Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
File: 3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft (raw, json)
Hash identifier: yVO2+CTcKHMALLQL9X5ureiBFsrrDVnR8GKkQQnYFCA=
Subject key identifier: B7:E6:1A:5C:6B:EB:18:29:39:98:10:9B:9B:44:5E:62:EA:4B:29:E8
Authority key identifier: DC:56:53:CF:B0:A4:EE:54:52:5E:AE:F7:B3:70:B4:CB:D9:AA:07:81
Certificate issuer: /CN=dc5653cfb0a4ee54525eaef7b370b4cbd9aa0781
Certificate serial: 01A0DACD61ACF71DF3161D89E40868F98CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FZTz7Ck7lRSXq73s3C0y9mqB4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 23:01:27 +0000
Manifest this update: Fri 25 Sep 2026 23:01:27 +0000
Manifest next update: Sat 26 Sep 2026 23:01:27 +0000
Files and hashes: 1: 3FZTz7Ck7lRSXq73s3C0y9mqB4E.crl (hash: vIsqcnyK/7cTmyhWtBb+0FuQCnR4u42yvo6wYzwR678=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FZTz7Ck7lRSXq73s3C0y9mqB4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:61:ac:f7:1d:f3:16:1d:89:e4:08:68:f9:8c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5653cfb0a4ee54525eaef7b370b4cbd9aa0781
Validity
Not Before: Sep 25 23:01:27 2026 GMT
Not After : Sep 26 23:01:27 2026 GMT
Subject: CN=b7e61a5c6beb18293998109b9b445e62ea4b29e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:93:f6:8c:70:e6:02:01:7d:27:89:83:71:
a1:37:30:70:b5:94:b9:67:84:03:d9:9c:ce:db:d9:
dc:5d:f6:a7:b6:b2:6a:af:85:74:3a:39:03:db:33:
53:c9:4e:c0:26:cb:bd:76:e3:0b:f9:a8:df:f1:3b:
46:bc:31:6b:6b:71:11:9a:5c:dd:8a:98:b9:24:24:
e3:fe:a8:7e:9f:c9:d9:a7:ee:55:47:b4:cd:da:f7:
d5:78:24:50:11:c5:00:15:51:30:77:8f:fa:05:70:
45:83:8e:d2:91:a2:e8:dd:46:ec:0f:b0:8e:be:ca:
1e:00:6e:cf:3b:39:a7:b4:a3:70:71:cf:c4:b8:92:
e1:8b:8a:52:ec:92:5b:eb:65:c8:d6:96:2b:3a:ae:
51:7f:c8:93:db:c1:cd:05:2b:16:d7:45:18:d0:87:
07:8f:3f:07:a9:12:e4:d6:0d:b6:75:27:b8:50:f9:
f2:0a:f2:ad:b6:01:5e:54:82:a1:24:b2:79:a8:57:
ba:f3:35:9d:51:f6:fc:80:83:1b:a6:8b:5d:16:da:
fd:27:63:8f:fd:22:53:9b:03:cf:2d:d2:17:9e:53:
0d:8d:06:a8:fa:76:00:b0:8c:a7:3e:97:92:90:b1:
04:99:20:35:e8:59:a0:db:7b:61:13:71:05:d2:9f:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E6:1A:5C:6B:EB:18:29:39:98:10:9B:9B:44:5E:62:EA:4B:29:E8
X509v3 Authority Key Identifier:
keyid:DC:56:53:CF:B0:A4:EE:54:52:5E:AE:F7:B3:70:B4:CB:D9:AA:07:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FZTz7Ck7lRSXq73s3C0y9mqB4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6f:78:76:1a:72:d7:31:71:5e:92:bd:cf:76:94:b7:c2:95:
46:8b:4d:f0:25:33:3a:2d:27:2f:41:9f:3d:c3:6e:4b:ab:83:
45:d2:f3:4f:11:87:4c:e5:87:79:33:09:7d:a2:e9:23:6d:03:
b3:2a:37:d9:1b:a6:80:a5:23:c7:4b:6e:fd:96:09:08:53:3a:
18:69:9c:ab:17:ed:4f:58:5d:6e:cc:70:21:35:04:80:30:3d:
cc:85:36:d5:58:5a:8b:46:7b:2f:ed:fc:c1:e6:46:c3:9c:4b:
62:bc:1a:78:af:16:c0:93:7c:20:b4:cb:3e:f6:74:1a:46:cc:
0f:50:10:1a:24:09:98:9f:32:e3:9e:45:e6:3b:e1:8a:8a:8e:
69:fd:5e:92:01:d8:c4:eb:dd:c4:50:69:b3:e9:c8:af:b3:80:
8f:49:41:b8:0f:a0:d4:08:b2:94:72:c3:26:8b:0e:f1:81:57:
a6:04:65:07:d2:19:0b:58:46:c5:b9:4c:a6:ac:1b:12:5a:ca:
7a:b6:7a:c7:a0:18:de:65:09:9f:15:f6:ad:48:61:a3:49:74:
07:84:b8:61:4d:9c:dc:38:c7:2b:92:68:cb:03:23:76:49:5d:
49:2c:94:38:55:0b:76:4b:3d:b5:0d:0f:58:b7:00:20:ae:50:
e7:bf:ed:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:56:20 2026 by rpki-client