Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
File: 3frtS0AyNuLKi-twkcug4GpUPQo.mft (raw, json)
Hash identifier: kRj9pRNGpL71PyTSCszwJTPFn2gS0366wi+rKDbCf1k=
Subject key identifier: 23:30:21:F8:2B:63:DD:5D:8F:EA:9D:72:BF:06:61:AF:96:1C:31:2E
Authority key identifier: DD:FA:ED:4B:40:32:36:E2:CA:8B:EB:70:91:CB:A0:E0:6A:54:3D:0A
Certificate issuer: /CN=ddfaed4b403236e2ca8beb7091cba0e06a543d0a
Certificate serial: 01A0D382C844E00E14619CA32E39579C2039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
Manifest number: 05B0
Signing time: Thu 24 Sep 2026 13:02:38 +0000
Manifest this update: Thu 24 Sep 2026 13:02:38 +0000
Manifest next update: Fri 25 Sep 2026 13:02:38 +0000
Files and hashes: 1: 3frtS0AyNuLKi-twkcug4GpUPQo.crl (hash: Kudb8N4VM+DDswE20m2toHKXZZEuSwUH3619yI9hBtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:82:c8:44:e0:0e:14:61:9c:a3:2e:39:57:9c:20:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfaed4b403236e2ca8beb7091cba0e06a543d0a
Validity
Not Before: Sep 24 13:02:38 2026 GMT
Not After : Sep 25 13:02:38 2026 GMT
Subject: CN=233021f82b63dd5d8fea9d72bf0661af961c312e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e7:77:35:09:7a:d2:d0:80:b1:04:21:8d:1a:
d1:0e:0f:1f:9e:f8:cd:5c:97:68:bf:ef:a4:2b:20:
9c:9c:f9:cc:c3:a1:9a:7a:be:a5:3c:6d:f3:03:4d:
97:d4:81:5e:10:91:e3:b3:d3:aa:a8:d7:b2:bb:d9:
29:01:93:65:fe:76:cb:e2:6f:e5:47:1f:78:18:cb:
81:67:46:7b:47:95:a4:de:29:6a:f5:ee:82:6f:ab:
0d:18:42:70:df:59:76:1a:97:44:29:2d:8c:02:9a:
71:34:3b:1d:5d:6d:cf:be:02:78:4c:93:4a:ba:38:
8e:f1:78:ae:02:f5:c7:b6:1c:21:36:06:2a:a4:b4:
70:14:97:c6:e6:36:2a:49:ad:a8:f0:7e:c2:05:99:
5e:1b:ee:11:0b:17:d9:cf:f7:a8:9b:87:74:3c:6e:
75:c4:81:aa:fc:c4:3a:2d:9e:db:0b:87:6a:a9:86:
c9:fd:bc:b0:41:b7:b6:6a:09:01:03:8e:fd:4d:3c:
f0:8f:db:cc:98:a9:04:75:b9:b6:e7:45:83:85:a5:
0f:ba:6e:91:c7:99:2a:4e:03:a4:ce:5c:6f:40:58:
c2:b9:05:44:23:b4:73:4a:56:ba:66:03:da:32:26:
d4:c8:81:25:73:1e:8b:ab:34:44:3e:85:52:69:53:
3a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:30:21:F8:2B:63:DD:5D:8F:EA:9D:72:BF:06:61:AF:96:1C:31:2E
X509v3 Authority Key Identifier:
keyid:DD:FA:ED:4B:40:32:36:E2:CA:8B:EB:70:91:CB:A0:E0:6A:54:3D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:37:e3:05:48:ff:dd:06:29:f1:d6:7f:12:c9:c1:f4:70:09:
8a:b1:a2:5c:6a:91:7a:21:f0:8c:60:12:f2:b1:8b:1f:98:32:
04:78:02:6a:44:c7:8f:7e:30:35:e3:5e:cf:d1:19:30:37:d7:
11:c3:d6:80:92:a2:30:35:54:42:88:40:70:3a:dd:cb:c3:f0:
61:6f:48:6f:46:1e:2b:06:5f:3c:6a:81:7d:e8:5f:fd:0c:2c:
b4:6d:fc:da:5e:b6:b3:3b:c1:de:f2:5a:55:48:9d:d2:1d:e5:
81:c3:d8:ef:9d:5f:81:ce:5a:c2:a5:bf:e7:1a:83:02:41:c7:
16:84:c9:5e:ec:12:b6:9e:ae:e6:f9:a8:31:90:09:80:42:f1:
5d:e0:3f:0f:32:46:12:51:93:a8:d5:dc:6c:d7:38:92:7d:b6:
19:a7:60:eb:f3:ad:f7:7f:30:e7:fd:92:6f:71:5d:f2:41:14:
35:b9:1e:f6:07:d0:fa:ff:cd:12:04:f4:93:c1:6e:5f:7c:3e:
13:f5:c1:41:90:e8:c9:46:6a:9e:cd:a2:f4:2a:d0:80:96:a9:
dc:05:23:67:7f:f9:ed:52:63:af:a1:98:ed:0b:09:19:c6:1f:
b2:5f:5d:99:15:3a:d7:3d:bf:42:d8:7e:27:bd:f7:d9:c5:0f:
a2:fd:54:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:37:55 2026 by rpki-client