Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
File: 3q91C1wrlTnZblZJdyr34Q7-D-o.mft (raw, json)
Hash identifier: AzkKnzWhrP4ZshPU+h+sS4v8MEEZt++WbAp6ysi3Yt8=
Subject key identifier: A4:FC:AB:CC:46:FF:F4:64:97:B9:5B:C8:B0:A2:BA:42:44:0F:4E:5E
Authority key identifier: DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
Certificate issuer: /CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Certificate serial: 01A0F8A9D437024B1B949843EF92838ECB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
Manifest number: 1111
Signing time: Thu 01 Oct 2026 18:11:14 +0000
Manifest this update: Thu 01 Oct 2026 18:11:14 +0000
Manifest next update: Fri 02 Oct 2026 18:11:14 +0000
Files and hashes: 1: 3q91C1wrlTnZblZJdyr34Q7-D-o.crl (hash: JrwTGO9nZ9YZoI63CNcz0/kaXM4GNFUzU+GejnOHVCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:a9:d4:37:02:4b:1b:94:98:43:ef:92:83:8e:cb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Validity
Not Before: Oct 1 18:11:14 2026 GMT
Not After : Oct 2 18:11:14 2026 GMT
Subject: CN=a4fcabcc46fff46497b95bc8b0a2ba42440f4e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:46:8d:51:dc:4f:c5:02:86:62:27:dc:87:
0a:fd:d2:ab:98:81:86:7e:7e:b1:99:f0:98:fe:73:
64:c5:89:5f:4b:3e:ce:d3:a1:1e:dd:31:bd:07:d3:
af:e0:78:ef:50:15:94:c8:ab:11:e0:ff:a7:66:bf:
18:c9:fd:df:8c:a5:83:b9:17:79:3c:d7:c3:4f:c9:
fc:d8:2f:46:c3:54:86:58:31:b8:b1:79:4c:cd:02:
d2:84:57:f5:28:1b:5a:5b:3a:a8:85:58:aa:ff:5e:
18:dd:eb:3e:90:23:63:03:a7:8a:2b:3d:27:a4:06:
b6:72:40:45:ab:e8:79:f3:74:93:0b:7a:fb:23:89:
59:ba:0a:d7:33:c7:e5:a8:33:a7:dd:b2:d8:4c:e5:
83:37:c1:f9:ea:ca:23:c3:50:0c:dc:87:eb:75:17:
1b:28:3b:a6:55:ed:66:ec:6a:46:09:3b:0c:b8:ea:
4d:2a:76:d2:a9:90:20:1e:fb:ce:41:89:7e:1f:09:
97:23:5a:64:54:23:8a:79:9a:8b:e2:e2:49:4f:b7:
f0:02:70:57:4c:46:3a:3e:38:12:d6:d5:af:aa:cb:
8f:b4:34:71:0d:55:c3:4f:a3:f9:61:50:8e:1f:22:
00:f8:da:19:61:9b:bd:f6:31:d3:11:b0:6b:8e:7e:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FC:AB:CC:46:FF:F4:64:97:B9:5B:C8:B0:A2:BA:42:44:0F:4E:5E
X509v3 Authority Key Identifier:
keyid:DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:16:6e:a6:36:f4:93:af:8e:6e:15:69:b1:c7:af:bd:25:a6:
1a:cb:f3:83:76:02:78:17:7f:8f:70:6f:4b:1b:a3:00:00:0f:
2c:47:17:1d:55:f2:4d:5a:75:00:65:ef:f2:84:fc:02:bc:05:
3e:6e:fc:33:ab:66:e8:e5:d2:6a:92:60:3e:ed:6a:85:ad:b8:
0f:c0:3b:cf:b9:ad:ca:8b:ea:94:bc:b1:d3:e7:c3:82:44:51:
a5:91:05:e1:d3:b1:56:3f:85:fd:7e:62:93:54:56:b9:03:bd:
3a:e4:cf:87:c0:22:ed:ba:9a:ef:c1:a7:a6:31:c0:a8:56:f5:
a6:db:d4:61:1b:7d:f1:7f:c2:63:d3:5d:a8:fd:9d:cd:9d:63:
f8:3b:88:94:7c:0b:e5:0f:be:35:ee:a1:d1:42:39:0d:18:ef:
be:e6:7f:32:66:10:13:21:a4:4d:cf:e8:67:21:83:31:28:70:
b6:c7:6f:b1:17:ab:af:af:91:e2:ea:62:ba:5a:9a:df:68:0e:
b0:05:7b:43:d2:c9:a8:44:71:4a:df:b0:ea:d0:d9:cc:36:03:
1e:4d:0d:e9:3d:09:03:0c:1d:0f:2e:6c:cc:04:74:ad:dc:49:
a6:d0:ca:56:e7:e3:6c:bc:ea:e1:27:f2:3f:f0:b3:60:a8:b8:
64:bf:8b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 13:44:12 2026 by rpki-client