Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/235084-a400-4877-8184-700bc3c2a730/1/3X_KqsUvpdUxjqt0PK1j9ZyE5JY.mft
File: 3X_KqsUvpdUxjqt0PK1j9ZyE5JY.mft (raw, json)
Hash identifier: Ktqy68UWRL1Tyv2DVLXj97ehVk6V8oPLjOUaGcvlJFE=
Subject key identifier: FC:08:53:60:ED:87:93:18:75:7A:25:BF:CC:8D:72:FB:C3:20:B8:CB
Authority key identifier: DD:7F:CA:AA:C5:2F:A5:D5:31:8E:AB:74:3C:AD:63:F5:9C:84:E4:96
Certificate issuer: /CN=dd7fcaaac52fa5d5318eab743cad63f59c84e496
Certificate serial: 01A0E58860B1D8B4AA15B3BAC431838237C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3X_KqsUvpdUxjqt0PK1j9ZyE5JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/235084-a400-4877-8184-700bc3c2a730/1/3X_KqsUvpdUxjqt0PK1j9ZyE5JY.mft
Manifest number: 1E
Signing time: Mon 28 Sep 2026 01:01:55 +0000
Manifest this update: Mon 28 Sep 2026 01:01:55 +0000
Manifest next update: Tue 29 Sep 2026 01:01:55 +0000
Files and hashes: 1: 3X_KqsUvpdUxjqt0PK1j9ZyE5JY.crl (hash: 4FyQu53B+Jot1K+zIAv6t7CDpL7IJLnJKRBPgBv6QYY=)
2: lxv3LEUtSDi_s-CNg9ZNjF8UBW8.asa (hash: nUMlvYNLD/0a4iEqRu0HyXORE18mHXECqqyL2hiNLbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/235084-a400-4877-8184-700bc3c2a730/1/3X_KqsUvpdUxjqt0PK1j9ZyE5JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/235084-a400-4877-8184-700bc3c2a730/1/3X_KqsUvpdUxjqt0PK1j9ZyE5JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3X_KqsUvpdUxjqt0PK1j9ZyE5JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:88:60:b1:d8:b4:aa:15:b3:ba:c4:31:83:82:37:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd7fcaaac52fa5d5318eab743cad63f59c84e496
Validity
Not Before: Sep 28 01:01:55 2026 GMT
Not After : Sep 29 01:01:55 2026 GMT
Subject: CN=fc085360ed879318757a25bfcc8d72fbc320b8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:75:e7:b9:a1:0b:52:d6:09:fa:01:ca:a3:
41:a5:97:96:90:8a:6c:fa:bd:a1:03:a0:7d:ed:e3:
61:2e:a3:9f:bb:89:d7:a1:6c:4c:0e:e3:24:bf:72:
6b:65:f9:b8:9d:4e:bc:2d:fa:02:91:05:a4:49:d0:
15:9f:84:23:98:03:55:bc:ba:13:9a:68:86:56:7b:
ed:87:ba:bd:2d:cb:7e:87:d3:c4:64:ca:d8:cb:44:
4d:43:ca:db:d6:8d:70:c6:b1:f6:f3:fa:e7:52:19:
40:41:18:9d:6c:44:9f:35:dc:c4:3c:9b:a7:0d:73:
c4:ca:16:e6:65:5b:8a:b9:4d:22:78:c1:6c:6e:6e:
3d:04:e6:6b:41:43:92:7d:c7:c0:43:b5:60:46:3b:
08:12:26:48:a7:20:2f:39:cc:80:8c:ef:ab:98:b5:
51:bf:06:de:af:b6:0c:6a:1d:02:08:5c:a0:18:32:
48:4b:df:47:d8:4d:25:5d:97:e3:20:92:03:3f:d1:
8f:a4:91:cb:5c:98:8c:65:19:aa:94:38:3a:34:46:
ac:29:98:08:c7:bc:70:ef:c0:3b:79:e8:26:cd:fc:
cb:45:49:82:05:ff:00:1a:de:e5:9e:f5:be:56:3e:
8d:a4:b9:11:0c:ad:79:a6:e1:03:27:2a:82:17:f4:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:08:53:60:ED:87:93:18:75:7A:25:BF:CC:8D:72:FB:C3:20:B8:CB
X509v3 Authority Key Identifier:
keyid:DD:7F:CA:AA:C5:2F:A5:D5:31:8E:AB:74:3C:AD:63:F5:9C:84:E4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3X_KqsUvpdUxjqt0PK1j9ZyE5JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/235084-a400-4877-8184-700bc3c2a730/1/3X_KqsUvpdUxjqt0PK1j9ZyE5JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/235084-a400-4877-8184-700bc3c2a730/1/3X_KqsUvpdUxjqt0PK1j9ZyE5JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:30:d9:9c:ec:41:53:71:77:c1:ae:04:c9:80:e7:1b:61:20:
e3:05:2d:b8:d2:bc:5c:fb:0b:8b:f6:31:9f:27:59:8e:55:dd:
4f:eb:bb:8b:c8:4e:a9:ae:0c:d8:f8:63:6b:f5:18:3a:1d:17:
7c:90:2c:e8:03:b1:2f:79:dc:fc:dc:ae:69:e9:5a:58:a5:26:
25:c7:37:44:83:b6:24:86:d5:28:40:74:0b:99:00:82:0e:cc:
fc:ce:c8:f0:65:64:8e:a3:91:9e:80:c4:80:54:d0:c9:0a:1e:
23:0d:2e:56:ea:00:30:33:fa:c2:a5:c5:51:fb:0b:4c:8a:75:
a0:c2:5f:12:13:8f:cc:00:53:b5:d0:47:5b:ac:c3:0c:a6:d2:
42:a6:19:f5:f4:4f:ac:2d:b2:d1:de:54:4c:32:6d:b5:ae:a4:
54:3a:6f:c6:40:f6:f2:5f:d0:49:54:a0:56:33:2e:7e:98:a3:
bb:c7:81:41:a5:a1:02:9a:96:bf:7c:c0:c4:62:39:86:a3:f6:
ed:c0:45:57:70:9b:59:6f:0c:41:1b:c9:05:bb:fc:72:66:34:
d8:62:9f:c6:d4:71:a9:47:45:b9:5b:cc:9a:52:54:7c:78:f9:
05:ab:d2:0e:ca:03:6f:b2:ad:96:72:1e:71:26:45:b3:57:e9:
a2:d5:0d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:53:17 2026 by rpki-client