Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier: S10BuWD6Sq1PBHBES048CENO88xhBtgUp8vfw4qm6as=
Subject key identifier: BF:C9:94:20:A7:3A:CD:C6:3C:EE:04:2B:E4:A0:DF:D7:8F:21:BF:B7
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer: /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial: 01A0E8C189789CF0B533BF8DA446347AE8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number: 1733
Signing time: Mon 28 Sep 2026 16:03:12 +0000
Manifest this update: Mon 28 Sep 2026 16:03:12 +0000
Manifest next update: Tue 29 Sep 2026 16:03:12 +0000
Files and hashes: 1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: lHi7+IdKUL/ATc0VCKGpnTAnancmoeJYPp9ShihAa5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c1:89:78:9c:f0:b5:33:bf:8d:a4:46:34:7a:e8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Validity
Not Before: Sep 28 16:03:12 2026 GMT
Not After : Sep 29 16:03:12 2026 GMT
Subject: CN=bfc99420a73acdc63cee042be4a0dfd78f21bfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:9f:61:f2:16:ef:71:a4:8c:7e:36:77:3e:
57:9a:36:f2:ad:9b:92:7c:c4:46:ec:4b:06:cb:69:
52:f0:d2:c1:f2:34:81:42:e5:da:5e:bb:10:ce:20:
ff:d2:99:e7:d9:b2:98:7a:7c:b5:2d:4b:82:e3:8b:
fd:03:1b:ed:6b:73:f5:e6:39:29:20:94:bb:3c:b6:
ef:97:39:2d:2f:ad:0e:38:82:e5:5e:0b:77:1d:cd:
37:ce:20:72:62:e9:29:17:d8:49:aa:a0:95:7a:0d:
7a:da:42:16:52:c5:74:f4:1a:5f:7a:3c:c8:07:b7:
49:2a:01:1d:66:10:5c:32:c7:59:b2:2b:e3:a2:33:
cf:39:20:70:cb:81:64:b8:ea:b4:e1:4f:1a:01:7b:
a4:be:1e:76:69:42:a9:d5:c2:e5:fa:38:20:58:a3:
d4:d9:fa:76:59:a6:f6:d5:a3:1c:0d:19:9b:a2:3f:
8c:7a:b8:bf:c9:b8:7b:d6:f8:eb:b7:6e:20:12:56:
50:25:9d:7e:47:eb:42:18:3d:4e:96:21:1a:99:65:
52:d5:fe:19:0d:49:d5:e7:04:3e:60:34:ae:e8:0a:
03:ee:b2:b0:30:2a:12:0a:39:87:b5:ac:d2:a9:a6:
05:d5:d9:b5:35:3a:54:17:af:49:3d:00:93:ff:e8:
3f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C9:94:20:A7:3A:CD:C6:3C:EE:04:2B:E4:A0:DF:D7:8F:21:BF:B7
X509v3 Authority Key Identifier:
keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f6:92:11:e6:9a:8c:a7:97:df:4c:22:b9:e2:a1:d2:9f:0e:
aa:7b:39:66:f4:72:bc:69:7c:10:76:80:e1:30:c9:4c:e6:19:
ce:97:2e:a9:88:4e:b9:ef:85:e1:0d:d3:54:da:43:00:eb:06:
c6:d5:6e:9a:17:0f:ed:a9:03:af:93:24:d5:87:19:79:1d:43:
34:83:c5:43:c8:6a:5e:2c:32:72:0d:7a:a1:69:bb:e7:02:d9:
7f:d0:1f:ff:51:6e:ae:64:7c:2b:ce:af:87:72:59:45:79:12:
ce:a6:26:ba:20:ea:34:7e:5d:2d:73:16:af:9e:55:6f:50:51:
99:79:79:1a:9b:d3:00:73:35:c8:08:3b:d7:6b:d6:37:7c:ce:
f8:51:03:7c:2e:95:f1:53:82:fd:77:af:87:98:bb:9b:90:be:
da:a8:be:e1:8e:cd:d3:33:3f:26:b5:4e:c1:d4:c7:ec:c8:cc:
0e:6a:7e:58:bb:e5:c5:d5:5a:37:cd:f2:7b:be:7c:c8:78:49:
83:fe:9f:ff:71:f0:5f:1f:10:94:0a:dd:18:2c:3c:69:86:38:
60:de:66:a8:f1:a2:9c:a9:4b:cb:00:0b:03:ca:ad:65:e9:86:
03:4b:0a:9c:84:fb:72:0e:7c:5a:7b:da:9d:aa:0f:d3:01:46:
ea:ce:47:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDowYl4nPC1M7+NpEY0euivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMTE2MTY4Zjc4OWJkZDQwOGU2ZWI5OTYyMmUzZWJjOWE3
MzEwMGEwHhcNMjYwOTI4MTYwMzEyWhcNMjYwOTI5MTYwMzEyWjAzMTEwLwYDVQQD
EyhiZmM5OTQyMGE3M2FjZGM2M2NlZTA0MmJlNGEwZGZkNzhmMjFiZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZafYfIW73GkjH42dz5XmjbyrZuS
fMRG7EsGy2lS8NLB8jSBQuXaXrsQziD/0pnn2bKYeny1LUuC44v9Axvta3P15jkp
IJS7PLbvlzktL60OOILlXgt3Hc03ziByYukpF9hJqqCVeg162kIWUsV09BpfejzI
B7dJKgEdZhBcMsdZsivjojPPOSBwy4FkuOq04U8aAXukvh52aUKp1cLl+jggWKPU
2fp2Wab21aMcDRmboj+Meri/ybh71vjrt24gElZQJZ1+R+tCGD1OliEamWVS1f4Z
DUnV5wQ+YDSu6AoD7rKwMCoSCjmHtazSqaYF1dm1NTpUF69JPQCT/+g/qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/JlCCnOs3GPO4EK+Sg39ePIb+3MB8GA1UdIwQY
MBaAFN0RYWj3ib3UCObrmWIuPryacxAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1JGaGFQZUp2ZFFJNXV1WllpNC12SnB6RUFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iYjhmNjItNmJiOS00MDc2LTg5MGEt
N2Q0YjAzM2YxMzA3LzEvM1JGaGFQZUp2ZFFJNXV1WllpNC12SnB6RUFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9iYjhmNjItNmJiOS00MDc2LTg5MGEtN2Q0YjAzM2YxMzA3
LzEvM1JGaGFQZUp2ZFFJNXV1WllpNC12SnB6RUFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvaSEeaa
jKeX30wiueKh0p8Oqns5ZvRyvGl8EHaA4TDJTOYZzpcuqYhOue+F4Q3TVNpDAOsG
xtVumhcP7akDr5Mk1YcZeR1DNIPFQ8hqXiwycg16oWm75wLZf9Af/1FurmR8K86v
h3JZRXkSzqYmuiDqNH5dLXMWr55Vb1BRmXl5GpvTAHM1yAg712vWN3zO+FEDfC6V
8VOC/Xevh5i7m5C+2qi+4Y7N0zM/JrVOwdTH7MjMDmp+WLvlxdVaN83ye758yHhJ
g/6f/3HwXx8QlArdGCw8aYY4YN5mqPGinKlLywALA8qtZemGA0sKnIT7cg58Wnva
naoP0wFG6s5HCg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:59:28 2026 by rpki-client