Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
File: 3LvdnN1oHwNDXWI8gxkw8ifwub8.mft (raw, json)
Hash identifier: XKT/8xUdPBGxLOhKHsJUO6QhU36/5FW5lDVkTlEewUY=
Subject key identifier: 35:0D:04:02:B7:3D:B2:0F:80:22:37:4E:D5:5B:45:A6:29:BB:45:C9
Authority key identifier: DC:BB:DD:9C:DD:68:1F:03:43:5D:62:3C:83:19:30:F2:27:F0:B9:BF
Certificate issuer: /CN=dcbbdd9cdd681f03435d623c831930f227f0b9bf
Certificate serial: 01A11003D4DA51EA2442D0E977B448F86368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LvdnN1oHwNDXWI8gxkw8ifwub8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
Manifest number: 02E3
Signing time: Tue 06 Oct 2026 07:00:48 +0000
Manifest this update: Tue 06 Oct 2026 07:00:48 +0000
Manifest next update: Wed 07 Oct 2026 07:00:48 +0000
Files and hashes: 1: 3LvdnN1oHwNDXWI8gxkw8ifwub8.crl (hash: PiRXq0Q7Zk9xe0WfpWQfUdqUfqc1KBaOA7e9L4L9mXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LvdnN1oHwNDXWI8gxkw8ifwub8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:03:d4:da:51:ea:24:42:d0:e9:77:b4:48:f8:63:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbbdd9cdd681f03435d623c831930f227f0b9bf
Validity
Not Before: Oct 6 07:00:48 2026 GMT
Not After : Oct 7 07:00:48 2026 GMT
Subject: CN=350d0402b73db20f8022374ed55b45a629bb45c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:d0:2f:d9:bb:5a:33:e2:6b:bb:ed:e6:fc:
92:bd:45:5b:94:6c:a0:e6:5b:8e:14:ff:6a:df:9d:
e1:fe:68:11:0f:56:4c:6b:4d:57:79:1c:28:7e:ec:
97:47:6d:7c:87:8c:97:84:f3:76:eb:6d:59:8f:c3:
80:56:d4:f1:77:bd:49:68:99:e3:bb:35:4e:0a:4a:
42:df:bc:13:ab:51:92:68:95:df:b5:f7:7c:67:df:
49:89:7b:aa:fb:16:ac:53:59:d1:ce:78:cf:8c:5e:
70:a8:f2:ec:21:a6:20:d5:b1:5a:8d:7e:e0:e1:6a:
63:96:6e:8d:06:93:3c:80:59:e4:b4:37:8c:e1:66:
2f:18:c4:9d:bf:d8:88:72:4e:00:ce:d5:37:3c:48:
00:8a:0b:ac:4c:52:3e:a9:5d:3d:eb:ac:da:8c:cc:
a6:f7:ea:02:ba:bc:d1:f9:0a:92:ce:e7:69:02:27:
e3:30:1d:49:9a:d0:e2:db:16:b5:48:ef:eb:24:94:
80:d8:ef:1d:b2:e8:63:d6:0f:85:5b:5e:fe:05:44:
98:22:45:12:40:01:c0:5c:f6:2b:3f:0f:c2:ac:be:
97:39:1b:93:9b:30:ae:8b:53:b0:bc:33:f8:e0:d5:
c2:6f:a5:a5:eb:39:d9:84:bd:0d:b8:11:8d:d4:ca:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0D:04:02:B7:3D:B2:0F:80:22:37:4E:D5:5B:45:A6:29:BB:45:C9
X509v3 Authority Key Identifier:
keyid:DC:BB:DD:9C:DD:68:1F:03:43:5D:62:3C:83:19:30:F2:27:F0:B9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LvdnN1oHwNDXWI8gxkw8ifwub8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:67:89:89:c9:82:19:1f:45:2d:f1:78:8b:d3:b5:29:66:34:
fc:60:aa:b0:dd:b3:f8:32:84:00:c6:df:03:c7:86:a2:e9:33:
4e:f0:00:1a:af:88:33:a3:7d:43:b5:e4:33:08:0b:ee:ef:72:
a4:39:6c:4a:35:78:40:56:e8:7a:bf:3a:d0:98:1b:88:37:87:
94:98:24:90:11:5e:0a:cb:20:40:ac:73:01:c7:2f:5d:6f:ad:
16:52:7d:1e:f2:9f:3f:2e:54:6d:ea:4c:16:d4:14:29:df:8d:
39:79:39:90:12:4d:39:00:ee:aa:a5:cf:dc:7b:73:f9:89:d8:
f4:43:58:5e:77:8e:01:5a:e4:2e:1d:98:91:bb:21:f0:2e:13:
9a:88:c1:e3:17:75:88:3d:e2:2d:c7:e9:a4:04:98:41:18:7d:
ae:a9:38:2a:c7:06:75:73:c6:35:28:80:48:8c:48:7c:7a:1d:
b1:8c:69:fa:4a:79:da:2e:30:27:29:95:d1:e9:e9:51:cc:c4:
7f:36:ce:51:01:85:0e:d6:58:70:e0:32:77:49:4f:e3:4a:c7:
98:bc:53:b0:18:82:49:24:88:c4:78:9f:af:90:f8:ad:21:78:
22:fc:9d:c3:01:45:27:26:5b:18:eb:25:b9:38:d5:dd:5c:4f:
70:43:fb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:58:40 2026 by rpki-client