Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
File: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft (raw, json)
Hash identifier: yXGaI+yWQHvlk9/n5IoGkO6VC1O7PaHXtI1JF1ZxfW8=
Subject key identifier: 90:85:42:0F:53:7C:DE:21:FD:3C:E3:C8:46:E7:AB:92:E7:BE:B8:9D
Authority key identifier: DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D
Certificate issuer: /CN=dd70c5f09b62683292fd9109e694713590281f8d
Certificate serial: 01A0E3993A9536A2F01CD4D02D1D45C603A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
Manifest number: 1A72
Signing time: Sun 27 Sep 2026 16:01:05 +0000
Manifest this update: Sun 27 Sep 2026 16:01:05 +0000
Manifest next update: Mon 28 Sep 2026 16:01:05 +0000
Files and hashes: 1: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl (hash: VEQkZdmWBgLKqBA/SNbEVw4q67McBjOpqzru4Ss8X4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:3a:95:36:a2:f0:1c:d4:d0:2d:1d:45:c6:03:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd70c5f09b62683292fd9109e694713590281f8d
Validity
Not Before: Sep 27 16:01:05 2026 GMT
Not After : Sep 28 16:01:05 2026 GMT
Subject: CN=9085420f537cde21fd3ce3c846e7ab92e7beb89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:e8:7d:f0:ba:c3:a4:65:da:c4:2b:be:68:
99:1f:da:38:d3:aa:d2:19:cf:f8:e3:91:a1:a6:25:
e3:03:29:ad:98:9b:8b:e7:90:1f:b9:95:7f:e0:cc:
83:c2:95:5b:eb:f0:8f:12:95:1b:ad:f3:50:85:ae:
73:1b:cd:ef:b0:80:1c:33:7f:d8:f5:e9:96:7d:11:
f2:07:7c:d0:d3:b1:bf:f2:5d:70:31:e4:3f:ea:c3:
53:ba:72:c1:b3:fa:16:4f:e3:50:18:82:fa:03:84:
c5:4d:52:db:e1:33:33:3d:4a:02:df:ce:01:dc:84:
3d:67:90:c3:2d:91:d9:84:03:b8:cc:c6:49:4b:33:
7f:2a:b9:01:38:6f:64:28:af:d6:56:08:3e:8a:89:
a9:07:0a:b6:d9:99:0c:56:f6:22:24:c8:79:46:21:
50:d7:0f:45:c6:4a:05:08:25:3e:e9:de:5f:21:a8:
fd:f4:66:d5:d5:10:b4:4d:48:23:f5:cb:f9:17:ca:
d1:20:81:15:d9:85:fb:33:d9:0e:f7:85:b0:4b:11:
42:a1:68:bb:73:2e:71:55:df:14:68:77:62:b0:29:
2f:ce:0f:41:eb:24:62:ad:b0:a9:e4:df:64:c2:ef:
c7:ab:19:17:ee:e2:07:3e:4d:ac:a7:dd:1c:57:b0:
fb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:85:42:0F:53:7C:DE:21:FD:3C:E3:C8:46:E7:AB:92:E7:BE:B8:9D
X509v3 Authority Key Identifier:
keyid:DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:58:40:b3:3c:cc:fd:8b:ef:d2:7d:7f:25:4e:99:30:75:7d:
36:87:8a:99:f4:65:95:46:7a:90:eb:6a:82:55:58:99:78:1c:
54:22:da:9c:19:fb:05:77:7d:c5:f4:09:93:40:09:ac:e4:fe:
93:99:21:47:e7:8e:59:22:f9:eb:3c:3a:3b:5a:b2:ff:00:b3:
69:92:11:a0:30:42:9f:52:0a:9a:db:a9:a3:ce:82:af:e2:34:
97:9e:8e:38:05:30:08:a5:59:dd:e4:2c:5b:64:62:a4:20:16:
4c:4b:42:04:9b:fd:ef:e7:0e:b1:18:f7:0d:09:9e:09:ec:1c:
ce:97:3b:2f:ae:97:07:cf:91:bb:74:af:3d:ea:39:fd:af:4a:
67:3b:b6:34:24:79:d1:66:91:2e:b3:fb:46:e2:31:d4:91:39:
1b:25:36:87:51:58:24:44:e7:44:24:bb:c3:3c:94:15:b6:df:
81:b3:8a:ab:8e:53:ea:25:89:64:b0:e0:03:24:1a:66:f2:61:
7d:d1:7e:a4:d4:c9:d3:89:98:ec:09:64:70:47:42:a2:a6:77:
a1:69:61:2c:1f:d6:4c:4a:67:99:c0:6d:83:9e:06:88:40:20:
0d:d1:4b:0d:17:0b:b6:f1:12:81:7d:96:f0:79:55:2f:4c:3f:
ee:89:2d:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjmTqVNqLwHNTQLR1FxgOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNzBjNWYwOWI2MjY4MzI5MmZkOTEwOWU2OTQ3MTM1OTAy
ODFmOGQwHhcNMjYwOTI3MTYwMTA1WhcNMjYwOTI4MTYwMTA1WjAzMTEwLwYDVQQD
Eyg5MDg1NDIwZjUzN2NkZTIxZmQzY2UzYzg0NmU3YWI5MmU3YmViODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0/offC6w6Rl2sQrvmiZH9o406rS
Gc/445GhpiXjAymtmJuL55AfuZV/4MyDwpVb6/CPEpUbrfNQha5zG83vsIAcM3/Y
9emWfRHyB3zQ07G/8l1wMeQ/6sNTunLBs/oWT+NQGIL6A4TFTVLb4TMzPUoC384B
3IQ9Z5DDLZHZhAO4zMZJSzN/KrkBOG9kKK/WVgg+iompBwq22ZkMVvYiJMh5RiFQ
1w9FxkoFCCU+6d5fIaj99GbV1RC0TUgj9cv5F8rRIIEV2YX7M9kO94WwSxFCoWi7
cy5xVd8UaHdisCkvzg9B6yRirbCp5N9kwu/HqxkX7uIHPk2sp90cV7D7nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCFQg9TfN4h/TzjyEbnq5LnvridMB8GA1UdIwQY
MBaAFN1wxfCbYmgykv2RCeaUcTWQKB+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1hERjhKdGlhREtTX1pFSjVwUnhOWkFvSDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNjc1NTctZDg5YS00ZWYxLWJkNjMt
YTdmY2FiOWFhN2FhLzEvM1hERjhKdGlhREtTX1pFSjVwUnhOWkFvSDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hNjc1NTctZDg5YS00ZWYxLWJkNjMtYTdmY2FiOWFhN2Fh
LzEvM1hERjhKdGlhREtTX1pFSjVwUnhOWkFvSDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVhAszzM
/Yvv0n1/JU6ZMHV9NoeKmfRllUZ6kOtqglVYmXgcVCLanBn7BXd9xfQJk0AJrOT+
k5khR+eOWSL56zw6O1qy/wCzaZIRoDBCn1IKmtupo86Cr+I0l56OOAUwCKVZ3eQs
W2RipCAWTEtCBJv97+cOsRj3DQmeCewczpc7L66XB8+Ru3SvPeo5/a9KZzu2NCR5
0WaRLrP7RuIx1JE5GyU2h1FYJETnRCS7wzyUFbbfgbOKq45T6iWJZLDgAyQaZvJh
fdF+pNTJ04mY7AlkcEdCoqZ3oWlhLB/WTEpnmcBtg54GiEAgDdFLDRcLtvESgX2W
8HlVL0w/7oktpg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:40:59 2026 by rpki-client