Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
File: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json)
Hash identifier: v4iiJnPe6qaIpb/GywM4APO7nQF7pdrjv+lLyl7m9nA=
Subject key identifier: EE:AC:61:80:35:E0:A1:FA:8E:B4:F0:70:F6:B2:76:9D:40:3E:2A:B1
Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
Certificate issuer: /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Certificate serial: 01A0CB901F782706F5215C9D9A9E9E141D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
Manifest number: 1A73
Signing time: Wed 23 Sep 2026 00:00:15 +0000
Manifest this update: Wed 23 Sep 2026 00:00:15 +0000
Manifest next update: Thu 24 Sep 2026 00:00:15 +0000
Files and hashes: 1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: eAXrtYhD9L06lk/U0KohJbwMN3KaekKHyXRenUaTUfk=)
2: XduW4CBIQXx5gf7im8c_KWeejns.roa (hash: khvq/3b+OvcvNxVFIdvoIzkoKq7bskcSfHtiGKsUD3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:1f:78:27:06:f5:21:5c:9d:9a:9e:9e:14:1d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Validity
Not Before: Sep 23 00:00:15 2026 GMT
Not After : Sep 24 00:00:15 2026 GMT
Subject: CN=eeac618035e0a1fa8eb4f070f6b2769d403e2ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:bd:3d:3b:ac:65:a5:9c:f3:b7:df:b7:e8:
57:3f:00:6f:ec:82:76:af:b5:20:92:8c:f6:ec:20:
79:93:d3:15:85:e5:a7:24:99:a7:46:83:a2:11:66:
1e:c7:84:1f:15:79:b1:d0:1d:4b:33:36:d2:f8:a3:
d0:6e:cc:af:52:16:c9:31:2d:cf:51:48:1c:dd:f1:
bd:3c:a9:6c:0b:d0:7e:6b:e1:73:5e:b9:f1:ee:fb:
23:0b:82:fc:33:d5:7a:e4:8e:29:29:06:91:4f:00:
21:8b:8c:04:65:d9:b1:62:86:8e:d2:ed:d0:a5:c3:
a6:47:b9:a8:5c:bd:d8:31:1a:50:df:32:5f:9e:b7:
38:5a:77:f6:43:63:0b:7a:ea:cd:2f:1d:9d:73:b7:
46:63:b1:94:e7:26:d0:9e:bb:5b:a7:e6:3f:aa:41:
43:10:ca:4d:be:89:de:3e:0c:37:bb:73:32:7d:1a:
22:b6:97:5f:03:bb:36:fa:c1:bd:1a:de:36:f6:1f:
c3:3a:92:13:7c:77:11:12:ea:70:42:1c:5f:a1:67:
95:5a:f5:45:5f:31:97:f2:fc:ed:6f:88:d9:85:ac:
97:78:ee:40:0f:b9:8a:0e:ac:53:65:74:4d:6f:98:
97:e5:52:e2:87:47:51:f4:7d:be:52:4c:d6:c6:9d:
e1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AC:61:80:35:E0:A1:FA:8E:B4:F0:70:F6:B2:76:9D:40:3E:2A:B1
X509v3 Authority Key Identifier:
keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:06:42:b6:b4:0b:73:5d:36:00:a3:4e:a8:06:bf:73:1f:d7:
1a:0d:4d:94:1a:f4:ef:4c:30:c6:f0:75:87:ad:a6:ae:ab:2b:
d2:6e:e3:13:28:eb:bf:5a:2a:d6:4a:c2:c2:1a:e5:57:c8:90:
58:93:ba:60:2c:2e:c8:a7:ec:27:8b:04:e5:6a:ec:9d:28:ff:
01:bb:e2:2a:9d:fa:c3:ed:ac:3c:53:d6:8d:f7:04:75:72:b7:
88:9c:e0:8f:69:be:0a:a8:3c:78:5b:b2:12:da:de:29:c4:32:
7b:36:72:3c:85:89:d4:bd:1d:3b:f1:7a:68:fe:61:c2:6b:2e:
85:a3:9b:46:49:ec:d3:f9:2c:ca:a2:27:a9:03:4d:5b:4e:f8:
a1:45:07:88:28:35:da:15:78:51:df:64:ba:9c:c3:a3:47:23:
35:f8:48:c8:1b:a4:f9:43:ab:96:6f:7e:8e:15:c7:74:04:29:
bb:53:b8:cc:0b:a9:4f:73:0f:c8:45:81:81:49:e1:37:83:5e:
67:ab:a9:1b:e2:c0:d7:01:9e:3f:b3:4b:09:6c:a5:c3:9d:d3:
ed:36:5d:3a:19:87:0f:d9:3d:f3:2a:fe:ba:24:7e:c8:fa:ce:
ed:24:22:55:e2:d6:20:31:36:f2:41:94:2a:6b:f5:41:11:c5:
2a:23:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:28:12 2026 by rpki-client