Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
File: 3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft (raw, json)
Hash identifier: gYHXUtlDkMRZehvm3lAo4egNfsU1ytVvKwBllq+Zkn8=
Subject key identifier: 51:8A:6C:F5:7D:5A:18:42:B2:C9:F7:8E:73:FF:34:D5:85:41:F0:3E
Authority key identifier: DD:64:C9:C6:CE:8A:7B:7E:95:50:84:75:5E:85:3D:4D:6A:A1:80:C4
Certificate issuer: /CN=dd64c9c6ce8a7b7e955084755e853d4d6aa180c4
Certificate serial: 01A148AA4AD8D12F7CF69B77A84251AB74E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
Manifest number: 01A4
Signing time: Sat 17 Oct 2026 07:01:22 +0000
Manifest this update: Sat 17 Oct 2026 07:01:22 +0000
Manifest next update: Sun 18 Oct 2026 07:01:22 +0000
Files and hashes: 1: 3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl (hash: pnaq/l4qimFvARwz7vOdORHfB/mFI97WHeD57qPIA94=)
2: uVFPp5kgmxZiZ6LoftbDP414XHc.asa (hash: LB9vzgvEJxcEb1WaanSRFRa5GPgjhrGmFrkvoXrEy9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:aa:4a:d8:d1:2f:7c:f6:9b:77:a8:42:51:ab:74:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64c9c6ce8a7b7e955084755e853d4d6aa180c4
Validity
Not Before: Oct 17 07:01:22 2026 GMT
Not After : Oct 18 07:01:22 2026 GMT
Subject: CN=518a6cf57d5a1842b2c9f78e73ff34d58541f03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:3a:1d:99:e2:91:1b:f3:c0:34:4d:88:6b:
9a:b2:43:af:5e:d9:dd:66:76:50:96:d1:b3:ab:a1:
f6:c4:2d:78:34:c8:8b:aa:a8:17:23:cd:13:8a:5b:
61:c8:e4:ee:03:62:df:0d:15:e8:03:8a:e8:91:f9:
72:40:43:e6:b6:82:57:2b:65:9e:63:9c:b7:38:2b:
bc:91:96:87:c6:4a:74:d9:6c:fa:3c:be:b8:9b:db:
4b:fe:5d:9f:eb:0d:2f:11:b0:a5:81:fb:ea:53:c4:
7f:3e:de:12:29:75:7b:2b:19:30:5e:8d:a3:5a:46:
1b:c0:9d:cd:2a:59:0c:14:1d:4d:f3:f0:fe:3b:b1:
53:fb:30:9f:72:1c:d0:ff:48:56:c2:0c:cd:77:82:
ca:dc:3a:be:34:f6:06:9d:c5:6f:76:4c:03:f1:b7:
53:28:95:26:02:b6:9b:86:ad:f3:5f:2f:ff:02:b7:
1d:06:98:88:d3:c3:a2:63:04:eb:53:54:34:ba:ae:
5c:5c:d3:33:d4:62:b1:80:31:05:eb:0a:0d:5c:d0:
bc:f9:77:5d:0b:62:e0:67:37:fd:4f:7d:48:90:8d:
e1:83:02:7a:b2:81:3f:c0:29:41:5b:0c:15:5e:f9:
c9:43:4e:60:9f:55:1d:57:71:6c:8f:fb:83:14:b0:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8A:6C:F5:7D:5A:18:42:B2:C9:F7:8E:73:FF:34:D5:85:41:F0:3E
X509v3 Authority Key Identifier:
keyid:DD:64:C9:C6:CE:8A:7B:7E:95:50:84:75:5E:85:3D:4D:6A:A1:80:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:98:7f:07:83:f5:a8:b8:35:7e:df:23:65:ae:6a:69:ae:32:
21:9c:60:a7:50:16:27:2e:3f:00:ca:7e:31:14:bb:46:4c:2a:
96:8d:67:76:91:ee:86:cb:c0:f0:18:7a:ca:ad:3d:62:84:c7:
84:67:80:e7:3b:1a:a2:85:0c:cc:0d:10:65:c3:67:34:fe:94:
07:a9:c0:51:b1:c9:ed:ab:9f:d7:01:60:38:a0:f5:5c:25:1b:
f7:dd:8a:41:d4:46:2f:ef:4b:1b:a8:d9:af:af:ce:96:73:b0:
26:09:80:45:54:51:49:dd:db:01:4d:ee:fe:aa:bd:aa:18:04:
55:6e:10:50:b0:52:52:b9:d5:e0:fa:f5:c0:ec:61:cd:d5:9f:
3e:68:d9:f0:4f:eb:02:a0:b3:6a:b1:24:dd:9c:aa:f1:53:a3:
61:a2:46:0c:cf:88:8d:01:e2:ff:dc:e0:d1:5f:57:32:6b:af:
e9:b8:9f:c2:f6:d7:2b:02:15:fb:3d:88:76:73:8d:44:cf:85:
c3:a3:22:74:8b:54:0e:f9:ce:a8:d2:4a:83:06:73:4d:4e:e7:
29:39:35:cd:b0:79:af:2f:df:7b:38:36:8d:97:5b:d8:6e:28:
7b:e9:43:d8:6c:49:b8:2c:c5:c1:92:01:f8:7b:7d:5a:e5:22:
d6:32:f5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 11:51:18 2026 by rpki-client