Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/3ma776iICp6qjtAvg9fZlJgcHRg.mft
File: 3ma776iICp6qjtAvg9fZlJgcHRg.mft (raw, json)
Hash identifier: GBNc0wuS4aF7aItxa0BhSNekBF1Lz1FayyQqO9C2lSc=
Subject key identifier: 7F:A0:EF:F5:AE:5B:49:29:04:EE:85:AA:4F:77:A5:C0:B8:54:5D:02
Authority key identifier: DE:66:BB:EF:A8:88:0A:9E:AA:8E:D0:2F:83:D7:D9:94:98:1C:1D:18
Certificate issuer: /CN=de66bbefa8880a9eaa8ed02f83d7d994981c1d18
Certificate serial: 01A0CD480D58F4C4218AE25187630A39B02F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ma776iICp6qjtAvg9fZlJgcHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/3ma776iICp6qjtAvg9fZlJgcHRg.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 08:00:46 +0000
Manifest this update: Wed 23 Sep 2026 08:00:46 +0000
Manifest next update: Thu 24 Sep 2026 08:00:46 +0000
Files and hashes: 1: 3ma776iICp6qjtAvg9fZlJgcHRg.crl (hash: hpaKQzaawyHg6C0fRbbhJO1CBP1SP1PwIee6Ww3rq8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/3ma776iICp6qjtAvg9fZlJgcHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/3ma776iICp6qjtAvg9fZlJgcHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ma776iICp6qjtAvg9fZlJgcHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:0d:58:f4:c4:21:8a:e2:51:87:63:0a:39:b0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de66bbefa8880a9eaa8ed02f83d7d994981c1d18
Validity
Not Before: Sep 23 08:00:46 2026 GMT
Not After : Sep 24 08:00:46 2026 GMT
Subject: CN=7fa0eff5ae5b492904ee85aa4f77a5c0b8545d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:bc:91:84:a5:0a:0a:e4:aa:df:bb:f6:1a:
11:ba:c6:4f:34:92:37:a6:36:2d:a0:7f:af:b4:56:
11:a9:ea:27:fc:8c:56:21:09:8c:83:9e:ed:34:1d:
9b:3f:71:24:fe:2a:2f:d1:a5:22:a2:4b:04:f0:4e:
fd:64:a2:61:d4:85:7b:96:c0:81:03:5a:1b:40:32:
be:c0:27:e4:d8:13:49:fb:96:9d:e5:c4:3d:fe:6c:
ec:84:9b:25:4d:f4:f9:c4:42:63:cc:77:60:1c:9a:
fa:ab:1f:a4:34:77:ce:73:79:ed:8e:36:81:57:87:
24:f5:4c:61:51:a8:51:76:97:56:bf:cd:23:ea:24:
2b:6d:d4:7c:d2:74:75:75:08:b4:a0:4d:50:78:b7:
05:35:8a:25:ab:91:bb:a3:1b:68:d4:7f:47:19:db:
b1:3c:16:d3:e3:8b:d6:f9:26:23:f6:d0:d2:c1:0d:
98:4b:bd:14:14:4b:e4:ca:6e:f1:3a:80:ee:0e:df:
44:07:fb:b9:94:7e:12:46:14:67:6f:7c:83:7e:78:
3a:03:3e:58:69:c6:05:d8:9f:08:5c:26:74:8b:6b:
fa:13:e0:ec:ad:1c:16:3d:2b:65:63:d7:5d:cc:7f:
07:bd:46:ed:3c:e4:5a:cb:8a:4f:1a:18:2f:9e:e9:
bc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A0:EF:F5:AE:5B:49:29:04:EE:85:AA:4F:77:A5:C0:B8:54:5D:02
X509v3 Authority Key Identifier:
keyid:DE:66:BB:EF:A8:88:0A:9E:AA:8E:D0:2F:83:D7:D9:94:98:1C:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ma776iICp6qjtAvg9fZlJgcHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/3ma776iICp6qjtAvg9fZlJgcHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/3ma776iICp6qjtAvg9fZlJgcHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:35:10:36:ac:9d:c1:24:b5:fe:ae:3f:6d:8a:cb:e7:8d:87:
e6:cc:bd:dd:30:6f:c2:57:08:3e:50:63:46:57:89:45:8d:72:
50:fb:ee:0e:4e:b2:9a:e9:3a:6f:24:25:5a:d9:43:85:16:33:
f2:68:7c:ea:86:d5:8a:6d:f1:1a:3c:9c:f0:c2:94:d4:da:2c:
e9:96:a6:d8:da:8b:47:3f:eb:50:ed:3d:ad:bf:c9:94:34:f5:
f9:58:f8:46:bc:ef:6a:77:1f:d1:e0:f7:65:7d:3b:a5:a7:2c:
d3:e7:c9:3f:a8:e6:18:20:a0:9d:c5:75:0b:fe:fb:bf:de:d2:
cb:49:fa:80:f8:d1:79:20:eb:6c:0f:5b:f8:84:3e:c4:11:af:
7d:71:7b:ac:24:f7:9f:9e:e4:78:82:e1:21:14:14:34:bc:bc:
d1:ba:cd:af:d5:fe:98:b7:32:6c:88:a4:52:72:41:f3:e1:54:
54:6f:06:f3:87:75:d3:90:d0:cc:b9:57:29:2a:22:3e:84:86:
24:9b:74:c8:76:4b:21:72:57:c2:f3:8f:5a:2d:1f:2a:30:4e:
88:f0:2c:86:6c:97:a8:81:f2:78:a2:95:f9:83:a7:7b:8c:0f:
56:ae:06:fd:3b:f7:5f:5c:c0:b4:f7:5d:7f:e1:67:f2:e3:23:
50:87:a4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:45:05 2026 by rpki-client