Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
File: 3mshhKwi402MRNprhFSbunH9VT0.mft (raw, json)
Hash identifier: 0P5vH4VLAoM80YpJ0AzjhyL/BPv7bpokkEaviRILFNM=
Subject key identifier: 98:05:5D:09:99:98:25:1C:3B:DF:9B:DE:60:18:4B:A9:4A:F1:C0:89
Authority key identifier: DE:6B:21:84:AC:22:E3:4D:8C:44:DA:6B:84:54:9B:BA:71:FD:55:3D
Certificate issuer: /CN=de6b2184ac22e34d8c44da6b84549bba71fd553d
Certificate serial: 01A0CD47A7E12A2DB7E38DA777C2539193B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
Manifest number: 0394
Signing time: Wed 23 Sep 2026 08:00:20 +0000
Manifest this update: Wed 23 Sep 2026 08:00:20 +0000
Manifest next update: Thu 24 Sep 2026 08:00:20 +0000
Files and hashes: 1: 3mshhKwi402MRNprhFSbunH9VT0.crl (hash: AWiFMivN5iGXrmeN+C7EVnaTo9Wzw/BPP/Y+9tNFCu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:a7:e1:2a:2d:b7:e3:8d:a7:77:c2:53:91:93:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6b2184ac22e34d8c44da6b84549bba71fd553d
Validity
Not Before: Sep 23 08:00:20 2026 GMT
Not After : Sep 24 08:00:20 2026 GMT
Subject: CN=98055d099998251c3bdf9bde60184ba94af1c089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:e5:de:86:c5:ff:4a:a8:d2:e7:78:fa:ac:
92:44:ab:a1:09:b8:1d:bd:ed:4c:e3:0d:ab:80:0d:
6b:e1:7f:4f:ae:5d:ad:9c:a1:63:96:76:9a:97:3b:
90:c9:42:10:4d:76:a5:f8:03:7a:e7:cc:14:1c:99:
0f:5b:44:3b:0d:73:81:31:34:c4:70:f4:37:fc:3e:
9d:08:6c:9c:51:77:bb:41:24:a1:19:1c:1c:51:b3:
55:f3:7d:59:72:63:8c:f2:12:18:20:00:2a:63:5f:
f3:1c:08:65:48:e0:16:67:51:fe:f5:b7:dd:6f:42:
69:56:49:9c:4d:9b:85:77:f1:b3:4f:5c:2c:6b:c3:
18:32:0a:73:50:ea:e7:d7:13:da:34:df:43:0d:73:
28:42:9d:47:27:48:c6:86:52:34:70:be:35:2c:cf:
41:65:54:ab:4d:d1:08:d9:ea:8c:db:72:da:8d:e8:
07:93:a8:24:0a:7e:5c:70:b3:45:55:48:a4:f1:3d:
85:21:70:5c:9a:09:07:11:55:f7:05:7a:f7:28:a3:
cc:e4:e1:33:08:27:ab:90:7b:18:9f:9b:4a:04:e2:
d9:a8:ff:f7:d3:63:83:2d:9d:23:ab:78:20:0a:83:
23:21:57:0d:f7:26:99:7f:1a:2d:f9:fe:d7:0b:9f:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:05:5D:09:99:98:25:1C:3B:DF:9B:DE:60:18:4B:A9:4A:F1:C0:89
X509v3 Authority Key Identifier:
keyid:DE:6B:21:84:AC:22:E3:4D:8C:44:DA:6B:84:54:9B:BA:71:FD:55:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ed:f1:aa:1b:6d:60:e4:f4:b5:59:89:a2:bf:e8:8f:bf:aa:
42:b2:3f:ef:b2:88:ef:f2:40:20:f7:67:d8:ca:62:b2:a7:dc:
e0:19:36:b8:01:85:17:00:0a:22:ca:a1:ef:96:f1:17:21:0e:
b0:8b:9e:ab:64:78:d5:30:eb:54:d0:f8:2f:f5:e8:4e:c4:6f:
e5:b9:30:99:03:de:34:8c:d0:fc:30:2d:c1:35:27:b1:da:81:
02:7e:ec:5d:2f:d8:57:47:3c:4c:cf:70:e7:e8:2f:e2:22:b0:
80:7c:3c:87:b8:ad:7b:93:70:e9:26:77:19:74:40:7c:7e:29:
05:52:7f:ff:15:9e:02:ba:f3:84:b6:f1:9f:1f:21:e8:9f:0a:
9f:fb:44:fd:15:d8:a6:b5:38:70:fd:29:3e:29:b7:49:05:42:
32:17:b2:43:c0:26:ef:56:61:f3:24:f3:2e:33:4c:e0:33:11:
10:e5:b2:02:c7:5a:51:a7:e1:7a:01:a0:f9:3e:9f:89:41:c2:
96:be:f7:b0:5b:b8:48:0a:f8:a3:f2:fd:eb:59:fd:89:d9:aa:
d8:6a:de:6d:f3:d0:99:fd:a7:74:bd:36:0f:d5:16:79:35:a5:
a0:9b:a8:9f:83:ad:17:36:68:f8:c2:21:37:a7:ae:25:68:49:
88:9d:27:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:28:03 2026 by rpki-client