Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier: pECZmCuz9M2Xf+IUYhwWoobaI2UbLqWtq0U9lbeo2K8=
Subject key identifier: 05:42:3E:C3:C4:44:32:81:0C:CD:FD:5A:7A:0D:21:0E:1F:B4:B9:C8
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial: 01A0CE24B40549AEC9C0E0E607D60ED7BE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number: 0EE0
Signing time: Wed 23 Sep 2026 12:01:46 +0000
Manifest this update: Wed 23 Sep 2026 12:01:46 +0000
Manifest next update: Thu 24 Sep 2026 12:01:46 +0000
Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: pF0VrgZ1I2z9DIeQp9duIPDPwYjeodH1+f1Gt/3vBBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:b4:05:49:ae:c9:c0:e0:e6:07:d6:0e:d7:be:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Validity
Not Before: Sep 23 12:01:46 2026 GMT
Not After : Sep 24 12:01:46 2026 GMT
Subject: CN=05423ec3c44432810ccdfd5a7a0d210e1fb4b9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:58:5a:15:aa:cb:11:19:28:f8:aa:01:5a:
ac:45:33:87:fa:33:98:4a:4a:19:bb:93:cd:23:cd:
a1:34:be:9b:db:05:31:96:2f:7b:87:1c:22:3e:ef:
38:a0:3b:c6:14:0b:25:92:38:fc:32:c4:f3:64:aa:
d9:06:31:d0:e5:5d:32:b3:a7:d8:d4:bb:ee:46:26:
c8:a3:ed:eb:c5:45:14:33:06:69:24:be:5c:0f:0b:
3a:e4:2f:94:4f:f2:b6:8b:e4:80:4c:85:b3:d8:d7:
7d:59:5e:c3:bf:a8:8d:15:ae:c1:15:94:f5:ea:60:
a9:95:5f:fe:15:9c:8e:b9:ff:81:55:83:d2:01:60:
44:17:c5:99:c0:5b:3c:63:cf:e5:de:59:19:78:22:
35:9f:4b:04:83:97:cb:ae:a9:cf:38:6d:01:ac:fe:
b0:e0:25:15:96:2c:9f:8c:3d:50:46:81:dc:5a:de:
18:37:58:0c:34:65:f5:0b:81:2f:53:84:1c:ca:45:
dc:c9:4a:2f:ce:f3:68:e2:dc:26:90:b9:51:51:fd:
17:f4:00:18:a4:6d:4f:c7:75:10:b4:6b:aa:f1:60:
b7:80:5b:24:80:18:6a:93:42:6b:20:f0:53:8d:75:
4c:f4:25:28:c8:10:41:bc:10:24:bb:a2:18:66:ad:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:42:3E:C3:C4:44:32:81:0C:CD:FD:5A:7A:0D:21:0E:1F:B4:B9:C8
X509v3 Authority Key Identifier:
keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:89:88:31:0c:98:99:18:db:3a:64:24:df:5b:3e:4c:95:14:
7f:1b:a4:6c:94:de:a0:a5:e7:c2:15:0e:34:bf:3c:19:ca:4b:
88:36:9c:a5:90:0f:c1:de:97:e0:0c:22:af:18:3e:b4:b1:67:
ce:36:92:d6:26:4d:91:3f:02:20:7d:db:93:bf:27:11:e9:03:
88:47:bd:cb:22:99:3d:ea:52:0e:1f:48:2a:d3:e5:f2:5a:de:
a5:36:01:5e:b6:8e:53:c9:b9:6a:6b:5c:c0:af:c0:3e:c2:2f:
cb:a7:53:84:8f:ee:90:2e:53:1f:49:2c:24:ca:56:0f:51:be:
7f:2b:d2:66:f2:0a:12:ac:1f:b2:a4:5c:c1:dc:91:cb:0a:ea:
b1:6d:f0:61:67:ac:76:a2:e8:3b:7e:24:c1:11:d6:cc:12:32:
13:aa:ad:0f:ae:c9:44:d3:4f:ec:49:5b:fe:f6:a7:26:6f:a9:
19:50:fe:04:ff:72:81:d2:06:b7:08:69:7d:c8:d1:b8:13:a7:
34:ac:5a:ae:94:7c:e5:5e:63:2a:0b:4a:ce:26:f7:d8:fe:0f:
fa:11:e9:8f:71:84:e9:9d:fd:29:b7:aa:94:54:4f:9b:c2:9a:
ca:a1:12:37:01:33:f8:52:5e:7c:e5:86:af:c7:0e:8d:5a:f0:
04:22:40:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:48:45 2026 by rpki-client