Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
File: 3DhEUAcx1V-JiN3phVnP7QswmrY.mft (raw, json)
Hash identifier: gLj9Zbn6zsDYSNCzrW/E5D27ghrYhREQmNdFDiDp2gk=
Subject key identifier: 90:84:EA:FC:6C:80:03:EF:1A:25:5B:EA:5C:F6:5E:11:5A:EF:39:04
Authority key identifier: DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
Certificate issuer: /CN=dc3844500731d55f8988dde98559cfed0b309ab6
Certificate serial: 01A0DF4F0E95DFF326C8B0FECC87B85B2E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
Manifest number: 056F
Signing time: Sat 26 Sep 2026 20:01:35 +0000
Manifest this update: Sat 26 Sep 2026 20:01:35 +0000
Manifest next update: Sun 27 Sep 2026 20:01:35 +0000
Files and hashes: 1: 3DhEUAcx1V-JiN3phVnP7QswmrY.crl (hash: gg1dcw34RdWeCJywYa4g/2ZoW2djgEhSPXN9vH3Yhn0=)
2: DuN1FxsH-lHCVLPZStKFfBKxbwQ.roa (hash: kKKX72HBFEwm68oN45GHGePWHOJC9JK5lwTCTB/prdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4f:0e:95:df:f3:26:c8:b0:fe:cc:87:b8:5b:2e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3844500731d55f8988dde98559cfed0b309ab6
Validity
Not Before: Sep 26 20:01:35 2026 GMT
Not After : Sep 27 20:01:35 2026 GMT
Subject: CN=9084eafc6c8003ef1a255bea5cf65e115aef3904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:ee:e2:e7:34:74:1f:d9:9c:4b:16:c8:8f:
2b:7a:01:39:eb:04:b1:43:f8:69:c5:0e:0d:df:3c:
e5:c7:ab:de:5b:ca:f6:ca:29:bc:0c:11:2c:d9:6a:
0a:1f:64:9f:e1:08:ee:f0:3b:80:67:7e:fa:25:3f:
3d:7f:b8:f6:ce:60:b4:d0:b3:6a:2a:c3:25:e9:d7:
85:d0:ca:b4:8c:19:28:10:bb:23:83:f8:d3:ae:74:
04:41:8b:fd:ac:b1:61:dd:a7:0b:f9:32:f9:db:23:
08:5c:e5:95:eb:5f:fb:f9:36:48:cf:c9:78:1f:0c:
79:f9:d5:c1:08:5a:97:6c:c9:9a:0f:66:6e:6e:30:
82:05:7a:22:cf:fb:61:3e:6e:59:22:83:14:f4:13:
93:ec:94:45:95:07:d4:61:98:58:da:35:e9:de:7f:
75:c5:bc:ff:3a:79:b4:2e:ef:06:7e:77:06:60:45:
c8:28:50:a5:26:7a:7e:ce:7f:4e:75:bf:5c:12:f6:
90:60:3e:38:27:21:f7:07:89:07:ff:92:5d:c8:5e:
25:66:b8:26:84:1b:9e:a0:1b:65:d0:7c:de:91:d8:
50:69:7b:b1:c8:e3:ec:49:b6:6d:4d:28:8b:aa:89:
6b:0b:2d:b9:e7:ff:06:ef:72:df:f0:42:bc:83:a8:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:84:EA:FC:6C:80:03:EF:1A:25:5B:EA:5C:F6:5E:11:5A:EF:39:04
X509v3 Authority Key Identifier:
keyid:DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:00:fa:70:d0:44:82:2a:ef:29:12:9b:e8:75:5d:20:83:16:
ff:ca:c5:b7:a7:53:29:84:0d:57:0a:b7:b1:63:63:56:be:c1:
e0:06:dc:9a:fa:61:c1:a0:39:19:a5:d5:33:93:f1:aa:bb:3d:
d9:ab:a7:41:f8:4b:57:85:23:64:76:6b:da:71:62:e0:55:23:
92:aa:2d:3d:39:ad:1d:91:13:a6:6e:d5:99:a1:fd:9e:2e:ef:
ee:d2:96:df:5b:55:37:8a:30:ca:03:92:16:c8:d9:6c:9a:11:
f2:e9:a2:a8:9f:36:ab:44:9e:7f:17:b2:1e:a9:29:47:7f:f3:
13:17:1b:b5:df:e9:21:72:e7:5b:ad:31:f5:c1:57:65:5a:07:
d7:6e:1c:f1:39:2f:33:5e:11:63:ac:b4:6e:b1:47:93:e2:6e:
fd:ba:ee:5b:11:57:9e:04:eb:8f:25:4d:fe:f5:7a:c1:13:6e:
e4:cb:4f:48:98:c8:6a:2c:eb:f8:c7:92:7d:1c:9b:c5:c7:43:
18:31:df:74:5f:01:27:4a:1f:56:ba:26:a8:4e:52:b1:03:9b:
53:2a:29:97:f0:35:d4:9f:d0:bf:53:f9:d0:50:00:0d:d3:17:
0a:eb:fc:bc:83:f6:ae:45:2b:0a:d3:f7:cb:9d:27:13:0e:59:
43:bf:c5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:48:20 2026 by rpki-client