Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
File: 3IiUXIhnpyYro3mzpphACRpPGQQ.mft (raw, json)
Hash identifier: spn+i1aIP2Dwx9mG5vtM55pv0agLblKbOqBcCnoAv20=
Subject key identifier: 2C:52:17:55:36:9E:83:5D:3A:2D:40:77:7F:BF:99:70:D9:BC:0E:62
Authority key identifier: DC:88:94:5C:88:67:A7:26:2B:A3:79:B3:A6:98:40:09:1A:4F:19:04
Certificate issuer: /CN=dc88945c8867a7262ba379b3a69840091a4f1904
Certificate serial: 01A0CA7DEA9AD341B1C25C7AB4883C416DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
Manifest number: 0E3A
Signing time: Tue 22 Sep 2026 19:00:44 +0000
Manifest this update: Tue 22 Sep 2026 19:00:44 +0000
Manifest next update: Wed 23 Sep 2026 19:00:44 +0000
Files and hashes: 1: 3IiUXIhnpyYro3mzpphACRpPGQQ.crl (hash: t4I/8SCpU4rKrTFu8uTCxeLl7T4AIstweB+Au71Sqvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:ea:9a:d3:41:b1:c2:5c:7a:b4:88:3c:41:6d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc88945c8867a7262ba379b3a69840091a4f1904
Validity
Not Before: Sep 22 19:00:44 2026 GMT
Not After : Sep 23 19:00:44 2026 GMT
Subject: CN=2c521755369e835d3a2d40777fbf9970d9bc0e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:25:ba:60:7d:c9:84:96:0d:df:6c:61:ca:
ab:62:b8:f5:89:04:53:b9:91:d5:7f:76:2f:56:9b:
f2:6a:6a:e7:21:c6:1d:9f:76:be:46:e6:73:d5:8f:
5e:1e:e0:32:ec:5d:7f:c4:c1:a9:b2:a1:a7:d2:93:
36:95:bb:a8:0b:fd:3e:87:1f:21:8a:b0:4e:3d:54:
2e:07:59:1d:fa:6e:63:9b:d7:31:9f:2e:6b:02:9f:
a7:09:a9:33:ec:30:f9:87:98:40:eb:17:8a:6b:c9:
ab:34:c4:ad:1c:b5:aa:26:7b:07:4e:b4:70:3f:87:
4b:ec:6e:f1:78:5d:77:67:40:bf:bc:4d:7b:e0:d5:
0f:e0:3c:8e:40:e4:f6:52:fd:b1:61:59:d5:01:23:
4c:a5:47:e5:af:0d:9e:e6:98:40:84:52:81:07:75:
85:1f:12:81:7d:4d:6b:d9:29:13:e3:38:ae:e0:68:
d3:22:a2:21:c9:00:64:08:1d:af:b1:a8:9d:94:17:
03:ed:aa:fe:6c:c0:4b:9f:c5:6c:1a:1b:a2:ac:8f:
1d:a8:a3:14:ca:64:6c:39:47:1b:19:e8:7b:b2:49:
d4:7a:10:5f:4d:97:7b:d0:79:01:26:ad:91:88:a7:
b7:15:79:71:86:b8:db:e6:d8:10:de:57:e4:d2:1c:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:52:17:55:36:9E:83:5D:3A:2D:40:77:7F:BF:99:70:D9:BC:0E:62
X509v3 Authority Key Identifier:
keyid:DC:88:94:5C:88:67:A7:26:2B:A3:79:B3:A6:98:40:09:1A:4F:19:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IiUXIhnpyYro3mzpphACRpPGQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/621022-4350-419f-947a-9cff1aee2b0c/1/3IiUXIhnpyYro3mzpphACRpPGQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:27:8e:42:94:11:53:81:2a:d9:61:5e:30:fd:bd:44:21:76:
0e:69:e1:9d:e1:00:ae:82:4e:f7:77:4d:3a:22:52:4f:34:78:
da:46:24:da:bf:6e:6e:db:77:d3:35:cc:10:ea:61:c2:05:c3:
1e:bd:24:6a:da:91:d9:78:11:a3:d3:61:15:c9:1e:86:f5:2b:
0b:e2:19:ee:bf:40:6e:6e:b7:fa:2f:27:8f:3e:47:7f:0b:20:
ee:f1:0b:48:a0:56:9c:62:e0:64:ff:b1:2f:72:4b:17:de:9c:
d7:d8:bd:01:c7:55:e9:15:70:51:f2:80:bc:d3:ab:59:b6:e7:
a7:45:f4:6c:62:a0:92:f0:53:09:27:67:d1:14:79:3e:49:54:
8c:ca:4d:f1:25:fa:48:46:1a:6f:cc:83:94:43:74:ae:2a:89:
9b:3d:1a:89:cd:59:ce:63:0d:bf:39:a9:1b:0f:ea:61:60:8d:
48:1d:86:cd:4f:76:a7:18:a4:62:bb:7f:9c:d4:db:87:71:9e:
eb:8c:c1:37:97:c6:cb:8c:0d:2a:4e:0c:b4:8b:49:78:93:dc:
7b:9c:c9:66:7c:59:cc:60:48:57:1e:f5:6e:e1:ed:64:47:c1:
0d:cd:59:5b:70:fb:ad:f0:74:da:f4:60:88:51:3a:dd:20:72:
f2:83:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:56:26 2026 by rpki-client