Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json)
Hash identifier: jAsb7w21ZN6Lnkyec6BFHMYyg8z8zy3SAMjXwOZV28I=
Subject key identifier: 2F:10:64:5F:DE:67:BC:67:A3:E3:E1:FC:22:B8:79:E8:CE:B0:63:22
Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Certificate serial: 019E1BD91E438D2DF832650168B692B1E7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
Manifest number: 0856
Signing time: Tue 12 May 2026 11:01:14 +0000
Manifest this update: Tue 12 May 2026 11:01:14 +0000
Manifest next update: Wed 13 May 2026 11:01:14 +0000
Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: RvfsEoba7nSJwh0DhA9vhAoTrdPYPJMSvSqi8JJ5fYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:1e:43:8d:2d:f8:32:65:01:68:b6:92:b1:e7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Validity
Not Before: May 12 11:01:14 2026 GMT
Not After : May 13 11:01:14 2026 GMT
Subject: CN=2f10645fde67bc67a3e3e1fc22b879e8ceb06322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:0b:ec:b5:db:8e:02:56:04:ca:1d:57:29:
c5:a8:36:44:f5:52:5b:73:8e:5c:1c:80:04:26:4e:
d0:aa:7c:c6:8d:a5:4a:16:33:09:e1:8a:db:68:1e:
b2:cd:07:26:ea:be:41:9d:99:3a:a4:f3:5d:47:2d:
06:f9:df:b0:74:d0:5b:59:02:50:80:ed:d1:14:48:
a9:0f:d9:38:f2:74:6d:24:c6:06:5a:d1:6b:97:fc:
e7:e0:28:6f:56:ad:27:cc:ca:f0:94:91:0f:f2:44:
df:71:13:c8:7e:78:b1:17:28:0c:d1:a7:b2:6f:c6:
a8:2f:14:da:42:47:68:fa:34:f7:45:73:51:99:7f:
6f:c4:3c:0e:3c:2e:5f:89:a9:4f:8a:fb:8b:c2:1c:
52:cf:f7:4f:aa:fc:d8:8e:0f:bf:7e:9e:d0:7b:69:
2d:cf:70:d7:f0:ae:fa:c1:cc:0e:4e:8b:32:db:91:
38:26:75:85:33:c2:cb:af:ff:28:7d:9b:29:50:6c:
d0:ce:70:10:15:34:be:50:2b:55:76:c3:99:09:4b:
c0:c4:3a:d1:9d:cf:0a:d3:f2:f7:18:e3:bf:61:a2:
66:f7:32:5c:66:a5:ec:b0:5c:77:bf:d6:04:ff:9f:
4d:f1:f3:86:12:bc:a1:df:6a:b8:1b:8c:f6:f3:30:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:10:64:5F:DE:67:BC:67:A3:E3:E1:FC:22:B8:79:E8:CE:B0:63:22
X509v3 Authority Key Identifier:
keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:90:bf:c9:dd:ee:32:27:2c:23:76:11:79:2c:a9:43:2a:32:
8b:c0:22:94:8e:6c:7b:ce:56:e2:83:c3:38:08:7f:50:9e:a8:
0b:f0:21:e4:34:1a:71:b2:ef:ee:94:a7:00:de:68:88:08:94:
ca:dc:d2:4e:c5:bb:cf:38:c8:be:b4:1d:2d:77:2f:06:ac:af:
89:6a:3d:55:4f:7c:36:8d:f7:d6:58:9b:c0:04:d0:19:ec:d1:
fb:19:4c:da:66:0a:68:03:44:d9:25:88:74:ee:10:04:94:a0:
77:e9:7b:09:e3:83:61:55:22:d0:96:c9:b1:af:80:11:23:48:
a2:6c:18:31:a5:64:c0:74:31:7c:a9:97:62:10:9e:10:e1:63:
67:76:9b:fb:f6:19:8e:cf:57:da:9d:be:e8:d7:9f:08:dc:89:
f8:e5:b2:28:68:fd:a1:d8:fb:8a:91:d6:60:e2:c5:82:a7:09:
3e:9f:97:83:87:92:f2:f9:ba:18:de:33:c7:b1:4c:80:0e:08:
84:25:df:23:7a:24:59:61:9b:b4:b0:b1:01:0b:3b:22:dd:bf:
d4:ce:8a:dd:47:2a:80:6a:9d:f8:a6:fc:ef:fd:b5:0f:c7:11:
9a:41:46:bb:24:f9:8e:18:19:73:5e:e4:a2:e1:88:5f:e4:70:
c1:f9:8d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:45 2026 by rpki-client