Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
File: 3q91C1wrlTnZblZJdyr34Q7-D-o.mft (raw, json)
Hash identifier: 3+HhhzA/FBp7+hSSFUC8koECQ7O8ST0utLAETU9siIw=
Subject key identifier: D1:16:4A:B0:08:2B:0E:F4:CE:79:1F:19:14:3B:6B:5B:28:C9:2A:79
Authority key identifier: DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
Certificate issuer: /CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Certificate serial: 01A10BEFCF6B5BEB9C627450437A17B94FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
Manifest number: 111B
Signing time: Mon 05 Oct 2026 12:00:27 +0000
Manifest this update: Mon 05 Oct 2026 12:00:27 +0000
Manifest next update: Tue 06 Oct 2026 12:00:27 +0000
Files and hashes: 1: 3q91C1wrlTnZblZJdyr34Q7-D-o.crl (hash: 84oa5Z9km82q1iGLWtc6+iRXYWFNbeAMsS1Q8u/aldQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:ef:cf:6b:5b:eb:9c:62:74:50:43:7a:17:b9:4f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Validity
Not Before: Oct 5 12:00:27 2026 GMT
Not After : Oct 6 12:00:27 2026 GMT
Subject: CN=d1164ab0082b0ef4ce791f19143b6b5b28c92a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6f:2b:2e:a0:94:9a:d9:7e:a9:c3:49:f1:54:
f9:51:47:95:0b:bf:cb:61:44:9e:fd:18:0e:3d:98:
20:a6:62:30:ab:97:85:9f:1a:c8:89:e3:c3:b7:48:
7e:48:18:49:57:2a:d7:fa:2e:dc:fb:e3:12:4c:da:
14:1a:15:62:ea:17:b8:23:77:0b:62:28:39:5e:07:
65:e2:43:79:45:91:b1:35:61:9a:f8:52:fe:41:c5:
ff:9c:59:6c:5d:fc:f7:94:35:41:01:b4:e2:b3:d8:
6d:5f:ab:03:53:04:e0:aa:3f:11:63:3c:ba:8e:bd:
3a:79:eb:97:0c:27:ab:08:9c:43:74:07:08:ee:90:
83:40:ee:65:50:a1:c0:ee:88:2e:89:28:ef:f0:d7:
21:a9:73:af:37:50:26:47:e1:e4:52:d8:ea:d3:7c:
99:eb:de:0d:4b:1c:40:84:2d:23:aa:2e:23:d3:57:
81:7e:8c:00:fe:1a:56:80:76:09:17:f7:f3:d9:34:
f3:19:1c:e8:40:62:b9:8a:d0:29:1b:f3:22:fb:1e:
c3:84:c0:1e:a0:63:c2:9d:78:51:0e:0f:0d:26:77:
d7:c6:5f:20:ad:b3:13:dc:93:1a:75:32:0b:e3:2d:
1f:e8:35:07:82:ee:7a:b8:c7:e2:ab:2f:eb:fd:7b:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:16:4A:B0:08:2B:0E:F4:CE:79:1F:19:14:3B:6B:5B:28:C9:2A:79
X509v3 Authority Key Identifier:
keyid:DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:00:16:1f:c6:f4:71:34:75:11:07:0e:e4:e7:75:60:06:07:
97:64:1c:04:82:2d:6e:91:d2:0c:59:3d:62:4f:2e:8a:0c:6a:
95:4a:d5:71:9b:6f:65:1b:5a:8d:e3:7c:12:d9:7a:66:b7:4d:
44:bb:dc:6b:b2:69:cf:1b:70:e3:02:07:61:d5:f9:4c:91:d4:
89:e0:ba:b4:86:ef:8b:ea:66:e5:80:d6:f9:28:c9:a6:5d:4a:
f8:a3:87:b0:75:6b:1b:dd:34:96:94:b3:0c:c3:8f:1f:c8:7c:
fb:86:87:e2:04:00:b1:f1:e9:6f:70:66:57:51:66:05:e3:30:
69:e6:9a:b5:9e:a8:3d:19:5c:81:09:69:34:a4:d0:ad:c9:17:
fc:e1:4d:22:7d:b7:dc:83:9e:b2:e4:ff:ad:80:6f:91:05:79:
c7:3b:94:e1:29:b6:b9:af:fe:23:5e:a6:97:41:2a:60:80:02:
93:b8:26:2e:a1:bc:39:76:c6:a2:71:65:7f:87:ca:79:82:84:
3b:b3:46:45:10:4e:fb:33:65:36:45:55:f7:29:cf:b1:aa:78:
4b:ae:bc:66:14:95:2a:87:3f:35:7e:df:b7:28:fb:83:cb:12:
bb:fa:9b:ec:5a:3d:f3:37:08:c6:56:7d:7f:e6:be:d2:cc:b7:
95:13:6b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 20:48:40 2026 by rpki-client