Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
File: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft (raw, json)
Hash identifier: TpAFn2WYzIu659GHAzE6xBtDvqxSqSSiqMl4QMKb1ZY=
Subject key identifier: 78:94:2D:93:14:54:2D:AC:F3:DF:6E:9B:81:8C:C7:15:1B:DF:BE:B9
Authority key identifier: DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
Certificate issuer: /CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Certificate serial: 01A134B586657A14568C0DEA7DBED38AD8D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
Manifest number: 0A0C
Signing time: Tue 13 Oct 2026 10:01:13 +0000
Manifest this update: Tue 13 Oct 2026 10:01:13 +0000
Manifest next update: Wed 14 Oct 2026 10:01:13 +0000
Files and hashes: 1: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl (hash: VriBEqUfHxqo9dQ/DL9zh2RgPJoIb/5dLjnq3fhfpPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:b5:86:65:7a:14:56:8c:0d:ea:7d:be:d3:8a:d8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Validity
Not Before: Oct 13 10:01:13 2026 GMT
Not After : Oct 14 10:01:13 2026 GMT
Subject: CN=78942d9314542dacf3df6e9b818cc7151bdfbeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:f2:20:18:58:64:5c:f0:3c:e6:f2:5d:19:
f3:05:cc:da:c0:53:6d:3f:0f:49:5d:37:1d:4a:c9:
4d:7d:a5:1b:42:13:c8:d2:19:00:fe:fa:7e:23:17:
c7:8c:8f:6e:0f:09:ec:82:e7:c2:24:3b:8c:05:03:
99:20:be:82:a9:e9:89:71:b5:a0:86:89:c7:d4:01:
36:8d:bb:99:3e:f8:62:95:2a:cf:d2:e5:7b:a7:79:
96:75:d1:e7:1c:ac:3f:43:1f:53:11:e9:3e:d5:0c:
fd:58:62:66:12:49:d4:f0:67:e9:e6:aa:2c:6a:d3:
c4:37:29:ba:b6:89:44:3d:b2:82:87:fe:6c:d7:cb:
a8:18:7c:f8:a1:a4:cc:50:6f:e3:0a:d0:3d:9e:10:
61:03:28:11:10:f4:a3:c1:51:37:d3:d5:f4:a3:a3:
dd:27:27:b0:31:0f:f3:3a:3e:45:88:e1:de:2e:f0:
f6:4d:b0:af:1a:4e:57:f4:a0:f0:a5:26:d0:19:79:
1d:64:b1:39:ab:92:20:34:20:2e:16:6e:ed:69:76:
ca:18:ab:0a:b3:a7:33:0c:f2:68:29:ee:a2:9c:c1:
f1:c8:fa:b5:7e:2a:58:81:29:09:c5:20:68:5c:fc:
c5:e4:0a:72:c5:9d:93:9b:0a:a9:4a:63:b0:3f:36:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:94:2D:93:14:54:2D:AC:F3:DF:6E:9B:81:8C:C7:15:1B:DF:BE:B9
X509v3 Authority Key Identifier:
keyid:DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:52:aa:5e:41:25:2e:50:cd:d6:bf:aa:33:52:78:11:00:81:
62:0a:51:07:e3:1c:23:09:8b:34:de:a6:dc:14:0e:81:aa:ea:
96:58:05:0c:41:e9:d6:7e:b7:cd:05:f9:29:b9:5c:18:2b:36:
1b:ae:c6:d5:c0:21:d3:30:7d:7a:b0:ef:32:de:30:be:a5:e9:
e4:20:52:2a:ef:9f:51:a5:d5:ac:7e:d4:67:b4:e6:32:82:7a:
91:75:00:ad:e8:7b:57:77:d4:98:46:bf:fc:21:d8:e3:d1:70:
b9:58:89:be:80:a9:45:46:2a:28:75:d0:94:25:68:d1:40:b7:
c2:5a:2f:18:df:c6:8a:0a:71:bf:50:86:1f:29:54:bd:59:85:
1f:b0:40:cc:34:94:7a:9c:4e:48:e0:27:84:0c:e6:61:d2:0a:
19:56:34:e5:62:e6:a4:f5:0a:fb:58:6b:d7:5d:78:75:1d:12:
bf:b2:ef:98:ee:f5:02:0b:24:eb:bf:a8:ef:82:85:66:81:95:
e4:11:71:d9:d0:4e:4e:a3:63:93:83:0b:b3:6f:28:78:ed:11:
66:e0:2b:0c:51:66:86:5b:68:ce:77:53:48:56:4c:9d:2a:47:
61:cb:b3:91:da:67:f4:a0:44:d1:b1:ef:e6:dc:11:62:bb:56:
cf:ca:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:33:41 2026 by rpki-client