Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
File: 3liIYKFLOUpzUSmEKu-tGnBKMoc.mft (raw, json)
Hash identifier: mxIlqFlQAX3gimqVm9FZXcZoMaz2Ss8C3mbSpzFHK04=
Subject key identifier: 54:03:F3:8A:C1:E5:E4:28:A7:FC:0E:29:93:4F:02:3D:CA:1E:F6:19
Authority key identifier: DE:58:88:60:A1:4B:39:4A:73:51:29:84:2A:EF:AD:1A:70:4A:32:87
Certificate issuer: /CN=de588860a14b394a735129842aefad1a704a3287
Certificate serial: 01A0DC8521165549B0DE36C788F639AD5E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
Manifest number: 038B
Signing time: Sat 26 Sep 2026 07:01:47 +0000
Manifest this update: Sat 26 Sep 2026 07:01:47 +0000
Manifest next update: Sun 27 Sep 2026 07:01:47 +0000
Files and hashes: 1: 3liIYKFLOUpzUSmEKu-tGnBKMoc.crl (hash: lunt1wKnYhH85fbtxD9XO3T8t1tPYrLNnLGPGCKhxCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:21:16:55:49:b0:de:36:c7:88:f6:39:ad:5e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de588860a14b394a735129842aefad1a704a3287
Validity
Not Before: Sep 26 07:01:47 2026 GMT
Not After : Sep 27 07:01:47 2026 GMT
Subject: CN=5403f38ac1e5e428a7fc0e29934f023dca1ef619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a1:eb:7f:54:f5:46:9e:70:a3:5f:a3:66:12:
c6:fa:0e:1b:90:db:9b:32:4c:43:8f:bb:36:42:e1:
49:90:14:bd:6a:86:7e:cf:ed:dd:c9:3c:d8:52:54:
29:cd:82:99:da:a5:88:28:8c:1a:8d:e9:3b:46:46:
86:ad:af:65:9e:f7:7f:3e:1d:9e:f7:fa:66:38:8a:
bb:7a:e1:56:a3:de:1b:62:2f:8c:97:b5:2b:d6:9c:
39:3f:90:34:58:e4:b5:ee:33:50:31:0d:4c:fa:32:
fc:15:a3:83:2f:cd:8c:16:30:b5:2a:f5:fc:98:3a:
42:96:96:8e:ee:9f:46:86:28:55:1d:75:ab:c2:60:
b7:21:4d:39:88:b6:35:1d:c0:07:40:78:07:74:b1:
06:53:ae:89:6b:a7:3f:75:22:83:17:93:81:f9:8b:
96:75:07:e3:72:46:fa:f6:c8:50:a6:1c:23:a6:2e:
44:80:c3:ce:59:5b:0e:62:1e:64:e3:e1:56:3b:c8:
14:30:b3:ec:f5:cc:2d:24:2a:9f:99:16:0f:e5:ce:
67:bb:b7:a9:4d:c3:26:e6:58:b3:e0:db:eb:92:dc:
e8:46:de:f3:01:1b:7e:49:9e:71:0d:7e:cd:bc:3d:
79:22:5f:25:80:aa:be:fc:56:38:bf:ee:c5:02:52:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:03:F3:8A:C1:E5:E4:28:A7:FC:0E:29:93:4F:02:3D:CA:1E:F6:19
X509v3 Authority Key Identifier:
keyid:DE:58:88:60:A1:4B:39:4A:73:51:29:84:2A:EF:AD:1A:70:4A:32:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3b:3d:49:6f:c0:61:68:9c:1a:77:28:7f:7b:98:5d:fc:fa:
96:d7:aa:02:32:20:38:56:34:a2:83:65:9d:65:59:89:07:0b:
7a:ea:84:2e:d4:d1:84:b2:8e:96:47:10:2a:b8:68:1c:20:c7:
58:e9:87:47:f8:a8:89:e0:24:a0:9a:33:e3:f3:72:4e:01:b6:
44:cd:cf:8f:ea:54:80:99:52:0e:a2:52:db:ad:d4:00:a8:10:
fc:85:a2:5d:8f:4f:6a:6c:c7:43:ef:8a:7f:e4:e2:3a:20:87:
3b:8e:b7:42:4d:8d:34:10:8f:96:a5:37:d2:02:78:20:56:94:
44:54:a1:36:73:98:62:6d:e1:ac:3a:64:f3:69:0a:8c:f8:c4:
fb:5b:aa:6c:b1:09:74:46:ef:d9:0f:33:80:d9:74:03:59:96:
68:b4:cb:44:44:d1:7b:bf:aa:70:de:e2:99:25:9b:4d:49:39:
fe:c1:72:28:d7:0f:84:8e:3a:35:e7:8a:2c:32:4a:54:c4:de:
54:11:4b:1c:0e:ae:6d:b9:b4:45:77:51:01:a6:a2:41:d2:55:
2a:f4:74:33:ef:a3:cc:2b:c5:56:c6:98:d6:a6:84:e0:4e:ce:
7a:7a:a1:0f:b0:15:67:0f:1c:7b:8a:7c:4a:5c:8a:69:0b:9e:
8e:00:f3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:27:22 2026 by rpki-client