Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json)
Hash identifier: 9ky4ItHptPntNdDB2L/4Ao6FbgAdLKNVJiCbfBx05tc=
Subject key identifier: CC:4F:72:8C:23:F6:52:A1:13:86:7B:99:EA:9C:2F:29:2D:5B:C9:44
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01A0D917322041FB197EC5600A693A4E731E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
Manifest number: 166B
Signing time: Fri 25 Sep 2026 15:02:50 +0000
Manifest this update: Fri 25 Sep 2026 15:02:50 +0000
Manifest next update: Sat 26 Sep 2026 15:02:50 +0000
Files and hashes: 1: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: EHvLVqwNz4MUeksZNxSeoOVL6WR5VPgUG5LVIm1ewE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:32:20:41:fb:19:7e:c5:60:0a:69:3a:4e:73:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Sep 25 15:02:50 2026 GMT
Not After : Sep 26 15:02:50 2026 GMT
Subject: CN=cc4f728c23f652a113867b99ea9c2f292d5bc944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:7f:75:36:01:62:1d:c2:b2:36:8d:6c:00:
c6:f0:4f:02:4f:0e:87:7f:63:b9:f9:7b:bc:96:77:
99:32:dd:b5:cf:23:00:a2:82:bf:ef:a4:7a:43:96:
3d:ea:67:96:c6:3a:bf:cb:80:ea:33:c9:13:b5:f0:
82:88:ee:be:66:21:2d:22:7b:54:20:00:f4:2b:70:
83:63:f9:c2:11:d5:10:10:bf:d8:79:c5:b2:9b:37:
4e:ab:fb:15:a5:d3:2c:61:b4:d6:18:07:df:e0:24:
4a:9f:eb:6b:09:3b:25:53:d0:ad:f1:8e:39:0f:26:
8d:18:5a:05:e0:07:d5:68:3b:74:25:32:92:3a:9d:
97:6f:98:a6:b0:d4:73:ae:4a:57:a4:22:9b:68:61:
16:de:5a:a2:70:30:8e:8c:bf:1c:b7:2e:66:b8:81:
1a:f1:1b:e5:7f:dc:bd:90:54:d7:1e:c3:57:da:56:
0a:60:41:d9:6b:9c:fe:8f:61:1e:21:aa:25:94:54:
fe:c8:b1:d4:2f:ce:24:a0:ea:b5:bf:27:6b:57:1f:
a2:f2:74:b4:b0:ff:de:d4:a3:02:f9:98:ef:7d:c3:
32:bc:68:6f:4e:fb:ca:5c:5d:fd:55:23:11:c7:88:
03:d6:c8:4c:56:5d:29:4d:4c:d2:c3:44:f1:7b:c5:
75:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4F:72:8C:23:F6:52:A1:13:86:7B:99:EA:9C:2F:29:2D:5B:C9:44
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:76:9e:91:f5:b4:03:30:40:13:26:9f:6a:fa:2c:40:d8:5d:
ed:04:e1:6a:ed:75:97:f2:c9:f8:4c:6c:81:1d:e9:4a:a7:08:
45:aa:d6:50:fa:2a:4d:4d:d8:c6:fa:39:94:38:97:b1:16:b2:
db:6e:6e:84:cb:75:94:4b:94:68:15:92:65:44:f3:c8:4f:53:
97:8a:f4:29:b0:1f:a3:18:04:8f:da:94:38:e2:8c:25:2c:33:
ec:24:83:bb:ac:39:9b:55:ce:ed:c3:c9:87:6e:57:f2:af:0b:
7f:93:d0:60:8d:07:41:02:ba:c4:5a:0b:17:e7:a6:1a:81:db:
5a:4a:62:2b:69:b4:9e:31:f3:67:c5:c3:f8:18:c9:d1:c5:38:
ff:88:3a:33:6f:a8:f4:82:7c:44:5e:91:cc:f8:fd:74:9b:bb:
95:33:4e:e4:fc:c3:f5:51:3b:0e:df:ef:60:bd:e5:93:df:39:
3f:ea:2c:6d:11:a5:2a:4b:e3:8e:dd:51:73:bf:85:c8:7f:ab:
c7:e7:f1:c8:01:50:17:f7:8a:34:c5:fe:1b:6b:dc:d2:c9:7e:
fd:a4:f4:73:e8:1b:76:47:df:a5:27:04:16:c4:d8:8f:9d:12:
94:ee:49:31:60:52:59:ca:1b:a9:b5:7a:6a:48:66:ca:fd:b0:
ee:98:f2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:13:13 2026 by rpki-client