Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: BcJXJRNx4cbs1JbqevQXrGKPHewmUOSivK/m7fiJhko=
Subject key identifier: 33:8A:44:4E:10:45:4D:1E:C5:38:3C:14:5E:29:4F:69:D0:99:0A:87
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 01A0CE24E7B900472BF3CF7DBD6A74829B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 09A1
Signing time: Wed 23 Sep 2026 12:02:00 +0000
Manifest this update: Wed 23 Sep 2026 12:02:00 +0000
Manifest next update: Thu 24 Sep 2026 12:02:00 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: vQXQ2ofe9dAZ7weEQXvOdmM1I0RfhgxPOhXSOJZMAq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:e7:b9:00:47:2b:f3:cf:7d:bd:6a:74:82:9b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Sep 23 12:02:00 2026 GMT
Not After : Sep 24 12:02:00 2026 GMT
Subject: CN=338a444e10454d1ec5383c145e294f69d0990a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:c7:66:43:43:5a:60:01:46:0f:50:4e:71:
36:03:7d:dd:0f:80:e4:29:be:c6:67:73:93:f5:7c:
16:a0:72:2a:68:70:9d:7e:f0:47:46:29:65:61:b4:
b7:f6:b0:91:74:6f:ab:69:21:f4:8b:f9:73:f2:50:
41:e2:58:58:3f:32:44:c2:f9:6b:39:6c:dd:e7:ce:
0e:b2:3c:56:7d:2b:65:af:ae:7f:89:06:d1:0c:9f:
16:d0:43:16:3e:f8:86:9e:e0:ea:24:db:1d:ef:c2:
dc:c1:0a:9b:fb:ab:1a:a7:6c:7d:8c:93:cf:0a:d4:
d9:75:7e:d0:ef:f2:6b:d4:a8:7e:e6:c7:fb:44:b6:
12:67:10:d9:ee:2a:7f:50:75:43:e7:fb:32:ec:c1:
48:97:df:9f:5d:35:ba:38:56:2b:7d:df:aa:5f:ed:
bc:86:28:56:2a:1c:c9:80:48:87:d2:70:89:a1:6a:
c1:84:1a:99:11:f4:cf:63:d8:67:ac:1a:52:e3:e5:
0d:e7:3b:64:42:c5:aa:98:2e:49:9d:2d:5a:a6:d3:
68:1f:09:c5:84:31:b9:8d:a4:9c:f2:5b:b2:35:6e:
18:b0:1b:41:c1:cd:b4:d2:5e:5c:13:ad:ed:07:3d:
79:62:41:0a:ad:28:35:36:fc:6d:5e:1c:fd:5d:e6:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8A:44:4E:10:45:4D:1E:C5:38:3C:14:5E:29:4F:69:D0:99:0A:87
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:64:9e:ca:23:e1:72:1b:96:0c:81:7f:78:00:ff:24:52:fa:
9b:d3:0e:18:3a:30:03:5c:bc:75:1e:42:b0:38:73:16:dc:66:
50:dc:93:59:3a:3f:d7:73:2c:8e:67:8f:55:84:cb:cf:b1:ec:
17:39:36:8b:ea:98:36:0b:b2:03:e3:02:c8:09:19:ae:f8:e8:
0f:99:80:b4:e6:22:ce:49:97:47:8f:91:ac:d1:03:e8:18:4e:
e0:39:d3:1a:67:fb:4b:8f:e4:fb:31:14:41:d7:54:41:7a:8c:
cc:58:5d:e4:a8:73:d1:2c:8f:e2:cc:40:96:2c:83:5c:89:1d:
0b:db:87:b1:a4:00:e5:d0:d0:a2:63:e4:d8:32:fd:a7:9d:9c:
ac:4b:ed:3b:b5:27:c8:93:30:f8:10:7e:f2:c5:b3:24:b6:80:
5a:54:ad:f4:26:28:ce:ec:b9:de:cd:6b:ad:3e:d0:19:ae:fa:
f4:36:7a:b9:32:89:8e:30:be:6a:53:5f:d4:70:74:14:65:40:
f6:38:cf:30:c0:c3:c2:d2:64:51:6d:da:67:1c:9a:7d:2b:83:
47:3f:5b:66:fc:5f:5b:30:4a:d1:85:13:70:80:db:32:92:45:
99:4e:2d:b3:ad:ec:27:40:68:d0:2a:fe:ff:b0:52:5d:81:f2:
6b:61:4b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:09:26 2026 by rpki-client