Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json)
Hash identifier: rljPh2GB1xzolmPWbXuUqVRzi09RfWX53POVQuG8TEg=
Subject key identifier: 6A:A1:1A:E5:95:86:41:BE:B3:54:95:1E:0B:CE:7B:1A:CF:7A:A4:0F
Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Certificate serial: 01A0E098EA2941B022A3B4AB2436EBDDF361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
Manifest number: 09C5
Signing time: Sun 27 Sep 2026 02:01:52 +0000
Manifest this update: Sun 27 Sep 2026 02:01:52 +0000
Manifest next update: Mon 28 Sep 2026 02:01:52 +0000
Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: JiCkjizUQPZShwexmsZhFqTxVXmsdgNXbgDLfMRSPEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:ea:29:41:b0:22:a3:b4:ab:24:36:eb:dd:f3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Validity
Not Before: Sep 27 02:01:52 2026 GMT
Not After : Sep 28 02:01:52 2026 GMT
Subject: CN=6aa11ae5958641beb354951e0bce7b1acf7aa40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6c:74:26:30:e8:ac:c8:f4:e9:ea:b1:cf:e6:
d2:dd:05:b6:47:a0:f1:ec:b2:df:4d:6f:68:57:77:
fe:2c:72:e3:63:41:a8:a8:d0:eb:05:3c:ac:83:90:
08:ec:38:bb:1a:1a:05:49:02:b8:7a:b1:81:94:d8:
d8:ab:76:3c:2e:61:7f:7f:9e:52:70:32:30:dc:0e:
fd:e1:47:26:6e:ca:b0:ed:bc:29:51:6b:5b:23:ce:
16:e9:3a:47:53:90:d8:2c:ee:48:1a:32:20:dc:94:
2b:ac:3d:31:bd:93:82:79:eb:c3:fd:97:7d:62:cf:
83:2b:4b:36:ae:5c:8b:da:28:55:32:61:9f:8e:56:
55:f2:21:32:d7:aa:2c:3e:66:9d:e4:2a:95:97:54:
2a:e8:3f:63:c3:91:8c:a5:63:bb:6d:98:24:59:39:
62:7d:75:26:76:59:b4:b7:05:5f:12:37:25:d0:84:
71:c2:39:0b:44:b7:44:f5:09:b5:1a:49:09:3a:85:
ab:8e:06:bd:70:04:b5:34:dc:6b:59:1b:9e:2a:88:
4b:c1:9c:ed:49:c3:ce:c9:12:58:c8:dd:99:18:39:
03:25:3b:f5:6b:9c:8b:61:ea:6e:77:6a:28:03:02:
fe:b7:39:35:5a:5b:f0:51:37:b7:1b:4b:09:23:0e:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A1:1A:E5:95:86:41:BE:B3:54:95:1E:0B:CE:7B:1A:CF:7A:A4:0F
X509v3 Authority Key Identifier:
keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:63:46:0c:c6:be:b0:80:81:da:9d:eb:75:8e:55:03:91:53:
2f:94:11:0e:fd:ed:e0:4a:a4:76:da:cf:2b:44:c5:cd:b5:15:
c7:20:e8:37:9d:ee:9d:bb:62:3f:b8:7a:bd:88:2e:95:4e:ff:
ce:55:fc:e9:70:24:03:c4:51:3e:45:81:ce:53:f2:33:bd:3e:
76:3c:e3:b8:30:60:55:61:9d:6a:db:86:c1:35:e7:c7:05:b9:
f1:07:13:55:9e:d7:83:c1:30:9a:25:03:70:95:f7:20:c0:d6:
bf:46:dd:07:d7:a3:00:65:37:6f:e2:66:4a:8c:b1:a4:79:5c:
62:32:4f:db:4e:70:95:99:38:fe:8d:79:cc:71:ea:b5:ab:85:
c2:3a:30:ec:34:b7:ce:f4:0d:52:1a:0e:f4:f0:b1:a4:0d:8c:
53:1e:e1:d5:77:78:50:1b:7d:d6:62:d0:e9:75:12:b0:e7:99:
8d:78:e7:cd:e2:5b:fc:f5:82:d2:b9:20:27:1a:30:64:f9:3d:
16:5c:05:45:e0:f6:50:f7:1a:f3:21:94:f6:2d:36:5b:18:9a:
8c:18:e0:ca:6d:ef:cc:58:38:99:34:91:e3:7c:3e:4f:6a:47:
e7:0f:bc:39:60:17:7d:b6:e8:01:93:98:3a:0c:d0:ed:74:90:
6b:b9:30:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:17:15 2026 by rpki-client