Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/adfe9c-4871-436b-b1af-f53980cd12a9/1/3q1CDzu36fnFhEOZXD3udERG0y8.mft
File: 3q1CDzu36fnFhEOZXD3udERG0y8.mft (raw, json)
Hash identifier: mTTkueBZxsYs8mTF11O/A6Mwk2z8wovnnryDxPs2vVQ=
Subject key identifier: EF:4B:37:FD:31:34:EA:BD:6F:82:3E:3B:8B:29:7D:39:AB:2D:74:B9
Authority key identifier: DE:AD:42:0F:3B:B7:E9:F9:C5:84:43:99:5C:3D:EE:74:44:46:D3:2F
Certificate issuer: /CN=dead420f3bb7e9f9c58443995c3dee744446d32f
Certificate serial: 01A0D3153288B8E285AAADA4DD00274EAC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q1CDzu36fnFhEOZXD3udERG0y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/adfe9c-4871-436b-b1af-f53980cd12a9/1/3q1CDzu36fnFhEOZXD3udERG0y8.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 11:02:56 +0000
Manifest this update: Thu 24 Sep 2026 11:02:56 +0000
Manifest next update: Fri 25 Sep 2026 11:02:56 +0000
Files and hashes: 1: 3q1CDzu36fnFhEOZXD3udERG0y8.crl (hash: yVAGlwIJfgZFVXI0if9GNxucuV2+/IUqNhSsHpaQDTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/adfe9c-4871-436b-b1af-f53980cd12a9/1/3q1CDzu36fnFhEOZXD3udERG0y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/adfe9c-4871-436b-b1af-f53980cd12a9/1/3q1CDzu36fnFhEOZXD3udERG0y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q1CDzu36fnFhEOZXD3udERG0y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:32:88:b8:e2:85:aa:ad:a4:dd:00:27:4e:ac:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dead420f3bb7e9f9c58443995c3dee744446d32f
Validity
Not Before: Sep 24 11:02:56 2026 GMT
Not After : Sep 25 11:02:56 2026 GMT
Subject: CN=ef4b37fd3134eabd6f823e3b8b297d39ab2d74b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:d2:40:20:44:55:0d:35:46:19:ae:81:fd:
8e:14:81:bd:aa:86:33:fb:78:1c:61:2d:bd:3d:80:
14:f9:94:e0:5e:d5:ae:13:e7:04:d2:98:42:b2:cd:
2c:2e:40:98:ea:c7:a2:68:b0:ed:c8:2e:1e:5b:12:
ba:f2:3e:32:6d:cd:1a:bf:ec:35:f7:2b:d4:c0:30:
cf:ef:cc:37:61:f5:bf:f8:d0:df:bb:c0:cc:fb:bf:
5c:4c:0c:bb:e8:5e:77:8e:1e:48:2a:08:c3:eb:ad:
30:f4:1a:18:9e:a4:6a:0d:9d:6e:53:be:45:03:bc:
76:ae:8d:75:55:18:06:d6:0e:47:93:17:99:1a:fc:
de:2f:43:c7:26:bc:46:ea:94:7e:f9:ba:19:69:18:
1e:87:4d:fd:3b:1a:12:ed:31:20:49:bc:1d:92:b4:
00:f8:e2:4d:ae:08:88:84:6a:40:d9:6f:59:2f:c9:
2d:bf:f3:04:9b:cc:8a:a9:0a:69:fe:06:14:00:92:
87:e5:b2:ca:21:c6:41:c5:1e:96:53:49:6a:26:0e:
74:fc:f1:07:fa:11:6e:65:50:e6:a4:b0:52:29:31:
0e:64:c7:69:3f:52:f2:f2:37:77:c6:4f:a4:79:0e:
5f:b7:cd:6c:81:14:df:b3:c7:8a:b0:06:c8:01:05:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4B:37:FD:31:34:EA:BD:6F:82:3E:3B:8B:29:7D:39:AB:2D:74:B9
X509v3 Authority Key Identifier:
keyid:DE:AD:42:0F:3B:B7:E9:F9:C5:84:43:99:5C:3D:EE:74:44:46:D3:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1CDzu36fnFhEOZXD3udERG0y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/adfe9c-4871-436b-b1af-f53980cd12a9/1/3q1CDzu36fnFhEOZXD3udERG0y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/adfe9c-4871-436b-b1af-f53980cd12a9/1/3q1CDzu36fnFhEOZXD3udERG0y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f6:f3:ed:8c:f4:3a:11:7c:bd:2a:73:22:a3:61:17:20:24:
37:24:3d:c7:94:a4:86:94:01:e4:e6:46:f7:a1:ee:7e:ab:dd:
55:19:bd:6f:43:16:59:f0:ac:d4:50:cc:ae:de:74:65:a8:0e:
6b:af:9b:49:a6:e9:26:7a:f8:5d:ef:59:48:65:9b:ea:9d:9e:
30:46:28:94:c3:f5:55:0d:1d:9b:1f:26:61:d9:3b:e5:62:45:
53:05:2f:17:43:cd:df:c7:d9:49:05:2c:ba:9d:be:88:f9:a5:
b8:8d:8c:cc:df:91:0f:32:11:eb:58:86:a1:89:8e:eb:c0:a0:
29:ce:64:07:b3:1f:fe:ac:01:21:6a:f9:05:7e:4a:53:67:86:
7b:0e:56:fa:1c:54:16:49:ea:48:31:a6:e0:69:a9:64:b0:5e:
40:9a:63:d9:0a:0e:38:be:52:d5:8d:8d:c6:d7:65:40:f0:e8:
12:9d:95:79:5e:2c:3c:d2:3a:1f:41:bc:3c:ae:70:cf:ef:87:
70:29:20:d0:23:32:35:4a:75:56:c4:47:ee:31:88:18:15:c4:
8f:91:4a:c1:8e:49:4f:15:0f:b2:10:ec:f3:44:6f:e2:cb:99:
5e:a5:c0:40:32:45:b9:78:47:1f:cd:3c:14:dc:d5:cb:54:ab:
fa:55:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:32:30 2026 by rpki-client