Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
File: 3LvdnN1oHwNDXWI8gxkw8ifwub8.mft (raw, json)
Hash identifier: Py4KdNfNEpBK+uL855ZTAQN0H+uoJBqmaLq6lmdwfEs=
Subject key identifier: 03:D6:88:0F:01:6E:F6:71:EB:AF:78:EC:63:FD:0E:B4:F2:8B:9F:07
Authority key identifier: DC:BB:DD:9C:DD:68:1F:03:43:5D:62:3C:83:19:30:F2:27:F0:B9:BF
Certificate issuer: /CN=dcbbdd9cdd681f03435d623c831930f227f0b9bf
Certificate serial: 01A12165FBAE2E0E3B740C453A1178ADE027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LvdnN1oHwNDXWI8gxkw8ifwub8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
Manifest number: 02EC
Signing time: Fri 09 Oct 2026 16:01:33 +0000
Manifest this update: Fri 09 Oct 2026 16:01:33 +0000
Manifest next update: Sat 10 Oct 2026 16:01:33 +0000
Files and hashes: 1: 3LvdnN1oHwNDXWI8gxkw8ifwub8.crl (hash: JLBwZD1i83g5165gyLWNRqEFRECuIYeF6RTCSpjklRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LvdnN1oHwNDXWI8gxkw8ifwub8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:65:fb:ae:2e:0e:3b:74:0c:45:3a:11:78:ad:e0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbbdd9cdd681f03435d623c831930f227f0b9bf
Validity
Not Before: Oct 9 16:01:33 2026 GMT
Not After : Oct 10 16:01:33 2026 GMT
Subject: CN=03d6880f016ef671ebaf78ec63fd0eb4f28b9f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:bf:86:ec:87:23:72:27:73:e1:84:42:50:
25:21:9a:13:6d:e7:94:2a:d0:31:b1:3b:cf:26:f2:
02:d2:f7:79:07:8a:ee:8b:b8:d0:9a:ba:c5:e5:ad:
b2:0c:c9:33:cb:20:50:0f:79:cc:48:1c:2c:cf:24:
55:a5:30:cf:cf:fa:ee:04:a7:53:71:83:61:70:08:
e6:a2:26:aa:77:7f:45:2c:c2:b3:7b:dc:63:a0:29:
42:8c:41:3d:fc:9e:47:08:d3:30:32:fc:c1:f0:b0:
7e:23:79:d0:bf:bc:51:13:49:15:2e:c3:e6:cb:c5:
b8:47:b3:b5:c7:7f:7d:df:05:d8:c3:e1:4e:58:7a:
e4:01:00:e8:2a:ce:12:e9:f8:33:45:16:a9:3f:49:
e5:c7:d7:ae:a7:3e:7f:97:96:d6:ed:2d:81:24:d6:
a9:96:07:59:cb:29:52:25:97:2d:dd:50:62:87:52:
24:88:12:03:1a:bd:56:75:a3:26:88:f4:1a:91:55:
43:e3:6d:dd:9e:18:de:cd:d1:d7:11:54:b5:20:1d:
6f:27:5d:ba:cd:1e:b0:a4:69:a0:11:dc:c9:76:a0:
b8:d1:51:ef:03:30:20:ce:a9:5a:b8:99:1b:d4:d1:
ee:78:29:1f:36:06:84:b2:27:67:28:84:39:53:8f:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D6:88:0F:01:6E:F6:71:EB:AF:78:EC:63:FD:0E:B4:F2:8B:9F:07
X509v3 Authority Key Identifier:
keyid:DC:BB:DD:9C:DD:68:1F:03:43:5D:62:3C:83:19:30:F2:27:F0:B9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LvdnN1oHwNDXWI8gxkw8ifwub8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:07:13:6c:28:c9:14:a7:9a:f8:db:95:f2:32:90:12:c6:ed:
af:49:76:bd:14:5c:be:94:e4:2f:0a:3b:42:4b:c9:22:20:c2:
37:da:4e:d0:96:a6:11:13:c3:9f:5c:9a:75:07:9d:00:33:86:
97:db:d5:ac:14:14:94:c6:5c:66:94:9a:07:91:38:fc:44:b4:
b0:f9:43:e3:55:49:f3:70:3f:80:dd:b8:d1:3b:28:5f:bb:4e:
a2:6e:d9:61:6f:83:17:a0:fe:10:9c:e7:3e:d2:ef:73:07:9e:
5a:a4:51:19:cf:3f:b7:cc:16:ef:85:d7:03:ed:43:5c:ca:5a:
49:31:62:8f:8c:61:14:88:b4:d5:bd:0e:fa:2b:0c:c3:0c:95:
fc:d5:75:76:b6:32:43:c4:b9:ac:63:eb:37:45:13:d8:18:55:
32:60:07:3c:54:66:2b:1b:df:0c:3a:3b:c3:a5:1e:7c:d2:94:
f5:c8:dc:45:b4:72:2b:77:f6:f7:72:11:95:13:50:b8:96:6a:
c6:2c:cc:39:aa:8b:ad:c8:26:4a:f1:aa:71:f0:5a:58:70:1d:
35:d1:43:d3:b5:90:b5:06:02:c0:ea:dd:52:bc:9e:ce:9f:bc:
eb:68:7a:4c:d7:dd:16:99:a9:0d:3c:f7:24:51:ba:50:44:c7:
9f:62:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:35:55 2026 by rpki-client