Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json)
Hash identifier: m1lJFYoI6Q9wgJ1uTQ06VGomhqRu6kCmfbPIGPlbUrE=
Subject key identifier: A3:64:92:8B:06:AE:06:A7:E1:15:A5:E6:BF:B7:EE:9A:67:50:C4:E3
Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888
Certificate serial: 01A0DB3B64BCEECF519D2490DCBD2C851F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
Manifest number: 0DCD
Signing time: Sat 26 Sep 2026 01:01:37 +0000
Manifest this update: Sat 26 Sep 2026 01:01:37 +0000
Manifest next update: Sun 27 Sep 2026 01:01:37 +0000
Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: iVhGChK1v+vZeYKL051xTsZ/zLGAcVfTLcapvy0SCjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:64:bc:ee:cf:51:9d:24:90:dc:bd:2c:85:1f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888
Validity
Not Before: Sep 26 01:01:37 2026 GMT
Not After : Sep 27 01:01:37 2026 GMT
Subject: CN=a364928b06ae06a7e115a5e6bfb7ee9a6750c4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:c5:e7:e0:b4:ca:3d:24:fc:f7:f5:d1:45:
7d:ac:77:33:83:44:03:39:a9:df:bf:dc:72:4c:de:
b1:69:60:4e:32:0a:60:30:a6:80:90:4b:7f:e5:48:
ee:cc:54:04:10:97:94:a1:d2:1a:3c:3a:31:34:ca:
a7:c5:c9:aa:00:eb:7b:fb:9c:9e:92:78:bd:47:74:
2d:61:a1:f4:14:1d:17:1f:bd:c8:91:94:c1:90:ab:
c6:49:11:a3:7c:ab:81:96:f0:42:3a:76:a7:d3:54:
4c:6c:cd:e0:21:59:14:32:e9:c8:d8:6d:29:d7:ca:
2e:b0:ed:94:10:8e:20:d9:30:3a:96:c3:7b:69:6f:
cb:b7:2b:6f:81:ec:9c:2a:5b:ae:de:39:97:cd:b3:
9f:86:b2:e1:86:ac:21:70:9f:9b:03:15:90:1a:de:
04:c7:29:c4:9f:66:37:ac:b3:15:6a:c1:97:79:70:
7b:59:c5:e8:3e:ec:22:48:fe:99:92:17:9c:a2:42:
ce:29:48:ed:3f:54:c1:e6:d2:32:f5:c2:47:1e:f0:
83:1d:6f:fa:74:bc:eb:fb:26:e2:1d:a8:ae:3c:9e:
1b:84:58:1a:fd:91:c7:e8:06:d1:10:f9:52:24:b0:
eb:a0:85:02:18:f5:f9:78:71:b7:0a:70:93:2b:5b:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:64:92:8B:06:AE:06:A7:E1:15:A5:E6:BF:B7:EE:9A:67:50:C4:E3
X509v3 Authority Key Identifier:
keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8b:9b:4f:77:3d:4d:58:2a:f3:d8:6c:6f:72:28:e9:39:50:
55:9f:33:85:7c:4a:6c:8a:5e:c6:f2:2a:33:ec:ff:de:99:2d:
00:e7:ee:28:db:a3:28:58:47:01:46:01:fe:62:a0:0b:c5:46:
c0:fd:13:0a:63:01:2d:b8:d9:31:6b:cf:86:ca:e0:17:7b:ed:
bf:6a:72:ef:9d:22:83:bf:5c:dd:16:02:bb:6a:26:26:02:79:
65:e1:8e:a4:e7:97:31:b2:ff:54:e7:d7:07:f4:11:cf:e1:d2:
c6:04:2b:2f:8c:76:49:2f:ac:5e:0b:75:a7:2a:fd:eb:8f:4e:
49:8f:26:ce:ea:97:37:18:45:af:8b:46:0e:23:b6:84:d2:3e:
55:1f:be:8e:b5:67:fd:45:0b:c2:1a:2d:08:4e:87:b6:d3:dd:
e5:87:54:19:96:7b:52:5d:14:95:83:d5:94:50:b8:db:d2:31:
e7:bb:a3:e4:cb:dd:15:f4:d0:69:6f:da:cf:95:33:7c:71:7e:
33:4f:d7:39:bc:0b:54:9e:3e:e8:9d:78:3a:58:0f:07:31:a0:
f4:32:98:54:a5:91:56:b7:6b:c6:23:ea:3c:52:1e:df:11:ac:
52:a0:2e:16:17:ec:ef:7d:4a:4c:51:2b:70:1e:28:2d:69:0f:
88:f5:cf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:57:10 2026 by rpki-client