Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
File: 3XF0IQf16FBis-CuZa-kuuZw4Es.mft (raw, json)
Hash identifier: RO5mAozPLfKzCPyWHF+vSlesNxGhXuT1makqBzpe78Y=
Subject key identifier: 8D:E9:42:16:06:31:44:34:A6:F6:76:02:DB:51:80:B7:D4:03:02:FE
Authority key identifier: DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B
Certificate issuer: /CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
Certificate serial: 01A0CD10D0227E6DE857CF8255C72E7DD9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
Manifest number: 08EA
Signing time: Wed 23 Sep 2026 07:00:26 +0000
Manifest this update: Wed 23 Sep 2026 07:00:26 +0000
Manifest next update: Thu 24 Sep 2026 07:00:26 +0000
Files and hashes: 1: 3XF0IQf16FBis-CuZa-kuuZw4Es.crl (hash: IhHhBpw3m5pYz6onGglWtjGz/KAGbPGi8sUEJsguOTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:d0:22:7e:6d:e8:57:cf:82:55:c7:2e:7d:d9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
Validity
Not Before: Sep 23 07:00:26 2026 GMT
Not After : Sep 24 07:00:26 2026 GMT
Subject: CN=8de9421606314434a6f67602db5180b7d40302fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e1:a2:c9:9c:2b:cf:72:7c:ed:42:49:60:8e:
2d:4d:f9:ad:ef:81:33:7b:1b:69:65:13:63:7e:2d:
d2:11:2c:ee:12:44:00:1c:e9:12:4d:32:f1:4e:b4:
9c:98:62:19:eb:9d:44:62:10:b9:fc:f5:33:c7:16:
20:3b:35:7c:68:dc:50:07:a4:33:68:fa:3c:19:be:
d0:dd:c8:72:14:1c:46:75:eb:b3:35:23:b6:22:05:
21:db:cc:23:27:6e:42:55:46:71:b8:d2:e0:2f:70:
3d:e2:9a:6e:08:61:90:a6:ee:b7:8b:a9:3c:57:54:
12:a3:99:1a:67:a0:db:5c:52:2e:3e:14:60:91:0a:
07:fc:be:9b:6e:73:15:1c:75:31:68:ad:b7:a8:b4:
b6:1e:40:2f:64:95:c0:87:ef:b2:5c:00:97:4b:9c:
f4:23:5c:c4:61:b4:ea:84:fd:41:d0:0e:48:6f:21:
69:52:73:ba:15:c1:d0:a7:f6:7e:57:0f:12:8a:47:
a9:33:b6:91:04:69:12:4c:18:09:2e:13:94:0d:9f:
f9:0d:df:95:39:f7:db:aa:e3:93:26:3a:07:ee:55:
c7:c5:3a:b2:09:f2:1e:51:26:79:28:1c:e4:f3:ce:
d7:c5:d0:0d:c7:52:05:30:4d:fe:70:2e:e3:5d:ca:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E9:42:16:06:31:44:34:A6:F6:76:02:DB:51:80:B7:D4:03:02:FE
X509v3 Authority Key Identifier:
keyid:DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b0:bc:5d:49:c8:9b:ec:ab:ad:49:50:40:76:62:da:31:28:
6c:36:95:7d:5c:a0:23:da:50:98:ba:29:9d:04:37:dd:c3:e8:
fa:4a:2b:f0:09:82:ca:d4:0e:c7:eb:e7:db:86:13:d9:37:86:
14:e5:91:2c:ed:72:1e:51:ef:63:d6:ff:8c:7d:d8:e0:dd:9d:
f2:6d:a2:6a:0d:94:93:a4:3b:b5:2c:86:eb:21:f9:5f:75:86:
fd:af:96:c7:9a:3a:6d:eb:e2:7a:1a:3f:29:f3:30:b6:4b:51:
06:0b:9d:fa:69:ff:5e:da:56:99:cb:76:b2:be:98:6c:77:4e:
da:6f:d2:3a:2e:6f:67:da:63:27:c0:c6:84:d0:92:5f:02:fa:
3b:35:b2:9d:45:ef:84:df:a8:b0:28:e6:b4:51:fc:04:2d:ef:
d8:51:f5:d6:39:ee:6a:bf:39:b3:f5:eb:47:ed:b2:bd:6f:50:
15:65:fa:72:81:d6:e4:db:ff:0f:9a:37:a0:bc:20:98:ac:f5:
03:be:d8:10:55:f7:a0:90:b4:a8:09:cb:11:ee:bf:e4:b3:83:
54:ca:09:fb:30:d8:09:7d:f3:92:6a:d4:c4:2c:03:a7:94:30:
70:73:6e:92:d2:a0:02:98:de:b3:13:a8:27:13:96:4f:c6:32:
65:6c:45:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:46:41 2026 by rpki-client