Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
File: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft (raw, json)
Hash identifier: 0dAYlVKlHugr8OrHIjMIgkrQqZSjh8bCDQUomNsc/oU=
Subject key identifier: DB:C5:B3:59:DC:A6:42:52:25:01:E8:85:87:4F:E1:0C:6E:C6:C1:3E
Authority key identifier: DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
Certificate issuer: /CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Certificate serial: 01A0CD7EB05676E3322B0B108C6169F69DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
Manifest number: 0426
Signing time: Wed 23 Sep 2026 09:00:26 +0000
Manifest this update: Wed 23 Sep 2026 09:00:26 +0000
Manifest next update: Thu 24 Sep 2026 09:00:26 +0000
Files and hashes: 1: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl (hash: euTWlU7UK6m1y5B4TMREsC+79T1mIrqygrPzwEnxvo4=)
2: 45LoXLoxcInpku_THY00cz-VRl0.asa (hash: iUXxUQdMIOxiR9iMkASzSiuuJ2DU2UhVyU2ts5cW1eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:b0:56:76:e3:32:2b:0b:10:8c:61:69:f6:9d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Validity
Not Before: Sep 23 09:00:26 2026 GMT
Not After : Sep 24 09:00:26 2026 GMT
Subject: CN=dbc5b359dca642522501e885874fe10c6ec6c13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:fd:ca:64:81:d4:77:71:17:05:ca:98:a3:
a6:83:06:64:46:7e:c7:22:27:3c:8f:0a:67:bf:00:
7b:ea:fb:f0:3c:a8:79:85:38:ce:a0:d6:2a:a3:d8:
0b:b9:a8:de:d0:6d:bf:5c:8e:a8:a1:2f:3a:67:57:
7f:ca:53:6f:30:30:39:23:59:ea:79:fd:a6:43:82:
58:00:cd:c8:df:dc:a1:ba:02:61:0b:7a:f9:5b:34:
45:84:9f:fd:b9:9d:06:a9:92:19:da:eb:6e:81:07:
bf:ea:3f:d1:8a:0b:ff:db:e0:4c:f8:55:48:be:64:
5e:27:a5:f8:8f:19:a4:1f:96:86:44:af:93:f4:27:
47:75:af:41:35:01:18:21:ca:47:2d:b8:98:bc:5b:
6c:c4:9c:06:1d:af:84:93:05:41:d0:e4:26:9a:08:
5c:8d:60:e8:84:2b:e2:82:5a:a7:57:d1:6b:a7:eb:
0d:35:83:88:8b:99:ec:7f:f7:fe:9c:04:2f:ad:d3:
b6:09:39:0b:d6:82:ee:5e:a3:59:ce:19:50:0c:34:
78:0b:b8:6d:17:36:65:e6:8d:2e:b2:36:10:4d:54:
ce:f6:82:42:62:c4:0e:9a:3d:f8:f5:08:cc:09:bb:
2a:7e:c1:57:db:80:af:e2:73:30:02:e7:78:73:20:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C5:B3:59:DC:A6:42:52:25:01:E8:85:87:4F:E1:0C:6E:C6:C1:3E
X509v3 Authority Key Identifier:
keyid:DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5d:e9:83:45:e5:08:71:09:d6:4c:dd:3a:e4:c0:94:20:5b:
32:62:8f:2b:a6:ac:41:97:0e:0f:06:e5:fc:96:6c:fe:a1:3d:
10:db:e7:aa:3b:aa:e5:b8:be:0c:cd:31:05:01:df:da:68:f4:
35:63:e1:6b:fc:b6:bc:b6:7a:d7:99:98:06:25:1c:2f:de:e0:
a6:da:13:59:42:23:6e:4b:f2:c4:5c:cf:e3:59:93:ea:94:c7:
11:cc:23:6a:0e:d0:60:52:00:32:a8:27:b2:df:29:07:fc:f4:
7c:98:a0:e1:ad:06:b7:a9:0e:ef:63:65:ed:48:a4:f6:9e:4b:
84:bd:f8:0f:41:55:6b:7f:d0:f2:d9:75:17:bf:0d:bd:c6:02:
f6:4e:12:c3:9d:87:18:ac:ef:a3:33:c4:09:2d:2d:c8:d0:3a:
ab:cb:0b:9d:b0:15:f9:c4:0b:ae:5e:cf:ec:5e:b3:d8:5b:b0:
5f:1e:b8:2e:4c:26:17:fe:65:59:ac:83:56:46:33:cc:77:d8:
a7:8f:dd:9e:22:cc:31:eb:0c:5b:53:3e:58:15:01:9d:31:0c:
28:27:be:41:bf:09:f4:d5:a1:56:7f:01:18:8c:d7:3b:46:7d:
79:13:d4:11:de:b7:73:f1:21:98:03:83:d9:21:a3:39:f5:88:
26:b4:a5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:08:39 2026 by rpki-client