Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
File: 3dStS_QUF7o4OE1lvC0HwPaFCeE.mft (raw, json)
Hash identifier: M6s/m4sU7kv+CpY41NjFylV47t9wotOuUeTHMIDpbuc=
Subject key identifier: 02:68:76:64:FB:F3:37:3A:2E:32:71:BC:57:3F:06:CB:07:92:7C:32
Authority key identifier: DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
Certificate issuer: /CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Certificate serial: 01A0D5DECF671358133E356A12CFF589DC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
Manifest number: 19FF
Signing time: Fri 25 Sep 2026 00:02:24 +0000
Manifest this update: Fri 25 Sep 2026 00:02:24 +0000
Manifest next update: Sat 26 Sep 2026 00:02:24 +0000
Files and hashes: 1: 3dStS_QUF7o4OE1lvC0HwPaFCeE.crl (hash: h3P4/44vfIYO+WwnnJS9RrAG9JJG0BkcWNnIB3iUUOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:cf:67:13:58:13:3e:35:6a:12:cf:f5:89:dc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Validity
Not Before: Sep 25 00:02:24 2026 GMT
Not After : Sep 26 00:02:24 2026 GMT
Subject: CN=02687664fbf3373a2e3271bc573f06cb07927c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:db:8f:c2:78:05:8e:fc:83:5f:b4:29:1d:
ce:c3:c4:5c:b4:61:14:17:76:f7:5d:a1:fe:07:ef:
ff:c2:38:a9:f1:3d:bd:cc:08:f7:a2:f5:da:1c:2c:
af:d9:cf:eb:d6:23:4e:28:5f:c3:42:72:0c:7f:44:
07:7b:57:cd:f1:a2:90:44:9a:b5:ad:20:2e:17:13:
34:c7:ba:dd:9d:56:c3:86:31:ac:81:7f:f9:98:74:
b7:cf:0c:c2:68:03:d4:68:c8:ac:ec:82:77:2b:21:
9a:e9:74:39:bf:cb:ae:91:05:de:22:86:9a:cf:17:
a9:87:08:ab:8b:0c:0a:b9:79:54:e5:5b:c5:05:66:
3e:84:e3:15:64:78:e8:9f:ce:19:f2:41:c1:7b:dc:
e7:e6:80:c1:34:c3:8d:e5:46:67:6b:af:37:30:8c:
8d:1a:d9:c1:52:25:d5:51:05:53:16:aa:c3:1b:0b:
bc:d4:d6:f6:9d:ee:d1:66:08:5f:ba:a9:07:03:83:
5b:16:0e:07:83:90:69:f5:64:df:6f:f6:4a:fc:0c:
c9:13:81:45:50:ac:fa:1b:5c:22:80:8c:04:82:66:
0a:af:03:f9:f2:1e:c0:0f:c9:6a:e7:35:9f:c4:17:
b4:4d:0d:35:43:d6:5a:5e:d9:c7:61:9d:af:b9:2c:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:68:76:64:FB:F3:37:3A:2E:32:71:BC:57:3F:06:CB:07:92:7C:32
X509v3 Authority Key Identifier:
keyid:DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4d:77:30:26:4e:c4:6c:74:9d:c9:3b:a3:99:07:52:1c:27:
c7:69:2f:cf:f6:93:b4:23:87:8a:da:5c:c9:f2:09:5f:8c:3c:
d8:28:81:3e:86:7d:35:1d:a8:9b:4f:26:b7:38:bd:2a:ea:5d:
65:40:0f:9f:1c:1b:2c:ed:87:fd:0e:aa:13:53:0f:b8:2b:e1:
d7:e6:c2:ae:84:98:82:8b:93:fe:a6:d0:28:0a:57:bd:27:f5:
8b:8b:e5:57:d3:33:cb:91:f3:0f:e5:b5:0d:65:f3:f0:b5:b2:
d2:17:92:2e:95:60:ab:52:f7:20:7f:88:b7:28:34:ac:0b:e7:
46:e4:2a:fc:ed:f1:32:46:87:a3:54:6b:32:46:8c:01:d1:78:
13:b5:b6:4a:96:bb:6f:f1:58:a4:a8:c8:b5:89:4c:20:51:37:
d2:d2:ab:bd:09:84:cf:d0:8d:6c:aa:47:c2:bc:60:91:9b:71:
ab:16:2b:42:28:8e:ae:70:d2:f1:05:14:3b:c2:d8:0b:4c:e6:
d1:13:e3:89:18:d7:b1:81:cc:cc:be:f9:21:37:b7:1f:4d:87:
df:48:89:56:e8:97:9f:7a:13:38:9d:e3:e7:5b:71:e9:49:a3:
77:a7:f2:41:c3:a6:c8:e0:b3:b5:52:0c:c7:da:fc:75:5e:8f:
ad:f1:7b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:11:24 2026 by rpki-client