Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier: cDxqmZUbwN0V+s3Wduskfxz9P77w3kXE/zLRBocBj4c=
Subject key identifier: B0:9E:97:E4:DF:01:95:EC:25:74:09:6F:0C:F2:96:46:DC:96:67:A9
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial: 01A0C40E5B8E4BB2A55E0FAF09CFA3CD3B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number: 1A61
Signing time: Mon 21 Sep 2026 13:01:10 +0000
Manifest this update: Mon 21 Sep 2026 13:01:10 +0000
Manifest next update: Tue 22 Sep 2026 13:01:10 +0000
Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: TaZzj3Ye645yYUkQKTNYJmKcXk9Yrp+W6QGwAsgQUqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:5b:8e:4b:b2:a5:5e:0f:af:09:cf:a3:cd:3b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Validity
Not Before: Sep 21 13:01:10 2026 GMT
Not After : Sep 22 13:01:10 2026 GMT
Subject: CN=b09e97e4df0195ec2574096f0cf29646dc9667a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:fc:09:54:ed:76:e1:10:5b:86:34:03:75:
2c:8e:51:1c:17:52:2a:bf:b6:71:b4:6f:44:8c:d4:
92:bd:31:2f:de:67:68:11:3c:9b:05:7d:ad:ef:a4:
ce:ab:94:42:24:ad:02:01:d2:20:85:5d:82:95:db:
a4:8c:38:b0:3b:40:fb:d5:c6:58:4d:6f:61:e6:2b:
13:56:9f:13:b1:55:79:1e:29:32:96:d2:3a:db:f8:
9a:09:ed:f8:18:a7:15:0f:a1:7e:fc:8b:6d:e4:15:
ed:b3:a0:aa:2a:2c:ce:fc:fd:7a:41:ae:bf:36:83:
a2:03:cd:6f:4a:2d:5a:66:29:c1:a1:c5:2f:0a:94:
ba:06:62:8c:e1:e9:02:0e:c3:ee:ed:1f:22:16:fd:
89:7b:00:d2:03:dc:1a:94:ba:06:1a:7a:07:d3:3a:
9b:b7:9a:7b:3f:84:57:06:f7:aa:50:5c:5f:49:90:
d1:eb:07:cf:78:0a:e6:2c:01:dd:20:3b:4e:fb:1e:
a1:26:13:91:b3:21:7d:d3:ab:25:59:c8:34:a3:18:
ea:00:9c:52:c5:7c:ec:3b:03:61:71:8f:a9:af:9a:
18:34:a0:c9:b7:4e:de:79:f2:30:bf:cc:12:38:25:
aa:bf:20:a3:78:ef:81:b1:cb:f5:70:d9:da:02:4f:
f5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9E:97:E4:DF:01:95:EC:25:74:09:6F:0C:F2:96:46:DC:96:67:A9
X509v3 Authority Key Identifier:
keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:69:ae:31:9c:14:34:31:a4:af:65:7f:89:c6:9d:73:5a:18:
be:d9:e7:b2:6e:84:ba:15:4a:6d:d6:a6:d3:de:8f:16:f4:e0:
1c:f1:57:a9:e0:99:a6:bd:97:24:f9:c5:c9:c2:ff:81:41:28:
d4:8e:1d:e0:dd:b3:d9:d8:5c:78:ad:d8:0e:2e:e4:9d:ca:77:
de:bb:57:aa:be:6a:4c:97:ac:ca:20:9d:43:ca:0d:ee:18:d9:
86:7e:b5:6f:d3:c4:f0:f9:33:26:a5:47:fc:0c:31:36:c6:ad:
6d:5c:da:a0:66:f3:c6:d0:e0:de:57:e0:71:cb:c0:51:56:aa:
00:cb:bd:dc:0e:76:03:aa:20:79:e2:1e:08:3a:03:f8:bf:5f:
44:40:84:0b:51:66:66:2e:95:6a:a7:9c:b0:22:5e:31:72:cd:
c6:cb:6c:fa:0d:03:b0:4b:d6:70:29:58:a1:41:a3:01:d2:96:
d1:79:e1:85:71:54:e5:93:ff:29:92:f2:a7:8a:ed:c5:3f:16:
11:4b:4e:0e:4b:1d:49:02:b5:7b:53:9c:d2:e0:ac:f7:44:d7:
5c:74:73:58:c2:76:23:7b:06:d8:3f:b1:c0:17:29:b6:d3:a8:
f6:97:59:97:a9:0b:bd:4c:dc:62:e1:d9:79:a3:31:4a:b4:2d:
28:72:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:02:32 2026 by rpki-client