Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8250f5-86cf-4e4c-9476-f7209ef49f02/1/3fTlDD41D5ofVF_SjgOe-3nBdu4.mft
File: 3fTlDD41D5ofVF_SjgOe-3nBdu4.mft (raw, json)
Hash identifier: JnlkPo+J/alVdywuNISm7emuh3VO8v7L27LKK+wq0iA=
Subject key identifier: DF:C5:C5:F8:5B:1A:1E:6C:0B:82:D8:5A:A6:C2:EC:70:38:BD:74:47
Authority key identifier: DD:F4:E5:0C:3E:35:0F:9A:1F:54:5F:D2:8E:03:9E:FB:79:C1:76:EE
Certificate issuer: /CN=ddf4e50c3e350f9a1f545fd28e039efb79c176ee
Certificate serial: 01A0CEC84F9A189868602F3E3FFD89FC5884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fTlDD41D5ofVF_SjgOe-3nBdu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8250f5-86cf-4e4c-9476-f7209ef49f02/1/3fTlDD41D5ofVF_SjgOe-3nBdu4.mft
Manifest number: 11
Signing time: Wed 23 Sep 2026 15:00:29 +0000
Manifest this update: Wed 23 Sep 2026 15:00:29 +0000
Manifest next update: Thu 24 Sep 2026 15:00:29 +0000
Files and hashes: 1: 3fTlDD41D5ofVF_SjgOe-3nBdu4.crl (hash: S497pyohLa5C3Oy3yn31Rbsn+Q6ontGZdRwriSLspmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8250f5-86cf-4e4c-9476-f7209ef49f02/1/3fTlDD41D5ofVF_SjgOe-3nBdu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8250f5-86cf-4e4c-9476-f7209ef49f02/1/3fTlDD41D5ofVF_SjgOe-3nBdu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fTlDD41D5ofVF_SjgOe-3nBdu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:4f:9a:18:98:68:60:2f:3e:3f:fd:89:fc:58:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf4e50c3e350f9a1f545fd28e039efb79c176ee
Validity
Not Before: Sep 23 15:00:29 2026 GMT
Not After : Sep 24 15:00:29 2026 GMT
Subject: CN=dfc5c5f85b1a1e6c0b82d85aa6c2ec7038bd7447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:af:5f:24:c0:cc:e4:23:3d:33:3f:03:a5:
52:29:2d:61:2a:99:e4:2a:0e:98:cf:b0:38:fe:09:
1b:11:16:55:64:3d:c0:2d:4a:6e:d9:ad:54:1b:ec:
82:3f:ca:0d:6b:ad:df:af:24:05:e1:e4:6f:f3:9d:
ac:be:d1:77:7d:cb:25:cd:c3:70:a0:19:e3:54:0b:
4b:ab:a4:c5:a8:5e:16:f1:21:25:d2:df:6c:5a:4c:
d5:99:4f:a1:8d:fd:48:a4:a8:54:ad:c8:24:eb:ee:
4e:93:3f:27:12:a3:f4:ed:5f:5a:0e:65:54:21:a4:
43:89:04:c5:5a:9e:b3:94:be:52:d5:1f:d9:3d:bb:
e2:24:6e:21:16:ae:69:2a:44:79:aa:1f:0a:42:82:
02:d4:fc:27:d6:a1:a2:13:7a:27:6b:7e:79:15:dc:
5b:3e:4e:8a:4c:61:f9:03:12:c5:e9:8f:1b:c3:7a:
73:ca:55:6e:af:46:37:d0:9a:97:45:bc:e0:a6:62:
df:d3:a3:5e:26:e5:96:35:b4:39:67:f9:2b:3b:7a:
ec:80:4a:bc:0b:25:45:d9:2e:de:17:27:66:31:cf:
3e:31:85:a8:b0:81:f0:93:26:3e:32:d4:50:fd:be:
ea:49:fb:60:9b:39:40:80:9f:b0:db:6f:5f:e4:54:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C5:C5:F8:5B:1A:1E:6C:0B:82:D8:5A:A6:C2:EC:70:38:BD:74:47
X509v3 Authority Key Identifier:
keyid:DD:F4:E5:0C:3E:35:0F:9A:1F:54:5F:D2:8E:03:9E:FB:79:C1:76:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fTlDD41D5ofVF_SjgOe-3nBdu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8250f5-86cf-4e4c-9476-f7209ef49f02/1/3fTlDD41D5ofVF_SjgOe-3nBdu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8250f5-86cf-4e4c-9476-f7209ef49f02/1/3fTlDD41D5ofVF_SjgOe-3nBdu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:07:80:ce:bb:e1:90:1c:b3:91:bb:4e:c1:2b:a3:87:63:c4:
91:b7:1e:52:a3:f1:35:b6:b3:b1:c3:41:26:1f:23:56:c9:48:
0a:90:c1:a6:81:8b:f8:ff:6a:bd:69:08:e5:3c:fa:18:31:3d:
65:eb:aa:e6:98:c7:ce:26:19:66:01:71:95:ee:7c:5b:a1:51:
da:52:e8:94:3f:7d:52:37:69:6d:1d:3e:86:e9:ec:bf:2a:42:
87:c3:af:b1:1b:dd:c6:6d:2d:b7:e3:cd:6b:50:1f:74:8f:9f:
13:69:9b:b4:bd:b7:97:25:28:84:40:3b:9f:72:6f:0b:d0:58:
f8:da:eb:02:d4:a5:40:8f:e6:f1:4a:33:45:ec:cd:d5:27:97:
8a:08:a6:97:e8:f2:0e:08:03:79:aa:a3:16:8e:f1:c6:b9:a2:
bd:ca:ea:3b:84:c9:b7:47:7e:db:f7:e9:c8:4d:c0:93:b0:54:
15:51:19:c0:16:ec:20:9b:cf:a7:36:42:0b:52:c0:9c:e2:14:
05:58:d1:ff:cd:fc:bf:6a:68:46:b2:43:6d:88:da:8b:3c:22:
52:ea:76:70:94:a4:54:98:8d:aa:7b:ab:fe:fb:02:93:5e:b0:
d1:7e:4d:67:c1:2b:34:73:ac:4e:f6:82:bc:97:71:f7:d0:40:
17:a6:44:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:36 2026 by rpki-client