Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
File: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft (raw, json)
Hash identifier: 9iVjVkiR0ptN4almvNE1+FEpcizJROFlG0K4AplyibQ=
Subject key identifier: E5:B9:53:E6:B2:55:E1:65:33:04:2A:B7:CC:75:1E:99:7B:C3:29:33
Authority key identifier: DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B
Certificate issuer: /CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b
Certificate serial: 01A0CFA43805130D1A17CFD0E9B6CA5ED71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
Manifest number: 02DE
Signing time: Wed 23 Sep 2026 19:00:40 +0000
Manifest this update: Wed 23 Sep 2026 19:00:40 +0000
Manifest next update: Thu 24 Sep 2026 19:00:40 +0000
Files and hashes: 1: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl (hash: rcon/B81pTp/mMEPsrNh/PqTemF0WyjUyU25UnOnedg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:38:05:13:0d:1a:17:cf:d0:e9:b6:ca:5e:d7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b
Validity
Not Before: Sep 23 19:00:40 2026 GMT
Not After : Sep 24 19:00:40 2026 GMT
Subject: CN=e5b953e6b255e16533042ab7cc751e997bc32933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:2c:0f:f8:9e:e4:bb:bc:ca:3c:2a:fe:fe:
cc:60:28:c1:7d:35:20:80:a9:ac:68:7e:9f:ac:90:
b0:dd:76:55:05:b3:a1:ea:89:03:ad:b9:1a:e8:de:
9c:08:cd:0a:1a:60:fa:a4:23:7c:f0:c3:92:e8:d2:
47:89:6b:20:87:87:01:e7:e9:cc:ac:ab:94:ee:c4:
58:5d:48:b7:c7:87:87:cd:fc:bf:ed:25:c9:11:c1:
5e:4d:33:80:29:4c:5e:23:98:e7:90:0c:0f:90:49:
53:2a:da:c8:9f:43:37:2d:4a:ba:f0:40:6d:d0:6b:
e9:9f:9f:37:85:73:17:da:47:00:aa:23:d9:08:b5:
0b:3b:7c:fa:95:7c:26:9c:69:dc:b6:06:0b:1a:56:
a8:a5:32:33:94:b2:93:d5:5e:0b:a5:ec:9a:3a:bb:
ca:7b:9a:35:92:4d:9a:7d:48:2e:40:28:f5:9f:5b:
28:ad:87:4d:8e:2f:5f:d2:05:26:8b:1c:26:18:4e:
0c:ed:44:c9:da:06:ad:49:a5:cc:aa:75:6f:98:b6:
7e:aa:f3:2c:69:3b:47:17:ec:f3:b3:c5:c0:6e:16:
aa:d2:a6:18:a0:f1:24:77:f8:03:b5:91:ea:68:7f:
8a:66:6e:d6:58:51:6e:59:cf:8c:9f:45:68:09:a0:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B9:53:E6:B2:55:E1:65:33:04:2A:B7:CC:75:1E:99:7B:C3:29:33
X509v3 Authority Key Identifier:
keyid:DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:73:0a:69:8c:91:25:f4:fd:4f:76:8f:13:ad:78:22:a8:e2:
e8:85:6d:23:d7:46:6d:ef:87:7a:ec:a5:62:22:8c:c2:c0:fa:
ac:bc:58:c3:2e:49:ab:32:2c:d0:31:2f:08:b7:3b:fd:dd:a2:
64:64:c9:ad:6e:03:92:08:94:b0:45:ec:c2:11:df:a1:7e:94:
38:92:ec:ae:3e:f6:b1:96:34:14:e6:dd:c3:33:2b:1a:f9:3c:
58:e2:12:ad:75:ac:ba:72:a4:c3:20:64:b1:d5:0f:68:fa:f9:
8f:ee:cc:13:4d:9f:9f:e5:b7:1a:00:54:e2:e9:76:d6:fa:02:
62:4b:44:17:35:6f:43:68:85:6f:9f:d9:5e:92:33:fa:ca:05:
d1:8e:35:de:83:b3:b5:7f:78:92:85:86:c5:51:7b:5d:c1:c2:
9b:07:70:45:35:81:10:5d:f2:08:21:26:d0:51:b2:58:80:f7:
b5:50:cd:37:dd:32:7f:3f:1b:3e:ab:94:a7:e9:fc:05:3f:78:
21:60:e2:9a:76:76:6c:b0:b2:8b:ac:fd:d3:67:5f:2b:ea:26:
e4:df:63:a1:6e:ca:c9:54:09:41:5e:c6:64:91:60:b2:b6:fc:
d2:f2:8b:f8:c8:2f:4d:66:01:d6:53:36:5d:51:68:0c:83:bd:
52:cc:ec:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:30:00 2026 by rpki-client