Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
File: 3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft (raw, json)
Hash identifier: 6TFNkZliwImms8XgRpWZ4qGDNZfRRsm0iqJ2ty3OpDI=
Subject key identifier: FB:3A:B5:45:B1:EC:97:FB:94:BA:27:50:A4:73:16:15:71:F4:18:DC
Authority key identifier: DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3
Certificate issuer: /CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
Certificate serial: 01A0CDB62FF5F6FB42F8E8EB171F87474CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
Manifest number: 0B90
Signing time: Wed 23 Sep 2026 10:01:04 +0000
Manifest this update: Wed 23 Sep 2026 10:01:04 +0000
Manifest next update: Thu 24 Sep 2026 10:01:04 +0000
Files and hashes: 1: 3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl (hash: arssGD87BOlz2qfwSSPQID/mvBz6acv3BN3T9xGmpOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:2f:f5:f6:fb:42:f8:e8:eb:17:1f:87:47:4c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
Validity
Not Before: Sep 23 10:01:04 2026 GMT
Not After : Sep 24 10:01:04 2026 GMT
Subject: CN=fb3ab545b1ec97fb94ba2750a473161571f418dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:6a:06:6e:56:fc:ca:08:23:6d:c0:30:58:
41:de:8d:04:28:f2:9e:bc:f1:78:67:23:bc:47:eb:
c0:fa:44:1c:42:82:fc:d7:53:df:52:10:d8:c1:5a:
02:7d:ad:62:ab:15:79:18:7a:90:fd:0c:fd:e0:ce:
cf:23:0e:c5:3f:5d:b5:a0:49:1d:fa:63:da:1e:1b:
08:67:62:19:82:41:80:cc:c3:52:e6:21:2b:08:f1:
98:e5:13:ba:f1:6e:32:0e:1a:04:a8:45:43:d1:07:
b2:ed:8d:aa:03:dd:62:88:f0:25:20:d6:b6:f9:05:
70:3c:ce:9a:06:21:68:8c:e9:b1:87:98:21:11:e0:
ab:9b:51:9d:8f:8b:b9:e6:54:05:64:9a:03:2b:1e:
81:3a:0f:35:73:d3:eb:84:13:51:0e:11:56:40:c3:
7b:87:80:92:8e:ab:2c:53:38:9a:97:88:51:83:5b:
bd:09:98:62:5a:98:24:11:52:34:aa:0b:d9:d3:62:
94:4e:80:62:98:3f:7e:34:3e:ab:03:5d:28:29:c1:
40:41:b4:93:56:7d:2e:2a:72:97:09:6a:e8:53:cc:
86:b2:06:f2:e6:0e:45:cd:cc:ac:8b:54:b5:a4:55:
5b:38:bf:04:12:06:a6:8d:f0:07:2c:75:cb:5a:e0:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:B5:45:B1:EC:97:FB:94:BA:27:50:A4:73:16:15:71:F4:18:DC
X509v3 Authority Key Identifier:
keyid:DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fa:72:f7:42:7b:7c:6c:48:a9:91:c6:af:62:3a:81:20:90:
3c:c2:f5:57:b1:34:a1:3e:92:ff:55:b8:a0:0a:52:8b:e8:65:
d8:48:ef:d6:7c:58:2a:77:39:13:b1:ee:9a:34:bc:93:c6:b2:
c6:26:11:ca:be:72:c2:bc:f1:11:d8:ef:a9:82:06:ba:e7:e1:
49:58:4b:ba:94:26:99:24:2c:52:4f:e0:14:fb:f0:b9:12:c1:
c8:f6:f3:a2:cd:f3:b3:e7:b5:97:6a:34:0b:62:be:79:c3:ee:
27:e6:7d:c3:46:b8:4f:c5:ed:87:d6:4b:da:62:22:38:5a:b8:
02:27:bc:d4:c1:a7:53:10:eb:dc:50:9d:7f:ea:fb:f5:15:09:
d3:2e:f6:89:28:43:a5:ed:25:64:28:c9:5a:c8:cc:63:f7:6c:
dc:a1:11:d1:d9:3a:95:2a:ce:69:ea:af:5e:c5:b9:32:da:71:
77:28:9f:ff:84:b6:ef:be:6c:22:f8:9e:b7:d8:38:4f:41:e9:
8c:67:61:2e:11:97:c2:3a:e3:60:1a:64:62:13:16:4d:f9:75:
fb:14:e1:a4:9f:40:0b:1b:35:25:84:20:50:00:df:4f:66:73:
44:b1:f9:05:17:74:0b:c3:ef:b5:da:bc:51:40:34:71:7f:43:
71:af:d8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:01:25 2026 by rpki-client