
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier: 0kH0OGoaDqQAIPdNDKyBeexIons5KTEiJYrWRHdQTfA=
Subject key identifier: 3A:F8:3B:72:1C:61:5E:31:AB:2D:2F:18:F6:F0:37:A4:F5:F3:1C:77
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial: 01A0D94D46934BEDBB99D2000C081E0CFB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number: 1A6C
Signing time: Fri 25 Sep 2026 16:01:55 +0000
Manifest this update: Fri 25 Sep 2026 16:01:55 +0000
Manifest next update: Sat 26 Sep 2026 16:01:55 +0000
Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: 6B47NZf+0YhNm9omYApShDUAGUBhEk8DJcmHL7YWaIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:46:93:4b:ed:bb:99:d2:00:0c:08:1e:0c:fb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Validity
Not Before: Sep 25 16:01:55 2026 GMT
Not After : Sep 26 16:01:55 2026 GMT
Subject: CN=3af83b721c615e31ab2d2f18f6f037a4f5f31c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:72:58:8f:f9:7e:13:88:8a:df:ff:8d:4d:
01:4c:0e:03:d3:23:6a:cf:82:34:3c:ec:e0:be:b0:
a7:76:60:d4:95:fe:76:7a:ba:5b:49:de:7b:f2:10:
4b:13:0a:c0:d4:2c:a0:ca:09:55:e3:9f:07:29:11:
ba:21:b9:aa:07:d9:07:f0:92:b2:61:eb:46:1f:d5:
09:dc:36:5b:20:2e:87:87:30:ac:82:22:c9:d5:ec:
32:8a:b7:c3:3b:35:c8:97:f3:5f:64:87:07:fd:d9:
34:20:44:6f:47:c7:87:cf:49:3b:d8:7f:7e:e6:1b:
9a:8f:d0:f4:bc:24:a1:6f:62:8e:e3:2b:e1:4b:ef:
cb:52:02:cf:bd:ec:cb:df:8b:b4:6d:be:7d:87:36:
90:95:a7:8c:fc:7f:ec:81:2c:af:0c:a6:1a:66:e8:
6e:d6:42:1f:3d:61:99:04:8e:19:e0:8d:3e:23:30:
88:97:fd:63:d8:8b:1a:b9:07:6c:a2:0e:3c:1a:85:
56:b9:53:2c:b9:96:d3:03:e9:60:de:0c:44:58:15:
66:9a:7a:73:bd:19:dc:19:cf:e0:ae:36:0a:56:6c:
85:bc:cd:88:4b:c0:a6:be:62:b6:25:4c:e6:ab:f5:
3a:90:42:df:ec:17:92:14:23:08:e3:e8:11:7f:a1:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F8:3B:72:1C:61:5E:31:AB:2D:2F:18:F6:F0:37:A4:F5:F3:1C:77
X509v3 Authority Key Identifier:
keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9e:3c:2d:a1:3e:13:2b:4f:ca:47:c0:65:38:76:a2:3a:09:
a6:fa:4b:75:93:eb:a7:1e:63:6a:d9:57:76:29:59:e4:b7:7d:
38:c3:1d:db:49:9b:17:bb:2e:eb:00:ea:ec:0a:44:b6:09:fd:
91:b1:bc:8e:05:a4:45:52:fc:2a:cd:ec:1c:bf:65:e1:b6:53:
94:ea:0b:f2:11:81:d2:3b:ba:aa:aa:7c:e5:a2:17:38:ce:5f:
94:47:a5:7a:e0:c1:f5:5b:a8:8b:0b:80:ad:b6:09:11:49:71:
65:17:e4:f3:b1:06:64:4f:ee:ae:2e:fa:83:f2:25:b7:60:80:
67:18:6a:84:42:ae:e7:0d:ad:3c:c4:ae:f7:1f:c9:86:2b:b6:
72:f4:49:67:a4:0b:cc:3a:68:a4:e1:cb:7a:2a:73:b2:32:16:
11:2b:ea:24:5f:1a:39:d2:e8:13:df:1c:fe:04:0f:77:00:45:
25:04:f4:fc:5d:30:4b:39:5a:78:2a:01:dd:0e:44:5c:08:f2:
d2:32:29:0e:aa:5b:75:a7:32:ce:d3:71:db:06:bf:c9:f8:0d:
cd:9f:42:3a:f4:ba:aa:1e:ae:d7:7a:09:6e:c2:fc:7b:f8:a5:
83:b2:a9:8f:4b:fa:f5:75:fd:f4:94:0c:cc:ac:28:73:80:ae:
a3:41:b1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:26:05 2026 by rpki-client