Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
File: 3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json)
Hash identifier: +PMfuRAgtHMP40r6UVfvO1DjYzdgbkOMijrRB9L4SyU=
Subject key identifier: F5:90:63:CA:0C:3F:C5:E8:4A:9E:94:32:54:A4:F9:B1:2C:D4:03:60
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 01A0CA7D60186D26A5BCA827839C6B108010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
Manifest number: 1A6E
Signing time: Tue 22 Sep 2026 19:00:09 +0000
Manifest this update: Tue 22 Sep 2026 19:00:09 +0000
Manifest next update: Wed 23 Sep 2026 19:00:09 +0000
Files and hashes: 1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: npgMs00Q3rGG68+Py5U2qAMlD5kS1/ww1Fl7Ry7L9Hc=)
2: M2jXc0NhZkPSY8HF_AES6Z2QgY4.roa (hash: IaTjBLUpeVPvAQsCn4UJQ4zSezVEpOlxAezx7/pK0RA=)
3: Sq-ujidV3DDsRqOSLpPxqfz8Glg.roa (hash: 6PSBv//QP4qZRXvWnrG7tint+pXX8yUVg9OL2IFvirQ=)
4: diKa-1w5ElMvlcPYjK3PRVqYmi4.roa (hash: ZihAuU6a+sRKBgVaTd6H1m0T3csQ2DHl/3OILvkWxBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:60:18:6d:26:a5:bc:a8:27:83:9c:6b:10:80:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Sep 22 19:00:09 2026 GMT
Not After : Sep 23 19:00:09 2026 GMT
Subject: CN=f59063ca0c3fc5e84a9e943254a4f9b12cd40360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:c3:e5:b6:fb:2a:c2:d9:9f:88:46:c9:60:
27:d5:e9:f1:20:ff:40:e9:a8:e4:89:45:62:ce:18:
c5:61:19:7b:da:bb:6c:52:67:63:a0:3f:2e:53:f1:
f4:7c:42:66:76:49:59:43:fc:80:2b:ce:b1:07:bd:
1a:f0:1e:74:50:02:a2:26:8f:d7:60:54:6a:c3:b6:
ea:c6:4a:47:38:d5:75:12:bf:e0:62:a8:fd:11:16:
7c:3f:a0:87:b8:62:c3:08:d1:32:50:e8:a9:f5:3b:
9d:36:d6:1a:b7:5a:1a:b2:06:bf:e0:9e:dc:6a:28:
de:04:1d:f1:5a:95:79:1b:57:b6:f8:d3:64:29:0d:
94:29:a1:a7:90:2d:9a:61:1e:47:f8:55:ad:6d:5c:
72:08:ca:2a:6d:1a:0d:8d:ee:7e:29:96:79:ae:9c:
bc:67:3d:91:26:a2:f9:4f:ef:cc:9e:df:a8:ee:2a:
96:81:08:eb:b2:e2:c9:2c:82:09:4b:65:f6:51:df:
b0:eb:f4:62:fe:5b:d0:bf:28:74:9f:b1:88:05:39:
b3:a8:36:88:0c:f5:5b:06:c9:97:89:3c:d1:a9:9e:
d0:6b:96:36:16:06:b4:40:1f:10:19:ef:59:7a:78:
a0:43:b9:01:9a:16:88:79:e8:10:a1:41:d3:dc:e4:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:90:63:CA:0C:3F:C5:E8:4A:9E:94:32:54:A4:F9:B1:2C:D4:03:60
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:94:ab:9d:8f:a1:82:3a:8f:22:f7:03:b9:b9:32:fa:50:24:
5b:02:54:a5:3a:1b:c0:b6:5f:c8:04:fb:0e:49:03:85:e1:3e:
d8:d0:9b:25:1f:57:ff:47:ca:31:6f:85:78:37:da:b0:b8:27:
bb:b4:b6:ee:ae:b6:d3:39:65:e8:62:02:c4:25:8d:7d:05:73:
4a:e7:0c:67:3e:0f:65:87:9c:b4:19:4e:42:6f:60:24:6a:b5:
6d:63:68:3f:b2:4c:73:33:d5:68:4c:9b:5b:40:9b:0b:50:f9:
cd:ac:fb:f7:e9:de:46:45:2d:70:60:86:c0:b5:ac:97:38:41:
21:2c:79:f3:85:cf:4a:fb:80:fa:93:dc:25:d9:6d:2e:a7:44:
5c:b9:15:43:ff:dd:1f:ca:92:63:7f:2f:ae:e6:f0:c0:0b:ce:
52:30:28:11:08:ac:91:a5:12:7e:54:a3:38:16:0d:46:26:7a:
47:3e:52:19:7b:69:d3:c5:96:b2:c1:96:a2:e6:c4:33:32:d2:
64:5e:12:85:3a:85:7e:50:07:94:56:fc:f1:c0:af:9c:ff:12:
c3:c9:ea:7c:06:6f:8c:82:a2:89:98:02:df:bb:d2:c0:8e:fc:
ac:c4:af:a9:12:52:47:b1:07:e7:f8:63:9a:b3:a2:ab:3c:9d:
7c:c3:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:39:05 2026 by rpki-client