Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
File: 3kK6kvCUZ8GIi16eNEiVB0SweYE.mft (raw, json)
Hash identifier: 2S5owEnuCaG2nVBufqXrd10BgJxDrWoFsWDzgO9UH/w=
Subject key identifier: A1:00:85:6F:2C:E3:6C:1A:CE:C4:9F:AE:BC:06:FC:A4:73:9C:02:2F
Authority key identifier: DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
Certificate issuer: /CN=de42ba92f09467c1888b5e9e3448950744b07981
Certificate serial: 01A0C9D896C2B5D684FF409EDA49998BE25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
Manifest number: 14D7
Signing time: Tue 22 Sep 2026 16:00:09 +0000
Manifest this update: Tue 22 Sep 2026 16:00:09 +0000
Manifest next update: Wed 23 Sep 2026 16:00:09 +0000
Files and hashes: 1: 3kK6kvCUZ8GIi16eNEiVB0SweYE.crl (hash: k5JygXtnu8UTvns5Lthkxh1aW5yCtpltO0FCB7UBqu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:96:c2:b5:d6:84:ff:40:9e:da:49:99:8b:e2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de42ba92f09467c1888b5e9e3448950744b07981
Validity
Not Before: Sep 22 16:00:09 2026 GMT
Not After : Sep 23 16:00:09 2026 GMT
Subject: CN=a100856f2ce36c1acec49faebc06fca4739c022f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:69:62:03:8c:2a:b9:5a:dc:c0:3d:87:f7:17:
e8:e4:26:08:43:41:b7:20:b1:e4:ed:cd:2d:98:e8:
22:61:25:37:9d:51:64:2b:69:03:8a:52:10:db:19:
e5:a9:7f:a7:6f:36:b6:a0:0d:e9:31:86:3d:51:3f:
e1:8a:d5:14:b1:03:52:f3:85:53:6b:3b:c2:b0:1e:
85:42:72:2d:36:91:98:64:f0:57:b7:24:d5:a0:58:
fd:d3:ca:ef:11:6b:a8:4b:eb:74:6f:b5:ee:ab:d0:
b9:01:98:d5:23:fe:84:cb:3e:4d:84:c3:d9:2c:55:
40:ca:0a:db:73:5f:c1:26:f4:9d:5b:74:5e:a3:ac:
ac:d2:12:f1:e2:00:88:07:21:b2:5c:94:b4:55:c2:
e7:49:3a:5a:bc:62:7d:16:32:4a:e9:ac:30:87:47:
24:dc:19:b5:6e:85:46:d0:5c:78:01:5b:c7:0d:0c:
36:45:b0:d2:e3:01:16:32:9d:6e:8b:05:e9:89:b7:
06:b3:c9:bb:35:56:8d:ad:9f:1c:70:ec:22:5c:7e:
1b:f1:fa:bd:05:e7:0e:62:b8:0a:5e:56:ac:57:a1:
ae:4d:52:02:82:c6:78:05:90:3e:6f:aa:98:f6:1f:
65:fc:54:dd:af:18:7d:41:4b:f0:f3:6e:64:0c:24:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:00:85:6F:2C:E3:6C:1A:CE:C4:9F:AE:BC:06:FC:A4:73:9C:02:2F
X509v3 Authority Key Identifier:
keyid:DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c6:a6:f1:5d:05:84:ee:ce:38:db:fa:0f:71:cb:b6:25:fe:
c8:8b:45:35:27:86:df:30:89:59:6c:79:4b:52:1e:0a:1b:08:
f4:ae:dc:97:51:2a:60:58:2f:c0:aa:02:78:73:40:13:3a:e8:
23:f9:af:11:ca:f8:e7:e1:60:5a:10:ac:c2:1f:7d:64:20:b6:
1f:6a:fa:00:f9:8a:41:b0:b1:ad:56:b1:ac:70:27:3e:2b:1b:
b3:2c:0e:4d:8e:7f:f6:48:3b:a3:22:d9:f1:aa:a3:19:a3:06:
4f:c2:3e:d4:29:56:23:b2:e8:3b:ff:96:44:ee:b4:02:d2:b2:
a8:0a:8b:bc:ad:0d:1e:ec:7c:42:97:d7:3f:c5:20:7c:85:d2:
e1:f9:fe:03:83:30:ea:7c:90:8e:e6:ed:aa:ca:5e:0c:1d:06:
7b:15:81:52:8e:6a:e1:90:dd:64:99:e6:fb:d4:39:58:83:b7:
22:ca:16:00:b0:5e:61:7b:11:77:d4:54:08:86:70:c7:49:21:
c4:17:de:17:ab:ac:5e:b0:23:09:e0:b4:d9:db:39:e2:72:e2:
29:1b:60:10:94:b8:ab:1e:13:d2:2f:a2:fa:6b:91:a8:e1:a2:
e6:93:b2:06:60:17:ad:e5:cf:96:18:fa:48:ec:30:04:ea:5d:
a9:80:6a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:09 2026 by rpki-client