Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
File: 3VShBsGZ81M-VritvPpLGsPmkJ8.mft (raw, json)
Hash identifier: JBhzedZpgfWhvVErM2sdMNOSMZxJ8/JaJBDjOMhiDVc=
Subject key identifier: 8D:EE:9C:15:3E:1A:2C:D9:3F:8D:23:A0:25:07:AC:9E:50:23:C3:B2
Authority key identifier: DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F
Certificate issuer: /CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f
Certificate serial: 01A0CFA4178FAB4DC4E2BFBC7B30C7989F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
Manifest number: 0D37
Signing time: Wed 23 Sep 2026 19:00:32 +0000
Manifest this update: Wed 23 Sep 2026 19:00:32 +0000
Manifest next update: Thu 24 Sep 2026 19:00:32 +0000
Files and hashes: 1: 3VShBsGZ81M-VritvPpLGsPmkJ8.crl (hash: EghLq/lDPIp2/r+r5LjWO00zBXp+v8vXekwHKp+rRdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:17:8f:ab:4d:c4:e2:bf:bc:7b:30:c7:98:9f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f
Validity
Not Before: Sep 23 19:00:32 2026 GMT
Not After : Sep 24 19:00:32 2026 GMT
Subject: CN=8dee9c153e1a2cd93f8d23a02507ac9e5023c3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8a:10:7b:f4:7c:f4:c0:d0:84:d0:51:2d:3f:
19:98:29:d9:be:59:9b:c3:2c:c9:b6:f7:10:02:17:
4d:31:4d:76:18:8d:cb:5d:21:d7:20:ff:bd:65:c3:
3a:8c:ed:aa:50:cd:82:95:03:e3:51:16:c0:7e:02:
be:70:eb:8e:82:5e:4b:26:ba:de:29:30:60:0a:90:
87:2b:f5:e2:4b:de:ee:dd:49:8c:a8:24:c7:4d:8e:
9c:14:0a:01:2b:4f:8b:19:e9:7e:76:cf:c1:f4:b5:
c4:21:3b:37:c2:45:da:47:16:ba:46:43:a0:d9:59:
57:2b:13:1c:fc:b0:1f:a5:03:7a:13:8f:0a:b4:84:
b9:03:c3:59:7c:61:60:7b:a7:53:94:28:db:d9:55:
f8:d5:82:87:32:b5:8b:89:00:4f:a3:64:a2:c5:d2:
ff:cc:19:af:1b:82:d9:b9:74:5d:6f:34:bc:a2:4c:
02:1e:95:00:06:68:b3:96:01:9e:61:de:d8:22:89:
08:c6:29:0e:f0:fe:3a:de:11:da:e5:e1:a0:aa:15:
8f:eb:b3:ae:db:42:8e:28:af:35:cd:14:a8:89:4b:
a9:ba:bf:80:64:58:ab:96:43:0b:e1:ea:06:55:91:
47:73:f1:b8:28:20:70:6a:2f:b6:15:d3:b0:14:ae:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EE:9C:15:3E:1A:2C:D9:3F:8D:23:A0:25:07:AC:9E:50:23:C3:B2
X509v3 Authority Key Identifier:
keyid:DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bf:86:19:12:e1:37:61:b0:4b:fb:f1:ba:79:6e:ec:9c:52:
32:96:95:db:38:1e:79:3c:3f:a5:93:ec:e4:a0:3f:5a:64:5a:
df:e1:69:3d:3f:cf:40:c2:64:bc:a3:08:dd:16:a0:e8:61:99:
97:32:af:e5:e8:bb:a9:e5:b3:4b:84:5a:f1:02:8b:dd:5e:22:
36:f5:63:c7:b8:4e:4b:61:a5:99:a0:1f:25:bc:eb:a9:96:8a:
7f:28:b5:71:a8:90:81:1c:50:4e:5a:c5:4e:f1:d6:95:6b:1a:
ab:5f:12:5c:d0:c9:5f:48:82:dd:46:2d:64:b7:a3:56:2b:ff:
6c:06:ea:a9:e4:a9:c0:94:1e:8c:fc:fe:e0:85:f7:cc:e6:fb:
94:fe:f4:27:0a:d6:ac:dc:d8:d5:7d:21:33:76:fe:98:91:57:
71:0a:26:fc:11:07:6a:26:dd:4c:0e:53:87:ea:48:68:95:50:
69:7a:a6:2c:5c:47:fa:d1:c8:aa:de:68:c3:ac:00:f4:1e:a4:
32:3b:8f:2c:96:20:66:72:7b:8d:fc:5e:42:40:98:fd:66:e7:
0d:b1:d6:61:1b:5c:8d:84:c2:c2:9d:00:71:67:a4:5d:03:50:
7f:b1:11:26:9d:2a:90:f7:66:22:65:a8:c0:7f:f8:9d:76:27:
c9:80:d6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:05:39 2026 by rpki-client