Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier: Y/g0/Ki2N94cGgyOStnqtIqQP17Biwm2eXTfRJBnXE4=
Subject key identifier: 93:D5:A4:C4:C1:1F:ED:FA:20:DE:A4:70:D5:B8:3A:87:D3:B0:65:72
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial: 01A0CB90D631F5E7276333E30C876356B9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number: 0D14
Signing time: Wed 23 Sep 2026 00:01:01 +0000
Manifest this update: Wed 23 Sep 2026 00:01:01 +0000
Manifest next update: Thu 24 Sep 2026 00:01:01 +0000
Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: iUW0W0yMe9QYL0u3fa6T1DVHoXJ/Bk2YfqjkpnD9Nkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:d6:31:f5:e7:27:63:33:e3:0c:87:63:56:b9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Validity
Not Before: Sep 23 00:01:01 2026 GMT
Not After : Sep 24 00:01:01 2026 GMT
Subject: CN=93d5a4c4c11fedfa20dea470d5b83a87d3b06572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:96:d8:25:b3:f8:4a:0a:24:8b:9c:f1:73:
81:bd:58:9b:43:17:b5:a8:e4:54:03:02:fb:7f:34:
1a:ec:e1:cf:22:98:86:17:6d:e6:6e:17:84:db:02:
7a:b7:ec:13:03:ec:d8:78:cb:04:0a:40:4b:50:61:
09:ac:03:1d:48:9c:5a:00:30:8a:a2:da:92:13:85:
fb:69:e5:f3:59:46:85:d2:78:14:fe:17:28:88:55:
36:9e:43:14:8c:97:ba:50:31:7d:45:a0:bb:11:0d:
15:23:ea:c7:4b:c1:7b:d5:7a:9b:8f:7c:30:fa:24:
d2:9a:0f:93:0c:22:dc:99:9b:7d:49:fb:38:84:0a:
0e:82:25:6c:2d:a9:36:92:f9:a5:6e:18:92:64:09:
a4:5b:31:1f:c5:2d:76:77:1f:f7:c6:d9:de:61:13:
ef:b4:7f:0c:e7:51:33:9a:27:eb:d1:9f:58:a6:5a:
06:8c:66:10:76:17:ea:23:a2:2d:a0:f7:4a:e9:45:
19:59:27:bc:4e:97:34:34:ae:fe:45:30:93:7a:36:
46:11:9b:3e:37:9a:bc:f4:e9:dd:fa:f6:15:9b:6c:
5f:b8:54:61:e7:05:43:5e:c3:1c:29:8f:b7:91:fb:
ec:c0:3e:96:eb:79:79:c9:d3:ab:d9:56:54:05:a2:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D5:A4:C4:C1:1F:ED:FA:20:DE:A4:70:D5:B8:3A:87:D3:B0:65:72
X509v3 Authority Key Identifier:
keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:66:0e:cc:7c:51:db:ed:e8:33:29:3c:79:bd:b6:1d:87:9c:
93:39:dc:a2:42:4e:ce:b8:76:04:c8:c4:67:ca:45:1a:5e:82:
c4:73:0a:a6:a3:ac:ca:82:eb:ca:f0:69:bc:da:cf:c2:80:ac:
bd:14:c7:ea:bf:96:8c:5f:b9:df:d1:6b:2e:63:ca:c5:70:21:
72:d2:a8:d9:60:ae:14:75:f3:96:5b:d7:c6:65:63:a4:80:b3:
1d:6d:48:04:11:9f:33:6c:7c:f3:ee:54:1a:ae:77:6a:8f:04:
a0:16:6c:ad:25:9a:fa:af:fe:b6:a9:d8:37:be:b7:b3:bb:06:
45:b4:21:8c:c6:97:c6:18:fb:55:d6:e5:e7:a6:64:ca:dc:ec:
73:b2:f5:97:4a:6c:18:14:78:df:b4:50:14:43:6c:61:86:9b:
9d:88:a6:1d:55:63:48:0d:b0:e9:d9:1a:97:2e:9f:3a:83:e5:
14:1b:9a:46:cd:a5:ef:3f:49:6e:1c:2f:0f:25:ea:a9:d5:03:
8d:a8:a2:2c:f7:c4:35:a7:a4:b3:08:10:2a:90:70:d7:1a:f1:
05:c5:81:e1:ff:ff:f0:7b:85:4b:a2:2b:18:f7:d4:5a:57:b8:
fa:25:7d:92:3c:44:0e:e1:f7:ab:18:c6:19:6c:ed:6b:53:53:
41:62:69:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:27:16 2026 by rpki-client