Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
File: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft (raw, json)
Hash identifier: GRELQQPI465wRitjE5F4NFly7GfvBmPZ/GjIa1RjVjE=
Subject key identifier: EB:70:90:94:4B:A9:F1:47:96:DB:EF:5D:DC:06:25:3E:E4:C8:39:A6
Authority key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
Certificate issuer: /CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Certificate serial: 01A0DC16D2DCE6A172CC458E93673B78D54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
Manifest number: 1373
Signing time: Sat 26 Sep 2026 05:01:18 +0000
Manifest this update: Sat 26 Sep 2026 05:01:18 +0000
Manifest next update: Sun 27 Sep 2026 05:01:18 +0000
Files and hashes: 1: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl (hash: RWIc2gndjM3gIW49n2Kq14/uG4nCm1WT5zNyH3wI8yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:d2:dc:e6:a1:72:cc:45:8e:93:67:3b:78:d5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Validity
Not Before: Sep 26 05:01:18 2026 GMT
Not After : Sep 27 05:01:18 2026 GMT
Subject: CN=eb7090944ba9f14796dbef5ddc06253ee4c839a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:d3:af:fd:2d:31:92:c1:b5:7b:bc:3a:3c:
a0:d6:37:9a:59:0b:18:9b:51:ba:89:b9:6e:86:02:
8c:8f:8f:e1:6e:79:42:63:98:80:c8:5b:1b:6a:19:
68:c7:a6:bc:19:4f:96:b6:cb:15:41:cc:b6:85:7d:
b3:f0:f8:3b:d4:24:3e:2b:e4:71:ab:3b:bd:76:79:
c0:21:98:b9:10:6f:1c:70:34:a5:a1:c1:74:b8:5d:
54:e9:86:f4:3c:75:07:25:25:af:12:cc:06:58:30:
35:97:d7:9a:e8:5d:2a:c9:47:fe:a7:a5:9e:98:f8:
75:22:93:b2:62:73:be:71:19:41:84:41:68:40:e1:
0e:0b:8c:31:bf:fc:af:3f:2d:52:53:4e:3d:ba:3f:
b6:fb:75:02:27:e4:b4:19:78:6a:52:e1:0a:81:78:
43:f3:f5:3c:ea:df:36:88:ec:fc:65:ce:64:92:9b:
7d:c1:5f:ac:94:ce:94:88:cd:d0:55:74:1d:cb:22:
64:8a:a7:e4:15:8d:38:3c:50:a2:60:12:37:59:45:
ee:ef:00:4a:e7:bd:1b:ab:8d:3f:0b:d6:a1:7f:1b:
10:e5:18:32:bf:e1:8c:37:a7:82:42:7a:c3:84:11:
2a:98:87:26:77:09:0f:4a:8e:b3:f4:be:17:04:11:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:70:90:94:4B:A9:F1:47:96:DB:EF:5D:DC:06:25:3E:E4:C8:39:A6
X509v3 Authority Key Identifier:
keyid:DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:00:c1:26:e8:45:a1:8f:52:f4:5b:03:d1:f1:d8:52:e7:af:
be:25:b9:cb:1c:f7:6b:a4:2e:fe:9e:06:b9:f0:40:8b:0a:1e:
4b:7f:e3:88:b0:9f:aa:85:06:c0:84:ba:07:40:bb:ce:23:7a:
5e:bf:46:2c:b9:c4:48:8b:8d:59:e9:90:9a:ad:72:2a:fa:3b:
54:c1:d4:c9:0e:aa:0d:cb:60:0f:c8:9c:21:ee:84:38:5f:a0:
80:d2:62:19:f4:0f:55:21:d4:15:67:2d:ca:c7:b7:77:c2:c5:
e0:06:e2:da:ad:70:ff:44:cf:05:3b:15:38:ef:83:07:c8:03:
2c:92:c2:a2:71:80:a4:3e:ff:3a:09:52:57:39:6a:8b:58:95:
25:ce:ad:ea:bb:48:cb:84:1c:4a:17:de:cb:6d:55:ad:a3:34:
94:a0:73:af:d0:55:50:e9:1a:95:e0:8d:a9:15:e9:12:01:b5:
52:6e:32:63:c3:2b:93:f6:ec:5e:9f:63:e7:e1:4e:d9:28:1a:
08:c2:2d:e8:d8:95:f8:57:9d:32:09:f7:db:a7:af:4c:4b:02:
ae:bb:11:c1:dd:60:e8:99:fa:62:8a:35:d4:bb:a5:a0:fc:72:
ca:eb:a1:84:9f:b9:88:a7:86:88:e5:d3:be:44:7c:83:80:fc:
6e:63:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:26:19 2026 by rpki-client