Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
File: 3APMhzX27sAjqfI6BLLpDVOpIVI.mft (raw, json)
Hash identifier: ABgSmShLOl/E4fBJGnY4jzQF89fdI/UZmum1jUy+fAY=
Subject key identifier: 25:F1:6F:57:C9:4B:90:45:51:83:B9:C8:9E:45:4F:B4:F4:D6:34:98
Authority key identifier: DC:03:CC:87:35:F6:EE:C0:23:A9:F2:3A:04:B2:E9:0D:53:A9:21:52
Certificate issuer: /CN=dc03cc8735f6eec023a9f23a04b2e90d53a92152
Certificate serial: 01A0C9D95FE6CF6E60E63D85588D16D2607C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
Manifest number: 0AF9
Signing time: Tue 22 Sep 2026 16:01:01 +0000
Manifest this update: Tue 22 Sep 2026 16:01:01 +0000
Manifest next update: Wed 23 Sep 2026 16:01:01 +0000
Files and hashes: 1: 3APMhzX27sAjqfI6BLLpDVOpIVI.crl (hash: DtYlNU47EwBjo0KDJ1PcnrfKIuDwwfQAiqqtGIZgKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:5f:e6:cf:6e:60:e6:3d:85:58:8d:16:d2:60:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03cc8735f6eec023a9f23a04b2e90d53a92152
Validity
Not Before: Sep 22 16:01:01 2026 GMT
Not After : Sep 23 16:01:01 2026 GMT
Subject: CN=25f16f57c94b90455183b9c89e454fb4f4d63498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:61:47:8e:9f:29:38:f3:f5:a6:51:0b:8d:
ea:58:76:60:19:08:00:08:f0:a8:7a:de:bb:bb:52:
ac:44:14:65:cf:a3:75:da:28:e8:16:08:f8:20:44:
88:35:79:4d:7d:e4:49:af:0c:46:aa:09:71:6b:70:
da:16:09:de:c3:f5:2d:97:bc:99:a4:18:a4:78:54:
10:3b:31:68:73:ef:22:81:03:1c:87:6e:77:31:be:
f8:1e:73:ab:24:54:75:51:6b:ff:6b:d5:c6:17:7a:
c8:a8:b6:08:c0:9e:35:93:7a:77:30:bc:22:c7:08:
98:eb:5e:3a:c1:93:67:52:f6:be:19:fb:1f:87:c7:
a9:27:ad:e5:ee:9e:12:67:62:44:e8:5c:d9:92:b9:
03:1b:ca:fb:a3:4e:28:ae:8d:ad:bd:73:e9:6e:35:
db:cf:97:e9:7d:eb:d3:c9:98:a8:6a:c3:45:90:ea:
8a:a9:48:9e:38:45:e5:da:2c:b0:2e:02:55:fc:75:
91:7d:aa:50:4f:99:77:6c:ef:ac:0b:0e:1e:96:dc:
87:0e:e7:8c:13:48:fc:e8:91:1c:17:45:9e:86:11:
ae:83:24:0c:07:c0:7f:33:d8:75:2d:8b:2f:40:20:
75:c9:13:21:4e:81:96:99:aa:fd:68:46:09:30:44:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F1:6F:57:C9:4B:90:45:51:83:B9:C8:9E:45:4F:B4:F4:D6:34:98
X509v3 Authority Key Identifier:
keyid:DC:03:CC:87:35:F6:EE:C0:23:A9:F2:3A:04:B2:E9:0D:53:A9:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:48:2c:8b:84:8a:54:a9:6e:5a:8f:88:4d:45:5d:a3:54:50:
ff:dd:12:83:6a:e6:33:ef:60:b2:c9:69:10:07:6b:d7:14:24:
0d:86:a4:29:31:55:78:ed:08:95:ed:01:15:bf:51:0a:08:96:
2d:99:e7:10:52:96:ba:61:58:8b:a0:18:93:bf:f7:b6:82:b2:
70:f4:67:62:c0:b0:26:59:69:92:40:4c:9e:68:fb:0c:b6:d4:
61:43:ac:3b:fe:d7:c1:71:97:bd:f5:6f:93:9e:78:01:9e:cb:
31:9b:12:68:fa:36:7e:8c:ac:78:dc:1c:15:57:dd:4c:9d:f7:
29:7d:1b:b1:02:4a:21:3d:51:97:56:17:79:0a:48:49:6c:8b:
e5:60:77:09:8e:c5:94:2b:40:da:fa:70:4e:cb:28:c9:a6:14:
73:cc:50:62:bb:a0:55:15:f5:d5:96:e2:6a:e6:ed:a1:b0:83:
d9:8c:4f:29:ed:17:01:34:c1:16:20:eb:d4:50:84:68:2a:e2:
cd:a9:69:41:ed:6f:0f:40:72:a0:c8:77:ca:2f:d9:be:b7:16:
40:ce:21:93:99:f5:4b:49:79:62:e4:27:ab:1d:01:bb:45:b5:
a4:e4:c1:ad:be:c6:b5:c3:29:9d:30:f3:86:5f:75:b2:23:b5:
28:9e:8b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:58:43 2026 by rpki-client