Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/647d89-c04f-48cc-9d7b-a221facafde0/1/3MypmTR5NwhDBa_GrOgSz-ccUmU.mft
File: 3MypmTR5NwhDBa_GrOgSz-ccUmU.mft (raw, json)
Hash identifier: NKaz54BtF66fQBzQnfaVM139VhhsRiTHNxQNAS7TTJQ=
Subject key identifier: DB:7C:30:EC:E5:98:AB:1A:C3:95:7D:9C:46:C1:A6:A3:A1:41:40:4D
Authority key identifier: DC:CC:A9:99:34:79:37:08:43:05:AF:C6:AC:E8:12:CF:E7:1C:52:65
Certificate issuer: /CN=dccca999347937084305afc6ace812cfe71c5265
Certificate serial: 01A0CF35D7DC2DC58252B87D75D52A7CDC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MypmTR5NwhDBa_GrOgSz-ccUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/647d89-c04f-48cc-9d7b-a221facafde0/1/3MypmTR5NwhDBa_GrOgSz-ccUmU.mft
Manifest number: 46
Signing time: Wed 23 Sep 2026 17:00:07 +0000
Manifest this update: Wed 23 Sep 2026 17:00:07 +0000
Manifest next update: Thu 24 Sep 2026 17:00:07 +0000
Files and hashes: 1: 3MypmTR5NwhDBa_GrOgSz-ccUmU.crl (hash: OpfFBt1Q1uXzgbcaNG3gUHMJRTei/Y9QqLl6Wo8VTp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/647d89-c04f-48cc-9d7b-a221facafde0/1/3MypmTR5NwhDBa_GrOgSz-ccUmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/647d89-c04f-48cc-9d7b-a221facafde0/1/3MypmTR5NwhDBa_GrOgSz-ccUmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MypmTR5NwhDBa_GrOgSz-ccUmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:d7:dc:2d:c5:82:52:b8:7d:75:d5:2a:7c:dc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccca999347937084305afc6ace812cfe71c5265
Validity
Not Before: Sep 23 17:00:07 2026 GMT
Not After : Sep 24 17:00:07 2026 GMT
Subject: CN=db7c30ece598ab1ac3957d9c46c1a6a3a141404d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:8a:e1:c8:c9:de:35:bd:8e:29:0a:81:fb:
41:97:5f:fd:a8:ed:8d:7c:69:29:b7:ce:8e:6a:2e:
74:0e:bb:84:b4:67:6f:e9:63:87:58:14:c6:ac:be:
e2:70:5f:c1:7c:df:cd:4f:1b:8b:f4:89:05:9d:40:
1f:c3:70:8f:fd:d6:56:69:0b:47:89:31:26:b9:fe:
f0:6e:eb:df:ee:f8:7b:f3:3b:62:3b:00:05:b1:42:
5b:ed:d8:e4:22:e2:b5:f5:b5:21:96:ca:5f:d3:25:
c8:c7:af:bb:49:34:11:f7:0c:0e:ba:b0:a6:8a:3b:
d4:0e:01:be:5c:3c:78:18:d5:da:cf:4c:d0:8d:e4:
05:e4:7d:18:60:62:6d:2d:04:22:5f:de:bb:2e:67:
a8:2d:e0:48:4c:dc:f7:11:da:d7:d9:38:ba:e2:75:
7b:01:bc:24:35:3e:82:fa:71:80:1f:da:84:54:61:
b8:1d:7b:8d:19:69:bf:e5:ea:0c:62:8c:23:f4:52:
47:1d:8d:9a:53:59:d2:27:b5:31:5a:e2:37:cd:f8:
a4:51:89:07:e5:8f:1b:c8:f0:c7:63:6a:7f:c7:2f:
45:b2:6f:df:ff:66:45:11:cd:99:f3:d6:ff:b1:16:
49:0f:1a:46:90:c9:7e:b3:d7:6e:e4:92:02:86:0a:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7C:30:EC:E5:98:AB:1A:C3:95:7D:9C:46:C1:A6:A3:A1:41:40:4D
X509v3 Authority Key Identifier:
keyid:DC:CC:A9:99:34:79:37:08:43:05:AF:C6:AC:E8:12:CF:E7:1C:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MypmTR5NwhDBa_GrOgSz-ccUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/647d89-c04f-48cc-9d7b-a221facafde0/1/3MypmTR5NwhDBa_GrOgSz-ccUmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/647d89-c04f-48cc-9d7b-a221facafde0/1/3MypmTR5NwhDBa_GrOgSz-ccUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:85:48:57:c2:ac:b4:c1:67:d3:01:d0:02:81:da:bc:48:e4:
89:d8:d3:11:6b:95:b5:90:aa:a1:d7:a2:c1:2c:91:45:19:81:
dc:65:d6:2f:6e:7e:a6:db:0e:be:b4:c3:f3:84:40:29:db:bd:
ea:24:7f:8e:78:96:4e:55:0b:a8:65:99:2b:29:50:5d:17:e2:
de:59:42:27:50:05:7c:01:99:4c:cc:a2:bf:b3:1e:73:24:c0:
e8:88:24:b7:67:b8:4b:cc:91:ab:c8:87:58:0e:27:6f:07:0a:
8f:da:2d:56:d4:91:93:53:2f:27:f0:21:79:53:8d:e5:9d:a4:
df:50:8c:aa:c7:69:9e:c3:21:2b:06:fc:98:74:79:a8:a1:b6:
25:54:91:9b:c7:30:ea:d0:2f:98:79:60:f6:8e:77:6a:14:0d:
3a:91:58:d1:70:50:a9:bf:fd:16:8e:25:95:10:7d:aa:69:29:
da:81:bd:d5:50:f6:29:64:b9:cf:61:51:3c:73:0b:0b:c7:76:
2a:6c:77:2c:f9:8c:80:bb:1d:1a:a5:83:8f:c8:b5:a4:73:b4:
59:33:e4:c7:93:29:c1:23:0b:81:e6:d7:4d:7d:78:b7:41:24:
18:eb:00:1d:1c:17:b3:7b:82:79:db:13:9f:07:34:e8:d8:36:
d1:30:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:59:59 2026 by rpki-client