Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
File: 3k_14NZGWzwsc6LG4Q5WovpzFic.mft (raw, json)
Hash identifier: iPCY4xT27zjRTN8CAd/R7rQDcFld44ueRHmS5yaf3aw=
Subject key identifier: C1:01:81:0D:F3:AA:FC:3B:46:04:0F:A3:8A:82:F4:88:DC:F9:9B:47
Authority key identifier: DE:4F:F5:E0:D6:46:5B:3C:2C:73:A2:C6:E1:0E:56:A2:FA:73:16:27
Certificate issuer: /CN=de4ff5e0d6465b3c2c73a2c6e10e56a2fa731627
Certificate serial: 019F9436F8548C8F7C89BA414E8704B12A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
Manifest number: 1160
Signing time: Fri 24 Jul 2026 13:00:58 +0000
Manifest this update: Fri 24 Jul 2026 13:00:58 +0000
Manifest next update: Sat 25 Jul 2026 13:00:58 +0000
Files and hashes: 1: 3k_14NZGWzwsc6LG4Q5WovpzFic.crl (hash: 5lraldy1M5iRMBbvAvXrWuqgDuiIjyHtmnudW0nO9bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:f8:54:8c:8f:7c:89:ba:41:4e:87:04:b1:2a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4ff5e0d6465b3c2c73a2c6e10e56a2fa731627
Validity
Not Before: Jul 24 13:00:58 2026 GMT
Not After : Jul 25 13:00:58 2026 GMT
Subject: CN=c101810df3aafc3b46040fa38a82f488dcf99b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:d1:fd:04:97:b4:06:86:1a:39:2c:25:ac:
7c:bf:dc:d1:51:b5:bd:0f:92:34:2b:84:02:c0:ca:
2b:4b:21:ca:90:34:35:c2:7f:fb:45:f6:4c:ca:08:
45:5b:3c:e9:32:09:51:c3:0c:ea:81:bb:7c:f5:ca:
1e:4f:8f:1e:f6:1f:1e:4c:af:38:33:17:3d:2e:2f:
2c:12:6d:19:28:40:4e:66:61:57:5a:f3:ff:e1:a9:
47:78:42:1e:fd:ad:9e:58:2c:ad:25:27:44:6f:58:
09:63:d2:0b:1e:83:8c:de:25:fa:fd:17:1f:a9:ab:
c8:44:cc:4f:32:d5:30:74:b0:d5:4b:f3:8a:af:b3:
de:cc:51:d7:d7:b7:86:90:23:f2:0e:bd:37:59:07:
03:98:ca:3d:8e:64:56:e7:b8:ae:d3:2d:70:0e:5a:
b8:43:b0:1d:ea:f2:72:5f:7a:34:a8:df:5f:4b:26:
dc:4a:d2:46:0e:1b:24:49:ea:8c:00:40:fa:42:a1:
ac:0f:50:d7:78:8f:a1:47:86:7b:de:98:3b:9b:e9:
88:34:82:c9:61:0a:b2:49:c2:18:a5:4d:68:88:9f:
ce:b6:b1:b8:b9:2e:15:03:52:9d:bd:62:18:a7:d8:
d0:a0:70:79:a9:df:00:75:6f:8a:ad:c8:bf:d9:94:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:01:81:0D:F3:AA:FC:3B:46:04:0F:A3:8A:82:F4:88:DC:F9:9B:47
X509v3 Authority Key Identifier:
keyid:DE:4F:F5:E0:D6:46:5B:3C:2C:73:A2:C6:E1:0E:56:A2:FA:73:16:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d0:48:ec:30:7d:6e:55:b9:3f:01:60:bc:24:50:d8:81:2c:
75:40:1c:88:09:66:b0:51:32:2c:f9:4c:4b:cc:91:9d:28:81:
b1:13:2a:b3:cd:0f:e2:78:ca:2a:f6:3e:d4:4d:da:1e:44:a1:
18:f8:68:d1:41:7b:70:1b:68:90:9d:2f:ab:67:58:01:bf:f5:
ce:09:9d:8b:ab:64:a9:b3:15:bf:03:66:42:24:f3:bb:29:05:
80:84:0c:45:c6:87:ec:61:f9:b0:21:a4:5b:2d:78:fb:d7:81:
71:85:e4:d1:d6:f7:d9:e0:be:45:37:f6:26:c3:59:4c:87:55:
24:7c:db:a6:6f:48:77:91:38:04:77:c6:31:c1:c3:a6:e3:f4:
6a:b6:ee:c9:1c:36:71:b0:94:2e:8a:3f:ff:f5:16:f9:37:cc:
b4:87:44:73:98:6e:95:42:d5:73:ca:3c:8a:4e:d8:9f:c5:6e:
3f:03:9c:b2:a6:dc:9b:a8:ba:c1:5c:e4:28:d1:93:95:3f:6b:
d5:7b:ba:c4:e3:0e:90:32:f2:38:9a:55:48:d8:13:bd:20:e1:
21:13:4c:d7:a3:c7:1a:e9:a0:de:02:5f:2c:ed:65:11:97:af:
a1:37:3a:23:38:6e:ba:f8:ea:d9:b5:69:47:54:82:af:f6:92:
5f:02:5d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:22:13 2026 by rpki-client