Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: 7iyq082km4ajDDKyZHQ9l6WG2JThCTpL87Vv4d1gv2A=
Subject key identifier: 30:49:F4:0F:D5:52:53:A9:55:65:A9:2C:C7:B3:A7:9E:BF:B8:8D:A1
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 01A0D34AA40C90AF1ABB0531CF0ABB905CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 12:01:19 +0000
Manifest this update: Thu 24 Sep 2026 12:01:19 +0000
Manifest next update: Fri 25 Sep 2026 12:01:19 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: sb1aQZKi8+Y1hu/qp1UzzvmrVQSiG+ybCjG+TUKDz5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:a4:0c:90:af:1a:bb:05:31:cf:0a:bb:90:5c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: Sep 24 12:01:19 2026 GMT
Not After : Sep 25 12:01:19 2026 GMT
Subject: CN=3049f40fd55253a95565a92cc7b3a79ebfb88da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:ba:a9:7c:9f:82:42:67:e6:0e:ca:f8:0c:
00:79:56:c6:0a:8a:00:ce:d9:4d:e7:0b:1d:01:ab:
a7:00:ba:fd:f5:5c:31:25:82:3e:18:78:3a:66:f9:
66:27:6d:20:fd:d1:f3:81:ca:32:7d:3d:c7:26:d0:
da:31:ec:4b:f2:9d:e4:6e:5d:cf:50:9d:49:70:34:
29:0e:c4:c7:ac:c9:e8:77:57:83:07:30:9b:1d:56:
24:91:4f:2d:37:e9:cc:9c:00:6e:1e:89:b5:22:90:
09:ed:6a:01:d9:82:7d:dc:29:3a:29:cb:38:69:10:
9a:54:ce:9e:3d:b7:c1:e7:40:62:f3:35:0c:b2:d2:
0b:d1:19:0d:2c:19:51:f0:0d:4b:7b:b9:96:0b:8e:
b5:59:66:27:7b:ce:f1:20:86:55:74:70:fe:6d:c1:
15:72:f6:3c:da:13:56:ca:f8:08:f1:04:6b:4a:62:
97:62:94:07:5b:7c:a3:13:a2:9f:63:6b:22:93:20:
9f:93:27:1a:ab:9a:fd:81:ae:52:63:26:60:f6:23:
58:ae:d4:8b:5f:e0:d2:78:61:05:77:e8:ec:29:26:
ad:97:80:f9:ba:23:21:05:f3:e0:a7:d5:b1:d8:73:
8a:03:e6:0f:c9:5b:ed:de:45:ee:13:57:3e:82:c2:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:49:F4:0F:D5:52:53:A9:55:65:A9:2C:C7:B3:A7:9E:BF:B8:8D:A1
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c5:72:04:ad:fb:3b:c9:15:59:a5:de:72:63:af:18:8b:6f:
e6:d7:27:44:c9:b2:b9:43:07:28:5a:fc:8f:2a:dc:4e:3f:e6:
77:9c:28:74:ba:2c:f8:fa:d2:1e:75:56:57:55:8a:75:0d:25:
72:e4:15:8c:bd:90:0d:61:73:74:b2:3e:68:f7:2b:51:40:43:
6f:9c:cf:13:da:f2:f8:6a:52:7a:87:c1:61:6f:a5:49:50:ae:
f3:a3:53:23:8f:df:91:ab:47:26:1f:fa:ea:c7:f2:a9:84:71:
c3:48:c0:a5:e3:eb:f9:88:59:a3:9f:7e:f4:0a:1f:a6:fb:19:
d6:e5:65:a9:cf:29:4f:10:46:64:80:e8:c5:76:ae:1e:fa:cc:
e2:a3:3e:03:bc:7a:2c:67:54:7a:94:5e:2c:d6:c3:c3:5f:70:
f8:95:2a:9d:ab:21:14:21:1e:f6:9a:d0:9a:f2:25:5d:6b:e3:
15:06:18:d9:cb:40:88:44:65:79:ff:dd:ec:0e:e7:6c:40:50:
82:99:8e:5a:48:79:f9:16:7b:cd:7a:75:7e:85:5a:2b:b1:09:
e7:a2:24:54:e3:b4:28:cf:93:ea:de:f2:87:67:0f:34:8b:c8:
d1:ae:3d:7e:b5:1d:80:0b:bd:19:c3:36:d5:b4:2a:dc:14:e6:
16:e9:ee:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:16:03 2026 by rpki-client