Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier: pbueJvVe1DVsLe5QRvscZwNRWRO6g5LD73iX05phWBM=
Subject key identifier: 9D:66:6D:DC:67:F9:28:30:CC:D2:26:DA:B9:44:54:F8:AC:24:0C:93
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 01A0CF6D5F3469C3E4ED53FC2DCC45A21204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number: 10C6
Signing time: Wed 23 Sep 2026 18:00:46 +0000
Manifest this update: Wed 23 Sep 2026 18:00:46 +0000
Manifest next update: Thu 24 Sep 2026 18:00:46 +0000
Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: n6vSGi2fmh8tUUEF+tEDkgY/kCsrCSc0WBVmJfXWH/o=)
2: 6oH-q1WmgKlbF7oPFf0VCjT4cP4.roa (hash: 8fxRfcDqePTH9D6GcvyAsB8XOQ2tsAsMINyYJwfwjDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:5f:34:69:c3:e4:ed:53:fc:2d:cc:45:a2:12:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Sep 23 18:00:46 2026 GMT
Not After : Sep 24 18:00:46 2026 GMT
Subject: CN=9d666ddc67f92830ccd226dab94454f8ac240c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:9f:e7:e1:b9:47:37:25:23:ef:79:6e:b7:
7a:91:76:08:d9:cd:fc:a9:7b:a8:e0:a9:c4:61:a3:
a8:27:60:e6:4b:3c:e9:c2:97:6c:24:fa:0e:a4:b1:
cd:3a:c7:fe:fb:d1:a3:6a:4c:5e:9f:27:8e:ee:89:
a4:ad:a8:bf:f1:eb:e3:4b:3c:55:1f:b3:06:c6:1c:
84:31:f6:66:6b:4d:18:34:b7:e9:52:74:86:10:34:
13:c6:f9:c7:07:f5:c3:44:47:03:b9:dd:69:c3:16:
a0:15:7b:cb:d8:01:7d:30:0e:7e:05:8a:ba:05:ae:
1a:60:bc:a6:97:0c:04:c6:6f:69:d6:ac:23:3e:42:
5e:d8:86:a4:ca:cf:f1:f0:4b:bd:ca:73:04:78:39:
74:19:bd:21:a9:08:32:f5:58:7c:78:29:9e:56:be:
82:ff:01:33:56:3d:60:e5:81:9c:d5:1f:32:f5:9d:
ea:db:e0:a1:f9:6a:0e:c8:ef:ac:6d:f6:d7:9f:20:
c6:14:16:8b:9e:7d:87:0e:25:15:b7:d9:1a:c5:de:
99:08:4f:c9:f8:29:10:46:f1:c3:23:f2:5e:64:7b:
a7:39:95:fa:5b:d1:b6:90:aa:21:28:4d:dc:81:57:
7c:af:2c:69:f7:c4:07:16:02:13:3b:ba:1a:06:eb:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:66:6D:DC:67:F9:28:30:CC:D2:26:DA:B9:44:54:F8:AC:24:0C:93
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e2:4a:21:69:f8:3c:39:c5:b3:1a:a4:b3:30:34:30:80:8f:
dd:00:c7:af:a0:a6:1b:ba:21:15:02:e7:e6:dc:b7:66:8a:a3:
0a:f6:ba:c2:f7:51:2b:d8:71:34:fc:29:97:67:7f:75:05:ad:
f2:97:da:5e:22:a1:11:50:b1:8f:e5:58:92:d2:b6:19:ca:22:
2c:13:34:42:50:dd:37:71:ba:a0:ac:f2:28:56:5f:c5:b7:82:
b4:cd:ab:3a:54:1f:46:2a:8c:e8:40:45:87:63:0a:16:52:74:
8f:4a:66:1f:02:76:eb:d3:9f:ec:28:62:af:7f:f5:ba:6c:d1:
53:5c:37:f3:e1:19:14:4e:ac:cf:dd:ba:4a:cf:61:dc:f9:38:
32:02:54:a1:ce:ed:bc:30:e8:9f:d3:0e:a4:8a:40:0a:b9:41:
98:88:8f:d4:b6:5c:b1:1b:00:26:63:6c:e6:be:89:28:c0:81:
b8:77:d7:55:b8:6a:74:90:f6:ac:bc:5a:49:08:03:30:df:d0:
4b:1b:3f:b4:6f:73:e8:21:4c:27:0b:1b:c0:8b:ad:5f:7c:6f:
a9:e5:21:ec:a1:8e:6f:02:f5:c2:7b:f9:2b:f0:1a:4f:c1:8a:
0e:07:3f:8a:df:96:a3:13:30:f1:c2:0b:28:7b:3d:a8:7b:e5:
6c:86:f7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:52:53 2026 by rpki-client