Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: mCnfFbCtMADj+5lGdPd+Cqoc5sd7yGr/sWXxb731Mqs=
Subject key identifier: 55:C9:9C:57:90:FB:1E:F3:63:B4:CD:89:5B:57:71:E6:64:9B:F5:E9
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 019D3451AF3A3B1416AA1A0CF2E2AF6594A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 188A
Signing time: Sat 28 Mar 2026 12:01:01 +0000
Manifest this update: Sat 28 Mar 2026 12:01:01 +0000
Manifest next update: Sun 29 Mar 2026 12:01:01 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: UNEwYiWHmtgBEsJFZELp80wLKdZmbO4rwyAvleA4p5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:af:3a:3b:14:16:aa:1a:0c:f2:e2:af:65:94:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: Mar 28 12:01:01 2026 GMT
Not After : Mar 29 12:01:01 2026 GMT
Subject: CN=55c99c5790fb1ef363b4cd895b5771e6649bf5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:66:46:dd:19:6e:c7:a6:b2:5a:5e:26:8b:
c2:d4:fc:ac:16:4e:39:da:e2:00:9a:6e:c4:ff:34:
2c:9e:f1:42:9b:9f:82:bd:bb:26:88:cf:b1:5e:2a:
9e:2a:d8:c8:ce:b8:93:ab:a8:96:de:25:6e:1d:28:
10:aa:23:a7:4d:ff:bc:d5:67:f5:f5:96:93:e6:9d:
7e:1e:07:a6:0e:d0:0a:1f:8f:1e:a3:69:ff:30:b3:
b2:6f:8e:c0:ac:8f:34:d7:24:be:3b:ae:36:9f:c1:
43:ef:9e:7d:89:48:87:a0:09:90:eb:77:11:9f:32:
04:1a:ac:20:51:61:df:6a:02:0a:9d:1d:24:49:dc:
f2:59:b8:72:6b:8b:ad:2f:3b:1e:6f:50:ef:85:14:
cb:ad:f1:0d:bb:2f:aa:4a:01:b1:f7:da:26:28:cc:
45:8f:f7:d8:5b:e3:44:11:f3:9e:ba:44:16:71:84:
c5:43:d2:20:27:88:01:71:af:2d:01:a5:9c:ca:3c:
14:97:30:35:16:e2:e8:d3:8c:5a:2f:33:ac:23:22:
38:34:4b:4e:18:9b:f4:db:2d:0d:26:0e:93:b7:5e:
3a:31:37:d6:fc:9e:1d:14:48:03:a3:64:1c:90:9f:
d0:34:08:c3:74:bc:94:c8:88:76:9e:05:eb:16:41:
fb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C9:9C:57:90:FB:1E:F3:63:B4:CD:89:5B:57:71:E6:64:9B:F5:E9
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:48:c7:a6:78:cc:af:80:f0:b9:c4:ac:b3:08:26:e2:ca:1c:
87:d0:d6:00:e7:08:00:a9:1a:9d:54:b8:5c:c3:91:a1:1a:08:
d6:6a:17:db:bf:d3:58:96:55:ef:92:69:5c:a5:54:14:de:de:
d1:f4:a7:92:db:36:53:66:20:71:19:8c:d4:ee:97:66:c9:03:
f9:0f:37:30:e7:9a:09:dc:51:99:96:80:59:af:93:99:19:27:
26:03:22:4d:8a:b1:aa:27:37:61:1f:dd:d7:fd:13:3d:90:f8:
24:a3:e3:3c:ce:77:ec:db:78:56:0d:07:b3:63:d5:71:6d:14:
b2:e2:c5:28:fe:09:24:fc:e2:07:39:60:a4:cf:92:bd:6d:0d:
c0:08:90:13:91:07:51:3a:eb:a9:99:da:d1:73:6b:55:3b:9e:
54:d1:0f:cf:7e:56:24:82:e8:f9:07:d5:ae:1d:59:86:2c:5f:
c7:7a:bf:92:c5:b1:7a:06:8a:4f:9e:11:a6:4f:70:2f:0d:28:
c6:16:9f:ee:a3:85:25:e6:32:87:82:ab:49:da:8b:a6:00:8d:
ac:d1:7f:07:d2:e1:77:0f:6c:28:79:98:7a:d5:23:dc:6b:57:
6c:ab:b1:32:9e:d7:80:2b:b1:6d:7d:70:8b:c3:a5:e4:c7:56:
b2:74:2b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:16 2026 by rpki-client