Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
File: 3k_14NZGWzwsc6LG4Q5WovpzFic.mft (raw, json)
Hash identifier: FP3lwdh43l16g1mfz7qyY0/f+d+j/Zo2nl83pJXR79c=
Subject key identifier: FC:C8:A9:EA:8D:36:7C:38:6D:B6:D4:85:DB:A5:A4:33:E1:E3:9C:91
Authority key identifier: DE:4F:F5:E0:D6:46:5B:3C:2C:73:A2:C6:E1:0E:56:A2:FA:73:16:27
Certificate issuer: /CN=de4ff5e0d6465b3c2c73a2c6e10e56a2fa731627
Certificate serial: 01A110A8B019BD312EF26841508887C9384A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
Manifest number: 1225
Signing time: Tue 06 Oct 2026 10:00:52 +0000
Manifest this update: Tue 06 Oct 2026 10:00:52 +0000
Manifest next update: Wed 07 Oct 2026 10:00:52 +0000
Files and hashes: 1: 3k_14NZGWzwsc6LG4Q5WovpzFic.crl (hash: X+sDdTwvzf0//hiQys2UFc0HSyDShUHM4pXy42X8WdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a8:b0:19:bd:31:2e:f2:68:41:50:88:87:c9:38:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4ff5e0d6465b3c2c73a2c6e10e56a2fa731627
Validity
Not Before: Oct 6 10:00:52 2026 GMT
Not After : Oct 7 10:00:52 2026 GMT
Subject: CN=fcc8a9ea8d367c386db6d485dba5a433e1e39c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:fc:35:22:26:13:31:b0:65:1e:1c:2d:33:
37:48:72:68:35:d3:ab:3d:53:bd:ac:77:fe:be:ec:
be:23:a8:a9:7b:76:75:d9:97:7b:ef:be:05:c8:4a:
89:2b:35:90:38:5a:fa:72:a2:b0:04:7e:a5:83:1c:
bd:39:bb:5c:9e:20:80:e9:00:29:54:e7:ce:52:6a:
ee:36:28:1b:48:e5:f5:cd:49:76:99:4e:08:ec:50:
ea:c9:83:c9:55:db:b1:eb:6f:e3:88:bc:4f:d3:6b:
e2:5e:cf:7b:df:72:37:c8:7d:f4:cc:a8:bd:ef:94:
32:5e:bc:ac:4d:d5:f6:72:e1:32:4e:c3:cb:4b:55:
87:22:ea:4f:73:eb:b7:3d:63:86:10:a6:42:b1:0b:
83:54:20:94:aa:c1:2c:08:a8:a0:37:c8:a8:bb:ff:
82:87:d5:33:4b:e6:15:ce:1c:23:a4:41:d9:fb:ae:
ac:98:60:6d:7c:35:e5:3a:f0:e9:a0:a1:72:a6:eb:
7e:73:cb:94:37:79:67:6e:6b:ec:bd:1d:8e:43:73:
2b:88:47:98:80:fc:a0:41:0e:9c:62:c9:97:c4:d4:
62:89:99:8f:3c:be:a7:31:05:cf:b7:05:7a:62:70:
a1:e1:84:f3:49:47:17:86:fb:c1:33:42:91:50:f6:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C8:A9:EA:8D:36:7C:38:6D:B6:D4:85:DB:A5:A4:33:E1:E3:9C:91
X509v3 Authority Key Identifier:
keyid:DE:4F:F5:E0:D6:46:5B:3C:2C:73:A2:C6:E1:0E:56:A2:FA:73:16:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d4:5c:0d:40:89:d5:46:a9:30:7d:b0:c8:88:05:92:23:bb:
da:b7:80:38:3f:3d:cf:ae:8c:23:75:81:5e:54:2f:e4:d6:fa:
4a:fb:05:fe:49:59:3e:ac:d7:3d:a5:ff:84:af:13:95:3a:c0:
41:f0:e3:ce:f7:fe:0c:8b:8c:57:c7:0d:f0:7f:0c:58:06:7a:
76:d3:c6:5b:d6:23:07:19:e1:1b:7a:cd:11:8c:78:dc:b7:9c:
ae:bc:6d:35:28:96:5d:6e:d4:f0:17:b9:06:c4:cf:d9:b5:45:
b3:59:c4:0f:fa:9e:f3:6b:96:dd:0e:de:fa:74:fc:a3:1a:71:
d3:f7:97:08:75:11:d9:76:ef:85:0e:f7:bf:f8:b1:50:b9:0c:
78:2e:00:81:ff:98:b2:e2:8f:f6:77:cf:bf:c5:12:c9:11:90:
9d:ee:17:dc:6c:b8:26:72:d2:10:23:a7:ab:26:f0:09:44:b8:
77:2f:20:6c:a0:aa:5a:90:ea:6b:eb:a7:c1:3e:e0:b6:16:2f:
22:7e:c1:2d:79:f2:72:b7:02:1a:aa:10:0a:12:6d:f4:62:10:
0f:7e:30:9a:ef:c9:3e:21:42:a9:55:70:0e:4d:61:d9:27:72:
f5:79:b1:05:f7:8f:d7:8f:da:eb:56:b1:c9:a9:65:89:0f:e1:
53:62:84:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:38:06 2026 by rpki-client