Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: kJqRCM+tmMzwd8Gjwkby7ig7shkUIynHPuWIXO5YaDs=
Subject key identifier: DD:9B:8D:C8:AE:2F:10:32:BE:A6:AC:6A:1A:DD:ED:A1:E7:0E:9D:CE
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 01A0D83B6C3BE7413E82636D868FD3B445B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 1424
Signing time: Fri 25 Sep 2026 11:02:47 +0000
Manifest this update: Fri 25 Sep 2026 11:02:47 +0000
Manifest next update: Sat 26 Sep 2026 11:02:47 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: q2+YAjAm6lLDPnYdKwn2sbuskYW4sjftIn5ZtJYKh4I=)
2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:6c:3b:e7:41:3e:82:63:6d:86:8f:d3:b4:45:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Sep 25 11:02:47 2026 GMT
Not After : Sep 26 11:02:47 2026 GMT
Subject: CN=dd9b8dc8ae2f1032bea6ac6a1addeda1e70e9dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:0a:07:df:86:a0:14:c0:64:b6:23:da:c5:
f1:ef:94:b0:62:de:47:b9:69:3c:b3:70:eb:ad:7f:
8b:75:93:94:29:d8:9f:1b:9c:bd:34:32:fe:b3:b1:
db:4c:2d:1b:04:fd:f1:11:25:e5:fb:36:5f:08:aa:
4f:1b:8a:85:53:7a:d0:38:64:b1:77:12:d1:ae:07:
0b:1c:44:a2:46:b2:b3:ba:4c:e2:62:4f:4d:39:88:
5d:5a:d7:8f:e1:62:3d:53:2a:a3:f0:2d:31:03:cb:
bd:80:12:7d:75:76:7b:13:0d:2d:c9:fa:0c:37:ec:
a8:75:4e:ca:51:65:81:36:87:39:2e:9b:79:e6:c1:
cf:b6:3a:7b:c4:f2:30:e7:2a:e7:0d:e4:d2:56:66:
53:01:39:0c:65:22:4d:75:60:f1:c7:76:c3:63:e0:
8d:4f:dd:7b:79:4a:98:b7:eb:44:ab:10:4b:ff:81:
37:27:a6:94:67:b9:0f:26:14:7e:7f:4f:c9:a2:cb:
62:73:08:19:30:08:f9:60:60:67:63:a0:be:1a:a2:
77:fb:ac:2d:90:ba:ca:1e:5a:b2:0f:4c:3b:cd:04:
d4:67:96:77:86:29:81:f8:44:a3:dc:e2:9f:cd:a7:
fe:b2:c7:dd:3e:4d:bb:bf:e1:ce:4d:f4:c7:df:c6:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9B:8D:C8:AE:2F:10:32:BE:A6:AC:6A:1A:DD:ED:A1:E7:0E:9D:CE
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5d:2d:d4:67:e8:39:92:f1:63:fc:ef:c6:7f:a8:d5:75:96:
e3:f6:93:ca:d6:3d:d7:68:b7:78:f0:71:bc:71:f1:e9:05:a3:
03:c6:98:22:7c:1f:d1:98:2a:3a:7a:79:3d:bd:3a:55:63:be:
a3:b1:82:93:ed:92:c3:63:f1:93:ea:f8:73:97:91:20:ee:64:
00:0b:15:c7:3d:75:7f:45:e4:3d:7f:02:90:84:95:91:84:8c:
0b:b0:a0:f0:27:75:a2:b5:03:31:86:b0:3c:6e:07:9f:d1:e0:
03:d1:9e:d2:86:46:d1:9e:04:97:64:44:04:db:5a:78:9e:6e:
57:f4:ea:6a:b6:a2:d7:5f:4c:9d:76:38:b3:0a:76:01:cf:c4:
38:94:5f:ae:5b:93:80:9b:c2:d2:22:7f:4a:54:02:45:14:31:
34:dd:e1:6b:f2:1d:f3:c2:5c:81:54:e9:ae:f7:7e:2a:e3:c8:
0f:cd:c3:5d:43:7a:b3:65:a7:da:a1:6b:75:97:09:85:4c:d3:
1e:82:32:78:64:e7:63:3a:fa:28:bf:8f:07:ca:13:8f:f0:6b:
8d:ae:3c:2c:bc:45:26:3e:6c:db:ed:8b:d8:69:56:dd:8a:78:
36:f2:c2:5c:ac:2b:c8:e9:27:ea:8a:fa:21:80:4d:16:3c:53:
18:ff:1e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:13:30 2026 by rpki-client