
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: ad8koaN7murVMR9JRdmlurKLDwoOFBc9BVTHbhdqLH0=
Subject key identifier: C8:25:62:E9:59:57:BB:08:06:6E:B1:1F:74:A6:7B:3E:16:07:74:29
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 01A0CBC703293AC7D1E22D7C99B640922C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 114E
Signing time: Wed 23 Sep 2026 01:00:12 +0000
Manifest this update: Wed 23 Sep 2026 01:00:12 +0000
Manifest next update: Thu 24 Sep 2026 01:00:12 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: 2lTGuTfMSnzV3LRwKhbPWL8qybn0oA6CRmogcSYas4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:03:29:3a:c7:d1:e2:2d:7c:99:b6:40:92:2c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Sep 23 01:00:12 2026 GMT
Not After : Sep 24 01:00:12 2026 GMT
Subject: CN=c82562e95957bb08066eb11f74a67b3e16077429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:58:2b:11:bc:67:23:45:15:8d:9e:80:a9:
5d:ce:60:57:3f:3d:6d:a4:6c:31:e8:76:a6:07:ac:
f9:97:9b:12:39:a0:f9:36:79:2d:82:32:28:f7:f2:
7d:27:cb:69:58:de:24:40:bf:92:59:9e:78:cd:5b:
46:cb:c2:3f:c9:99:0a:e0:10:83:5e:f7:4d:f0:72:
b6:93:c8:c7:76:26:33:65:13:01:33:7e:7e:90:97:
3c:2e:ed:60:c4:f9:ca:ec:ea:16:6f:03:3d:11:b1:
fb:f1:6f:e4:b7:b8:36:8d:60:e2:40:78:0c:d0:c3:
31:a6:01:54:3e:e6:fe:ac:3f:41:3e:72:3a:27:de:
66:52:17:a6:3b:ca:f2:6c:d7:79:d3:f2:05:0c:69:
2d:80:33:49:21:4d:05:f5:79:49:99:31:d5:f9:e8:
c2:c6:7f:96:11:d9:9d:25:bf:35:ae:02:f3:0b:bb:
37:00:3e:b2:af:76:55:24:8e:dd:4f:4c:aa:f3:39:
67:9c:e2:f3:0c:dc:74:ac:bd:74:ec:f0:57:97:63:
88:38:5e:02:27:96:23:b2:67:14:7a:e9:4d:f6:aa:
0c:19:d5:34:8b:26:76:d0:36:5b:80:90:a9:22:cd:
80:46:4e:81:ff:e0:19:f3:ee:f3:e0:73:f1:ce:21:
22:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:25:62:E9:59:57:BB:08:06:6E:B1:1F:74:A6:7B:3E:16:07:74:29
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4d:6d:04:14:8b:c7:86:d8:6b:12:fd:2f:6b:68:da:4e:34:
e4:54:86:12:41:4b:41:db:c7:57:29:b0:ac:83:e7:7e:21:26:
ea:b7:93:0d:c6:a1:7a:41:f7:c9:1f:8d:b8:c9:c3:4b:d0:c4:
f2:00:ed:3a:9e:d6:64:b1:39:d5:98:9d:fc:4a:7d:c9:bc:7e:
2c:44:c8:c0:dc:d8:1f:65:39:af:5b:9e:60:f5:c7:24:54:2c:
a6:c4:f2:20:1c:4c:ca:ff:2a:50:08:70:94:70:64:13:62:7e:
d2:76:83:db:43:d0:f5:8a:c9:27:7c:02:81:14:05:b2:bf:58:
1e:7f:b4:33:ae:c7:9e:25:67:bb:e4:23:72:a6:78:8d:f6:7d:
d0:76:3c:3a:ec:0a:53:c5:cc:23:ec:cb:8e:35:fb:c2:2a:58:
bb:04:f0:b6:91:37:b9:15:86:47:89:0d:1c:4b:28:64:6e:41:
13:7b:3b:50:06:77:7c:d8:68:8f:2a:f7:da:31:a5:ec:ec:0c:
cd:c5:56:b5:b1:b1:4a:89:43:88:a1:57:38:44:af:ad:7b:77:
93:65:ce:ba:07:9c:25:7f:19:8f:82:c7:42:29:42:3f:b5:3c:
eb:6c:ab:0b:0d:65:60:39:26:7b:d5:48:f4:98:0a:5a:c0:6c:
45:ee:bb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:47:49 2026 by rpki-client