Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
File: 3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft (raw, json)
Hash identifier: reyEqJvOCoYxl9KMLLjCrZhoJY2cXBQb6yN1IhZJjhs=
Subject key identifier: 3E:58:DD:28:1D:AE:43:FC:7C:0B:FC:D6:60:9B:52:4E:77:D9:A1:41
Authority key identifier: DD:6C:CD:C5:78:E5:B7:CC:97:5E:9F:53:8E:B9:41:F1:92:AD:42:8B
Certificate issuer: /CN=dd6ccdc578e5b7cc975e9f538eb941f192ad428b
Certificate serial: 01A1076EE4A606ACEC6EE8F525E00129E9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WzNxXjlt8yXXp9TjrlB8ZKtQos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
Manifest number: 01BC
Signing time: Sun 04 Oct 2026 15:01:10 +0000
Manifest this update: Sun 04 Oct 2026 15:01:10 +0000
Manifest next update: Mon 05 Oct 2026 15:01:10 +0000
Files and hashes: 1: 3WzNxXjlt8yXXp9TjrlB8ZKtQos.crl (hash: WIheRiT7ji/AAT4ySyFA7JoYxBQJGl5j91Sdr00WJuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WzNxXjlt8yXXp9TjrlB8ZKtQos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6e:e4:a6:06:ac:ec:6e:e8:f5:25:e0:01:29:e9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6ccdc578e5b7cc975e9f538eb941f192ad428b
Validity
Not Before: Oct 4 15:01:10 2026 GMT
Not After : Oct 5 15:01:10 2026 GMT
Subject: CN=3e58dd281dae43fc7c0bfcd6609b524e77d9a141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:ec:cd:21:72:46:28:1b:b1:60:c5:3d:81:
7d:b8:30:02:1c:ed:d2:27:f7:ad:07:a1:9f:a0:66:
34:56:b5:0f:20:07:77:29:92:ed:30:0e:76:91:20:
9e:aa:c4:c2:cf:dc:98:36:cd:0b:b7:0c:b3:3e:05:
74:05:5f:75:a3:4a:ea:9b:01:f6:92:0f:e0:bc:91:
33:3d:98:d2:ad:0b:a2:31:8e:d5:48:08:be:6e:17:
b1:49:e5:b4:1f:5e:a3:51:1c:38:97:4e:e9:5e:78:
3c:af:ca:c0:7e:4a:19:4b:65:fb:46:f8:bd:2f:43:
9a:5a:2b:ba:be:e6:d2:e3:d9:9c:c5:84:83:d0:68:
b6:23:c0:ee:e3:cd:d0:dc:66:48:1f:37:56:73:12:
8e:76:50:c8:78:33:08:2d:82:93:2d:0d:e9:db:d8:
e2:49:c3:0b:3a:00:85:6a:f9:e7:2c:9a:c4:e4:e9:
e9:fc:99:b9:f0:f5:12:8e:12:f6:a8:63:d5:80:23:
fb:f4:02:9b:15:96:24:87:9b:92:87:c5:4d:83:8a:
fa:70:65:cc:33:7e:15:de:c1:0d:a0:5e:c3:d5:2f:
96:08:77:98:f2:32:91:fe:58:14:ac:68:c3:47:cf:
6c:1c:30:34:c9:70:25:4a:94:c2:e1:69:7c:97:86:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:58:DD:28:1D:AE:43:FC:7C:0B:FC:D6:60:9B:52:4E:77:D9:A1:41
X509v3 Authority Key Identifier:
keyid:DD:6C:CD:C5:78:E5:B7:CC:97:5E:9F:53:8E:B9:41:F1:92:AD:42:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WzNxXjlt8yXXp9TjrlB8ZKtQos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9e:e0:fb:6c:f9:49:a5:8b:3b:8e:a4:4f:b2:79:48:99:b0:
df:0d:67:46:6a:ec:d2:88:a4:33:23:47:b3:15:3e:0f:8e:40:
40:81:a9:fb:58:95:3e:07:da:0b:c9:87:c4:47:16:e2:94:ce:
44:e3:89:52:db:07:a0:0c:70:4c:9a:b6:39:97:0f:13:a9:4b:
4e:26:c9:96:cc:36:b5:93:bc:2e:16:c6:99:b5:34:5d:6b:56:
3c:fd:68:f0:11:71:30:f7:de:33:bf:d4:d4:bb:58:c6:13:b0:
5d:ab:21:78:9b:b5:51:6b:a5:fc:0a:90:5f:16:65:5b:a7:0a:
ec:26:a2:6b:37:75:1c:5a:25:17:07:9e:19:c2:4b:d7:16:2b:
5c:98:28:26:01:7f:e5:33:70:c3:8f:af:3c:cb:6b:ff:e9:cd:
f1:a9:05:ae:d6:a1:a8:87:e7:64:6a:c9:4f:7b:96:c7:09:4b:
ab:66:e1:f5:42:ac:d2:33:c1:91:a7:27:02:80:a6:56:c6:d5:
7a:de:50:d4:b4:cd:96:ab:3f:bc:b9:6d:9b:ea:89:f1:ad:0f:
35:56:8d:c8:d6:15:34:04:4f:f2:42:d4:b5:c4:b8:f0:5c:01:
95:a8:2b:fc:73:ca:9c:44:6d:45:8b:5e:25:2e:39:ac:84:18:
3c:18:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:17:30 2026 by rpki-client