Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
File: 3Rc4MRWBIorSh1OUS-i88hafq6k.mft (raw, json)
Hash identifier: ImiPZpdZwLxCHvstHj8ahOzggemUG8nrMLwlyPWWlFk=
Subject key identifier: 19:81:1A:2D:EB:2A:4E:B0:A9:D8:83:2B:A2:02:28:F4:CC:FF:E0:1D
Authority key identifier: DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
Certificate issuer: /CN=dd1738311581228ad28753944be8bcf2169faba9
Certificate serial: 01A0CDB65834E0B86C39D4CDAA274BBD100E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
Manifest number: 120B
Signing time: Wed 23 Sep 2026 10:01:14 +0000
Manifest this update: Wed 23 Sep 2026 10:01:14 +0000
Manifest next update: Thu 24 Sep 2026 10:01:14 +0000
Files and hashes: 1: 3Rc4MRWBIorSh1OUS-i88hafq6k.crl (hash: SkKKFs9EjiLhYlglZjp8zBzdjhnEkyxNRL5TE75jdFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:58:34:e0:b8:6c:39:d4:cd:aa:27:4b:bd:10:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1738311581228ad28753944be8bcf2169faba9
Validity
Not Before: Sep 23 10:01:14 2026 GMT
Not After : Sep 24 10:01:14 2026 GMT
Subject: CN=19811a2deb2a4eb0a9d8832ba20228f4ccffe01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:e2:75:fe:48:5c:7d:13:65:33:37:27:fc:
0f:fd:cd:9d:23:21:ee:1f:42:e7:09:09:18:db:bd:
28:5e:8d:21:5e:0f:4f:7e:75:7c:a9:b2:f6:77:e7:
71:3a:4a:85:ef:59:ba:42:c3:0a:80:a5:68:a0:2d:
cc:49:42:74:03:37:4a:8a:46:3f:79:24:b7:1e:04:
78:94:03:4d:0b:cf:92:e8:07:b5:35:3c:b1:57:d8:
0b:71:74:30:b9:cf:2b:3d:c9:12:48:a5:91:4a:22:
8e:6a:3d:6a:e4:6c:fa:fa:44:15:e2:f0:79:6c:9f:
cd:0b:f5:32:0d:4e:3c:c9:34:b9:db:33:91:b2:b2:
4d:ac:27:b1:16:96:06:2a:a9:93:82:09:4b:e2:55:
23:4b:d9:bf:91:5c:1c:9c:9e:92:83:c6:cc:94:30:
7b:32:f4:84:cb:16:ad:ea:bc:c1:78:18:d8:39:5d:
26:5d:0b:32:99:5c:44:55:d7:17:1b:c8:a6:48:8b:
1c:0e:82:b4:85:44:a3:11:e9:de:33:7c:ec:e8:66:
47:43:f1:10:0d:c8:6d:2d:94:5e:d0:da:2c:3c:85:
0f:d7:41:76:36:bb:25:95:5a:b9:6d:c3:ae:b1:f0:
64:4c:3b:28:fa:45:e8:99:4b:e8:7d:5b:4b:ab:f7:
ca:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:81:1A:2D:EB:2A:4E:B0:A9:D8:83:2B:A2:02:28:F4:CC:FF:E0:1D
X509v3 Authority Key Identifier:
keyid:DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:94:a6:11:ac:24:da:fd:2d:75:02:81:3b:80:e3:b5:19:6a:
8f:cb:83:7a:67:02:c9:e4:d2:52:d6:a1:03:84:57:5e:e8:6f:
1e:2a:7e:e4:51:9b:d7:92:de:14:eb:62:30:24:ea:a2:1c:7d:
67:eb:a5:de:ca:88:ef:58:07:46:b1:66:5e:1a:c1:16:ad:92:
e0:76:5e:6c:2c:b9:7e:91:2e:14:79:e5:9d:86:3c:be:e6:b9:
4c:df:43:7a:20:9e:a8:c1:0e:70:68:15:b0:0c:89:80:0d:a1:
85:22:50:88:16:cf:8c:49:ee:c3:2a:51:99:d4:8a:b3:d2:0e:
58:9d:23:b6:1b:ec:a9:c2:3f:6e:a4:25:07:75:af:3f:6f:cb:
13:51:91:b4:b1:f1:12:51:93:f8:de:53:7b:18:7c:e6:2f:9a:
2f:b5:c7:2a:9f:0e:b6:69:10:73:17:5f:be:64:51:d5:08:0c:
09:ad:8a:cb:dd:0b:4b:4e:0d:e0:ac:47:22:84:1c:db:14:99:
a0:fd:70:1c:fb:a3:48:0a:f8:34:af:0a:eb:1f:78:08:f3:d6:
dd:f2:ca:83:7a:a7:5a:4b:e4:45:5c:c5:ba:55:2a:8c:7a:9c:
c2:fd:2e:25:85:3b:a2:18:65:de:cc:ea:74:5e:2b:5d:69:d3:
c4:ed:33:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:59:26 2026 by rpki-client