial: 01A0C669E84F7EE92F9F7E3BCC92B7B7703B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
Manifest number: 19F7
Signing time: Tue 22 Sep 2026 00:00:24 +0000
Manifest this update: Tue 22 Sep 2026 00:00:24 +0000
Manifest next update: Wed 23 Sep 2026 00:00:24 +0000
Files and hashes: 1: 3dStS_QUF7o4OE1lvC0HwPaFCeE.crl (hash: Xx0hswPW3H4hDd7AncGurIZQpVAx8SVRubgRedAIK7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:e8:4f:7e:e9:2f:9f:7e:3b:cc:92:b7:b7:70:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Validity
Not Before: Sep 22 00:00:24 2026 GMT
Not After : Sep 23 00:00:24 2026 GMT
Subject: CN=3d40ea234dad913057b7c8db1e010b3282e23ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:94:c8:8a:25:45:ae:ff:83:64:c3:b0:d8:cf:
04:32:56:68:c9:fe:46:70:44:39:6e:c6:8b:25:c3:
c6:df:f7:c5:eb:dc:7d:16:3d:fa:b8:4b:5a:f9:e2:
59:9a:1b:4b:7d:c3:ea:cf:e4:02:ea:01:24:45:04:
6f:45:64:18:32:fe:8d:ee:84:2b:d5:6f:49:9b:43:
33:e2:ef:02:b3:fd:04:58:68:9d:60:fa:4f:5a:b4:
09:27:55:25:e2:fc:16:8d:d2:0a:d4:b4:22:2e:fb:
1d:af:64:76:be:e1:04:ae:d7:4c:43:59:d7:c6:3a:
93:30:cd:29:b2:ba:1f:6f:5e:eb:d7:2b:c6:a4:f7:
b4:62:40:b6:ca:88:dc:3c:f4:a9:ed:a7:c0:05:10:
8d:59:c2:40:4c:a5:ae:dc:0d:11:49:36:29:ac:5f:
e8:bf:0e:4f:32:6e:63:49:31:29:d4:6b:df:5c:ed:
f3:c2:c4:3e:cc:14:15:73:cf:0e:49:7a:df:bd:86:
8d:ef:20:54:53:31:88:d7:e4:a8:0b:20:1e:9b:27:
16:82:5a:fe:a8:3e:0e:ae:ab:99:bb:cb:fa:a1:b3:
9c:7c:be:75:84:a9:93:53:de:dd:f1:25:04:e6:9a:
50:e4:8e:29:89:a8:65:c2:80:bc:66:bb:d8:e1:46:
29:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:40:EA:23:4D:AD:91:30:57:B7:C8:DB:1E:01:0B:32:82:E2:3B:A6
X509v3 Authority Key Identifier:
keyid:DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:85:e0:98:0e:22:d2:87:e0:77:b5:6c:19:73:25:66:2e:6a:
9b:95:af:37:db:cb:64:7a:aa:1f:83:c8:ad:8d:e1:04:c1:d9:
16:45:4a:c4:05:c6:43:f7:6f:af:cc:87:4d:c5:13:f9:05:95:
69:a8:02:f7:e8:f7:9e:db:33:59:3c:1d:51:97:c2:d2:e1:5f:
b0:7c:99:db:49:56:0f:ad:45:c6:6b:1a:c1:f7:8c:1f:32:d6:
0d:bc:ec:17:a2:8f:37:30:3b:e7:80:da:62:8d:76:27:bb:a0:
1f:7b:3d:e2:17:49:fa:dd:62:be:14:0b:fd:de:60:20:fa:61:
27:72:55:af:70:9f:ad:3b:ff:77:33:ee:c3:93:d5:4c:ce:15:
4e:70:af:43:66:42:f4:dd:96:20:ea:25:89:b9:c9:7d:e0:58:
0a:f6:11:83:95:90:4e:13:46:a7:11:f1:e4:2a:db:e0:7e:c5:
f8:fa:4b:8f:f5:b1:ad:1c:2b:35:1a:58:a0:d7:0b:51:40:0c:
46:e1:0f:d3:5d:19:d1:b1:5e:19:ec:f8:c7:9a:c0:7b:b3:62:
1d:88:7b:34:d2:c9:f1:b4:15:1d:dd:2b:f6:07:3d:d9:d1:5e:
71:b9:c3:e8:3d:5b:cc:5d:1e:fb:15:45:0f:2b:4e:e3:80:64:
7d:27:5c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:08:55 2026 by rpki-client