Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/8fde48-666f-4fbd-b8d4-6e715d742fb4/1/3BHpqTDWTdNjIaC4yiVepJ5vwUc.mft
File: 3BHpqTDWTdNjIaC4yiVepJ5vwUc.mft (raw, json)
Hash identifier: HURtJ3EweIKym4rybtnhreyTyhq8ejEumbSUo1ylOXY=
Subject key identifier: 6A:0E:1F:CE:13:13:BF:4B:67:C3:DE:D4:9C:50:0F:E6:0F:41:C4:D3
Authority key identifier: DC:11:E9:A9:30:D6:4D:D3:63:21:A0:B8:CA:25:5E:A4:9E:6F:C1:47
Certificate issuer: /CN=dc11e9a930d64dd36321a0b8ca255ea49e6fc147
Certificate serial: 01A0CD1190453FC8A9ED34FB4E77AD0A7CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHpqTDWTdNjIaC4yiVepJ5vwUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8fde48-666f-4fbd-b8d4-6e715d742fb4/1/3BHpqTDWTdNjIaC4yiVepJ5vwUc.mft
Manifest number: 0163
Signing time: Wed 23 Sep 2026 07:01:15 +0000
Manifest this update: Wed 23 Sep 2026 07:01:15 +0000
Manifest next update: Thu 24 Sep 2026 07:01:15 +0000
Files and hashes: 1: 3BHpqTDWTdNjIaC4yiVepJ5vwUc.crl (hash: v2LzgfXBoggCuCc54Tmz3/6Xptn7G8ka/VCH+CRCVeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8fde48-666f-4fbd-b8d4-6e715d742fb4/1/3BHpqTDWTdNjIaC4yiVepJ5vwUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8fde48-666f-4fbd-b8d4-6e715d742fb4/1/3BHpqTDWTdNjIaC4yiVepJ5vwUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHpqTDWTdNjIaC4yiVepJ5vwUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:90:45:3f:c8:a9:ed:34:fb:4e:77:ad:0a:7c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11e9a930d64dd36321a0b8ca255ea49e6fc147
Validity
Not Before: Sep 23 07:01:15 2026 GMT
Not After : Sep 24 07:01:15 2026 GMT
Subject: CN=6a0e1fce1313bf4b67c3ded49c500fe60f41c4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:70:b2:6e:fc:3c:b0:b0:84:6f:5e:e3:10:a1:
cc:31:80:d6:e7:da:e9:42:b5:6b:c3:90:4c:13:12:
be:34:10:dc:05:e1:31:04:20:bb:00:1d:36:8f:2a:
02:d4:14:84:e8:6d:c4:de:ee:f8:8a:8d:de:4b:20:
71:f7:3c:c0:a1:9b:10:e9:31:dc:6f:7c:ee:ee:ac:
a7:20:f3:5b:d7:a7:69:7f:07:cd:05:a8:a4:bd:fc:
4e:37:1e:28:85:cc:c2:34:6f:f7:55:2e:70:77:e1:
11:9a:80:09:f5:dd:90:36:f1:7e:16:42:30:4a:99:
a7:2e:74:56:de:36:65:7c:f1:7e:42:5a:92:4f:80:
02:e5:a6:a7:90:17:d7:74:13:33:3c:23:82:9d:75:
60:41:63:5f:b8:b7:fd:53:cc:6e:ef:c3:a7:e4:0e:
f3:ad:be:f8:ca:c7:99:c1:fe:c1:c2:77:0c:c7:00:
20:f3:97:44:dc:40:fc:03:4d:16:70:d6:62:c8:b8:
53:77:8f:b2:b1:0b:11:f7:1b:ff:99:0b:ff:7e:8a:
15:38:b4:80:0d:ea:94:47:1b:1a:36:0e:bd:0f:ab:
85:bc:df:48:fe:cb:f3:ff:f5:19:1c:01:e4:1b:1f:
af:0a:87:5f:d6:79:76:80:e5:b3:2f:94:44:f5:dd:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0E:1F:CE:13:13:BF:4B:67:C3:DE:D4:9C:50:0F:E6:0F:41:C4:D3
X509v3 Authority Key Identifier:
keyid:DC:11:E9:A9:30:D6:4D:D3:63:21:A0:B8:CA:25:5E:A4:9E:6F:C1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHpqTDWTdNjIaC4yiVepJ5vwUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8fde48-666f-4fbd-b8d4-6e715d742fb4/1/3BHpqTDWTdNjIaC4yiVepJ5vwUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8fde48-666f-4fbd-b8d4-6e715d742fb4/1/3BHpqTDWTdNjIaC4yiVepJ5vwUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c3:53:08:16:51:47:82:9d:b6:a6:f4:ae:be:d8:57:26:f3:
ab:7f:c7:86:e0:28:5b:07:c6:8e:f5:6d:56:1f:03:7c:9f:66:
fd:39:3f:2e:2e:24:1a:2e:1c:5d:80:78:13:9a:ad:5f:ed:d5:
86:a2:8c:f5:78:bb:cc:5a:5c:79:62:26:97:a7:b5:3f:b2:cf:
4f:85:d7:f5:ce:33:e3:51:92:a5:f2:a3:91:00:d2:6c:95:46:
19:43:e8:b9:3e:f7:08:22:b9:be:1c:29:bc:65:9d:1e:14:bd:
6a:e0:d8:fc:d6:bb:1a:b9:e2:f8:fe:ed:7c:3b:ca:c4:14:68:
bc:bf:0d:6d:d1:6f:6a:a1:16:88:b8:6e:43:80:38:30:34:e1:
49:2a:b7:9e:5c:2e:55:d0:85:2a:72:93:c5:96:35:dd:57:4b:
85:9f:ce:63:0d:50:d5:57:73:47:0f:f8:59:8d:0d:49:e7:ad:
1f:a7:af:31:30:63:4e:17:ce:80:e4:ce:f2:e6:a0:ce:90:60:
1d:bc:48:dd:4f:e0:26:09:14:e8:64:70:fc:d3:51:18:e8:88:
1f:16:77:f2:ee:db:d0:ef:6d:f1:28:bc:17:c0:13:aa:b2:c0:
8d:59:7c:0c:60:80:5a:78:8d:2b:8b:a7:f7:bb:59:9b:44:b7:
c9:47:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:20:16 2026 by rpki-client