Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
File: 3EviU3WUInayZECX3D1ah1r7ivE.mft (raw, json)
Hash identifier: Sz02RHwXYw3beXuLduArVuV+bBkWvFm1mbVx43oRoUs=
Subject key identifier: 06:67:A1:E7:38:B2:01:EF:82:5E:26:EB:16:61:41:6F:E6:4B:D0:21
Authority key identifier: DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
Certificate issuer: /CN=dc4be25375942276b2644097dc3d5a875afb8af1
Certificate serial: 01A0DB3BB86ED3CB10E6C99560CD67861D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
Manifest number: 0D25
Signing time: Sat 26 Sep 2026 01:01:59 +0000
Manifest this update: Sat 26 Sep 2026 01:01:59 +0000
Manifest next update: Sun 27 Sep 2026 01:01:59 +0000
Files and hashes: 1: 3EviU3WUInayZECX3D1ah1r7ivE.crl (hash: XV3gv1gmENV2pX5ZG2fBHCmxly1ucjcsQfxtmK0UJPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:b8:6e:d3:cb:10:e6:c9:95:60:cd:67:86:1d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4be25375942276b2644097dc3d5a875afb8af1
Validity
Not Before: Sep 26 01:01:59 2026 GMT
Not After : Sep 27 01:01:59 2026 GMT
Subject: CN=0667a1e738b201ef825e26eb1661416fe64bd021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:4f:c2:49:86:85:47:ef:86:86:e1:31:27:
ff:70:86:8f:ad:b7:9d:20:c8:f6:15:10:d0:46:03:
e5:5c:50:9b:cf:96:39:77:0b:35:48:ce:50:dc:ca:
d2:dd:e8:e4:91:e3:26:7b:b8:99:62:00:25:56:bc:
20:fe:69:8b:c3:41:6b:83:26:c0:95:8d:c4:e1:92:
2b:35:2b:5f:14:87:46:0b:22:1a:88:31:8a:c1:ae:
1d:e6:38:0d:47:5e:af:fd:69:de:7e:6b:f2:a0:45:
d7:ce:13:f3:28:88:34:e2:32:2d:a3:57:15:58:68:
90:66:7b:4b:7a:49:25:6b:18:ed:0f:08:a3:b8:e9:
39:a4:ae:d3:cf:25:0c:ab:85:cb:5c:b0:6f:18:d9:
b3:f0:65:7f:8c:7d:d6:89:ac:9b:16:cd:76:b8:0e:
56:b0:8b:df:6d:58:3b:90:fa:d6:cd:d3:a7:78:af:
0a:45:dc:51:b1:45:08:57:45:f8:34:f5:48:fc:76:
fe:72:95:c1:7b:e0:79:c9:b5:b3:a6:f6:4a:6c:73:
4a:c1:14:ff:f6:52:68:6a:68:5f:80:7d:49:23:13:
d2:c9:4b:18:af:4b:99:ce:09:4e:bd:2c:e8:78:8e:
98:3c:1b:ae:1f:0b:6a:74:d4:22:bc:7d:4b:6c:0d:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:67:A1:E7:38:B2:01:EF:82:5E:26:EB:16:61:41:6F:E6:4B:D0:21
X509v3 Authority Key Identifier:
keyid:DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3e:34:16:03:76:58:3a:66:c6:af:6c:fa:e6:45:45:40:25:
b1:9d:37:c6:a7:c1:bf:eb:5c:6f:67:8e:6e:60:c5:96:71:df:
ca:cd:1f:2c:9a:73:89:ce:7b:c5:57:d6:b9:06:75:cc:45:61:
c0:49:6f:0b:be:e3:52:72:d3:8f:a8:e3:92:20:66:f6:ff:ca:
a8:b7:81:cf:2e:08:dd:9d:0a:80:3a:35:02:a1:b1:6c:59:ab:
49:ea:61:69:1f:bc:d5:b8:70:08:bb:90:00:2c:97:de:55:62:
3b:4d:71:06:26:54:7f:41:ce:43:7a:b8:64:f7:c4:ea:2c:01:
1e:24:9e:a0:c9:29:04:d7:38:d4:38:14:eb:e3:d5:81:38:cf:
da:c5:6e:b6:38:f6:be:e5:f0:fa:ec:c0:5f:7c:60:a8:b9:7f:
fd:91:eb:3c:a6:9d:1c:c7:89:f7:53:e2:83:f7:4e:05:67:f6:
6b:c2:81:9c:ce:cf:d9:70:9a:e2:2a:8a:6a:22:3a:8c:da:e7:
7f:63:95:91:9b:6b:64:3d:75:71:84:22:6e:a3:e2:5e:7e:0d:
62:6c:95:3d:67:22:7f:c3:e5:90:ba:53:01:76:df:d3:7a:8e:
27:af:0e:57:d2:cf:92:62:30:09:a4:a2:db:40:f0:9e:a8:ec:
02:65:86:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:32:45 2026 by rpki-client