Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File: 3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier: lWqdpKeZoo3dbIHq1DARl1Tv7qz1i4C2VpUS1SzytzI=
Subject key identifier: E2:15:BC:2F:1E:B4:C0:AB:D9:FC:E4:15:69:F3:85:29:24:94:8D:E6
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer: /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial: 01A0C1B18D387CE27D6EBB892EDBD7BCF09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number: 0FD9
Signing time: Mon 21 Sep 2026 02:00:33 +0000
Manifest this update: Mon 21 Sep 2026 02:00:33 +0000
Manifest next update: Tue 22 Sep 2026 02:00:33 +0000
Files and hashes: 1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: SiZxd5krk4l4tG5rOKKaKg23tv6M5e1syrBSgSdflnI=)
2: beU-evce9w8RpnlnhExOwqlTqVk.roa (hash: CxYZfkZx1/BXf+X3x5D+cUabOXDyrgunzk0Oi/R5nlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:8d:38:7c:e2:7d:6e:bb:89:2e:db:d7:bc:f0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Validity
Not Before: Sep 21 02:00:33 2026 GMT
Not After : Sep 22 02:00:33 2026 GMT
Subject: CN=e215bc2f1eb4c0abd9fce41569f3852924948de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:d6:c7:ea:02:f7:fa:60:57:60:bf:41:92:
d9:d0:b7:f3:3f:7c:f2:80:02:be:77:f0:56:3a:42:
60:06:63:4a:16:d0:78:c0:0b:94:34:44:c4:9b:0b:
9e:eb:06:34:6e:0b:4f:d9:60:cc:d5:f0:f4:ce:86:
0b:a5:f6:f0:33:9b:c0:bb:67:58:be:5e:a9:0f:8b:
61:3d:00:bb:bc:31:08:a3:36:30:45:6d:43:a4:93:
b7:d8:10:27:7d:58:93:44:aa:f2:f3:7c:1c:56:67:
a9:4b:7b:d3:9b:59:96:ef:ad:ed:19:e0:77:35:33:
22:34:ca:1b:02:23:3c:b3:37:17:5c:00:d9:38:25:
71:38:a9:1c:8a:47:ac:9d:fd:f4:ff:73:18:ea:a7:
8c:7c:59:13:31:74:cd:c7:b5:fd:e8:a3:83:6c:96:
0c:89:32:1d:e0:33:8e:ce:35:b7:20:f2:89:c4:a0:
f2:04:90:1d:29:93:95:8b:38:df:bd:6b:50:93:0f:
7d:7a:28:b9:ed:67:ad:b6:35:4f:00:61:ef:2f:95:
54:48:25:7f:8a:02:6d:53:6a:ff:38:68:50:2e:6e:
b6:bc:31:35:80:87:fc:83:71:b6:d8:e4:32:27:66:
85:45:d9:5d:45:b1:ce:2f:bc:bb:7d:7d:ff:a6:63:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:15:BC:2F:1E:B4:C0:AB:D9:FC:E4:15:69:F3:85:29:24:94:8D:E6
X509v3 Authority Key Identifier:
keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:49:57:4b:5c:4d:47:67:78:32:13:69:d5:45:df:1e:cb:bd:
ac:e4:8a:74:5d:9f:9f:2d:80:31:42:ae:c2:ca:4c:e2:90:13:
f2:49:f3:ce:e6:6f:83:36:14:c2:73:eb:39:de:a4:cd:1b:b1:
fa:4b:8d:fc:e7:d5:cf:5a:6f:34:04:79:bc:e1:db:6f:ca:61:
d5:d3:f8:13:7a:f0:51:dc:51:cc:10:13:11:8f:89:1f:4e:e8:
de:3d:d2:a1:97:a3:26:f1:2e:b9:75:8b:5c:a6:c8:43:6c:2a:
d5:12:6d:76:b2:8a:46:de:87:42:f7:b1:ba:ec:d1:cb:53:64:
ef:ee:a9:e5:bd:b9:87:9b:26:69:a2:cb:e8:55:51:35:a1:8b:
cc:94:63:64:f6:85:d0:ca:14:e9:1e:b7:5f:a7:ad:7b:f3:f0:
c8:72:d6:30:6a:d9:81:ae:a5:e6:fa:cc:56:41:23:1b:bf:df:
38:a6:fe:d5:5b:17:f7:e9:fa:a7:14:25:51:2c:71:d2:6a:1f:
53:70:cd:8a:37:be:f1:17:b8:fe:d4:3d:c2:53:0d:db:5a:24:
2c:b3:a2:9a:51:fb:30:ae:5f:f9:d7:1f:03:47:f1:4b:ad:f0:
70:d7:93:b4:55:2f:02:25:04:71:68:8d:07:4d:c2:65:36:cb:
25:63:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:04:47 2026 by rpki-client