Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.mft
File: 3jCrARAqrvMOvUyJHAOAm6rQOeA.mft (raw, json)
Hash identifier: proJlKoEY1T6Ttn89var41vGS3tDo1IRL32x/EPaDeQ=
Subject key identifier: 98:9E:6C:52:FC:65:42:EF:5F:59:CD:CF:39:03:61:38:DA:0F:FB:E9
Authority key identifier: DE:30:AB:01:10:2A:AE:F3:0E:BD:4C:89:1C:03:80:9B:AA:D0:39:E0
Certificate issuer: /CN=de30ab01102aaef30ebd4c891c03809baad039e0
Certificate serial: 01A127D5CD6E04EB6629DB4B91BECC189153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3jCrARAqrvMOvUyJHAOAm6rQOeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.mft
Manifest number: 045D
Signing time: Sat 10 Oct 2026 22:01:25 +0000
Manifest this update: Sat 10 Oct 2026 22:01:25 +0000
Manifest next update: Sun 11 Oct 2026 22:01:25 +0000
Files and hashes: 1: 3jCrARAqrvMOvUyJHAOAm6rQOeA.crl (hash: h1PaHrgD6UiIyWaV7wrOcZL8TLcXz7Bf31kou46BAMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3jCrARAqrvMOvUyJHAOAm6rQOeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:d5:cd:6e:04:eb:66:29:db:4b:91:be:cc:18:91:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de30ab01102aaef30ebd4c891c03809baad039e0
Validity
Not Before: Oct 10 22:01:25 2026 GMT
Not After : Oct 11 22:01:25 2026 GMT
Subject: CN=989e6c52fc6542ef5f59cdcf39036138da0ffbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:ad:62:fb:4f:4f:09:4c:24:59:f8:42:c3:
d5:c4:a7:b5:a8:95:88:93:2d:e6:a3:2a:78:60:90:
20:18:46:6d:d7:2d:1c:c9:fb:e0:09:3a:9e:9b:9d:
86:2d:a1:51:d5:56:b3:5f:b5:cb:38:4f:2d:ed:56:
68:8b:f7:97:25:7a:36:46:6f:97:df:b5:89:f4:cb:
83:17:08:37:ae:fd:4d:f3:16:d3:12:9b:48:9b:e1:
7d:17:c2:b8:b6:e7:ca:fd:f2:21:50:6f:ed:54:88:
81:c1:b5:39:fe:14:b4:fa:ca:90:34:58:f9:21:3f:
6f:a1:2d:e5:15:98:58:8d:3c:80:a9:5b:b9:be:bd:
46:4b:a3:18:1f:9a:6b:ab:5a:45:6d:b6:f1:ee:07:
0b:51:a4:0d:3a:2b:dc:74:05:4b:97:40:a8:91:4d:
15:1a:98:48:2b:77:54:c2:2b:5b:f5:71:d2:33:f6:
9f:d6:95:0d:94:bd:2d:a2:31:d6:70:5b:cd:4a:f3:
87:cc:08:d8:2f:91:d0:97:fb:23:61:16:2d:9a:89:
7e:6a:bc:d1:86:66:29:0c:22:a9:a4:ac:6d:69:49:
db:ea:85:9b:f0:77:c0:d4:88:3d:c9:c8:a1:fd:e6:
6e:ff:a0:04:d8:0b:5d:83:65:3c:b0:2c:c2:ff:a5:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:6C:52:FC:65:42:EF:5F:59:CD:CF:39:03:61:38:DA:0F:FB:E9
X509v3 Authority Key Identifier:
keyid:DE:30:AB:01:10:2A:AE:F3:0E:BD:4C:89:1C:03:80:9B:AA:D0:39:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jCrARAqrvMOvUyJHAOAm6rQOeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:04:7b:93:55:f2:e6:8f:be:bc:6c:29:7d:35:18:19:bd:37:
2b:67:54:1e:e2:d8:06:0b:e6:37:ff:e4:e6:76:f1:7f:d7:1f:
15:0c:b9:2f:e7:90:6d:8a:d3:71:c4:1a:3a:ae:8e:bc:d4:99:
47:f5:c0:cb:19:09:ed:7c:4b:81:fc:e2:f9:f5:e9:e7:cf:ed:
ce:54:2b:95:a0:c4:9a:2e:a4:b2:30:aa:aa:3b:5a:02:8f:66:
51:f1:44:1b:71:29:70:15:bc:67:e3:99:c2:90:74:60:99:fa:
27:c9:3f:d8:d6:0e:c1:04:fa:e9:63:f9:51:6f:6f:18:09:cb:
b7:87:62:41:4e:3a:96:e1:b6:a9:1b:0b:e9:0f:d2:76:9d:20:
f6:59:67:ae:1d:88:2d:82:a6:c1:52:aa:e8:4d:3a:f3:19:ca:
97:3e:0d:b2:1e:bf:f6:a8:37:8d:91:72:b4:24:a7:b7:72:c6:
d1:d0:fb:9e:8f:1b:f0:1f:ab:95:04:7d:40:66:1e:a5:17:c0:
a7:27:c1:89:b1:cc:54:22:33:74:04:14:18:e7:6c:a6:32:6c:
f7:9c:94:b1:76:20:e4:47:bd:6a:a9:3f:6d:78:d2:9e:b2:ab:
12:5e:7c:5e:c6:4b:c0:81:6b:c5:a9:89:1b:04:97:b8:1c:e3:
8c:8e:cb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:35:15 2026 by rpki-client