Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: XyfsiApXRfI/37NM/oRxXmHJX7yXGSFyRrpKoy7B82U=
Subject key identifier: 76:08:7D:4D:6C:18:99:45:27:7E:11:6E:FF:58:58:B9:E6:8D:E1:4E
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 01A0C96ADE23DB50097759DF0D3020ADA641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 10E0
Signing time: Tue 22 Sep 2026 14:00:19 +0000
Manifest this update: Tue 22 Sep 2026 14:00:19 +0000
Manifest next update: Wed 23 Sep 2026 14:00:19 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: sYltegJ9447p+FFZobiW3wXSwuzNKQbE3+rqGyYerzA=)
2: IFcPSJLrXOIb360qpvfjslM8AeU.asa (hash: Uoj3vnQ4WI4zOKZ/VBdpJT4g8J+jbJ0SehrMNsQWEOg=)
3: mN6LPum92-oppYTfVnse9pFdGGY.roa (hash: Az1RSnzhomoH0PRWVFUSJEmI0WtwP1548LAxILCV7N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6a:de:23:db:50:09:77:59:df:0d:30:20:ad:a6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Sep 22 14:00:19 2026 GMT
Not After : Sep 23 14:00:19 2026 GMT
Subject: CN=76087d4d6c189945277e116eff5858b9e68de14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:b1:ee:f6:7a:a9:59:ca:67:91:e4:d5:42:
88:d5:58:a6:89:4e:20:63:e8:bd:22:d8:9f:4a:e1:
a9:33:34:58:9f:00:6c:bc:aa:3e:f3:5c:56:ce:0e:
6f:41:85:b2:78:8d:49:68:bd:ed:38:d6:66:92:52:
01:0e:74:01:78:3a:85:89:da:78:b8:79:0c:63:98:
10:72:a1:d9:4e:68:fd:87:ae:81:2b:f2:7c:a7:1c:
89:86:43:8a:62:a2:c0:77:e7:98:99:ab:d0:e0:7b:
18:c2:ef:a6:72:49:ee:40:7a:54:a7:d8:57:2f:30:
af:8d:a4:4a:a3:da:2f:a8:be:cd:a0:c2:0b:36:e1:
b2:30:1c:29:61:9e:c6:7c:96:22:45:8b:5a:f7:1a:
42:b4:35:7d:6b:fb:94:5c:de:86:94:24:99:db:3d:
dd:43:35:a7:b0:56:21:a5:93:00:58:3d:77:47:25:
ae:99:1b:fc:cd:f8:ec:b4:9c:a6:9b:2f:55:a5:eb:
9b:00:00:36:62:8b:c4:e0:45:fa:a8:a9:32:96:be:
ce:ad:c3:64:b4:1f:75:db:bb:7c:6a:16:45:9b:6d:
f1:35:cf:49:8e:28:d3:8d:df:a2:d9:07:d9:bd:e8:
1a:0f:6c:50:c5:1e:f3:ef:c9:c2:07:2e:be:51:7a:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:08:7D:4D:6C:18:99:45:27:7E:11:6E:FF:58:58:B9:E6:8D:E1:4E
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ef:cb:87:89:f3:7e:2e:ce:e5:49:d7:d2:0c:d5:a1:1b:10:
c2:4b:1f:6d:4a:73:79:7c:25:80:d0:40:60:49:74:15:fe:b9:
cb:4d:08:fb:d7:f9:9b:86:89:c4:8d:b9:47:23:7f:17:92:fe:
19:f2:a2:b9:51:c5:ab:76:f1:07:a3:ed:e2:87:f9:9f:19:de:
85:24:7e:6a:5d:80:b2:27:e4:64:a5:31:6b:4c:6d:3c:ee:13:
3b:8f:9d:37:e2:de:c1:59:0a:db:66:f6:4d:51:f2:53:b7:e0:
0e:44:5b:71:59:53:02:cf:9e:29:97:01:9e:88:11:d7:ed:fe:
63:7a:f2:2d:4c:ef:3a:51:a5:39:f0:a3:8b:b9:15:3b:26:8a:
6e:26:de:02:fd:f7:da:e1:7d:3b:db:cc:00:58:87:f4:ba:9f:
71:a6:79:38:18:8c:fd:85:af:94:4f:b8:41:45:51:f1:bf:48:
69:61:52:50:df:93:6f:37:58:f2:d3:5f:a5:47:5d:e6:01:1f:
38:52:76:34:22:1c:4c:24:80:0b:96:03:71:b0:72:85:cd:94:
a1:5d:e3:c6:4e:7f:ef:c2:ee:b0:03:31:da:04:4c:69:4b:07:
49:1d:8c:95:1f:d8:e6:d8:61:0e:f1:ca:92:7c:d8:e8:ff:86:
4e:d5:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:20:07 2026 by rpki-client