Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
File: 3ikhmJ19kMZOuzVliDH-ao9JyTg.mft (raw, json)
Hash identifier: djlS+Xo9D6k3C+/674zLhRHFZ5O38Y7BchicvN1HEA0=
Subject key identifier: 45:50:5D:7D:C8:A3:11:2F:80:0E:50:42:73:9D:22:A9:F5:47:2F:04
Authority key identifier: DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38
Certificate issuer: /CN=de2921989d7d90c64ebb35658831fe6a8f49c938
Certificate serial: 01A0C6D7DA4859E006551E3A783CC7B71917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
Manifest number: 0ED8
Signing time: Tue 22 Sep 2026 02:00:29 +0000
Manifest this update: Tue 22 Sep 2026 02:00:29 +0000
Manifest next update: Wed 23 Sep 2026 02:00:29 +0000
Files and hashes: 1: 3ikhmJ19kMZOuzVliDH-ao9JyTg.crl (hash: C3y4GdFD3Hw6stu45qS24MqCYPvtJhH8K0zKyp2ziRY=)
2: _ioUT6ot6spKYeitBH6WHig08aI.roa (hash: lPf90VagjG9YZhFPp1sns8p7TmON2JIuqMSkRErr21k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:da:48:59:e0:06:55:1e:3a:78:3c:c7:b7:19:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2921989d7d90c64ebb35658831fe6a8f49c938
Validity
Not Before: Sep 22 02:00:29 2026 GMT
Not After : Sep 23 02:00:29 2026 GMT
Subject: CN=45505d7dc8a3112f800e5042739d22a9f5472f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:2e:6c:3a:02:a2:bd:a6:3b:ac:68:a8:77:
b8:a5:2f:ae:1f:f9:c0:3f:ff:aa:5a:cd:d9:d2:31:
3c:6c:52:61:b0:72:d1:bc:d4:b2:7d:ec:32:73:a5:
13:04:7a:2b:82:a9:a7:f0:8b:a9:fd:24:b4:a6:10:
5f:8f:3e:40:88:a2:63:1b:50:06:9e:c6:0e:8c:8b:
48:2f:6a:4c:da:f3:c2:ea:43:1b:fa:7e:5d:2f:99:
a2:b9:81:d8:55:ac:94:68:ba:33:21:60:0f:4c:ea:
51:90:36:3e:5d:7b:62:99:12:6a:ef:74:0c:e8:27:
a5:68:35:73:10:01:a2:d3:ac:5f:e9:02:0e:7e:95:
47:f4:c4:8e:ae:09:0d:3d:e8:49:49:d3:8d:65:05:
bf:52:73:f4:07:9d:cc:f6:b5:6a:c8:6c:3a:12:61:
9d:3d:75:51:04:bc:a1:3c:5d:24:98:32:92:af:eb:
d8:85:fd:c7:e4:51:16:81:fd:f3:94:b3:a6:62:9b:
ad:87:16:ac:a2:e1:05:08:59:d0:f2:b8:e2:f4:e4:
d1:31:6b:da:7b:33:2e:65:c1:4a:40:84:9f:60:64:
cc:24:9a:dc:0f:15:92:d0:25:42:97:58:1d:54:9d:
33:04:a9:0d:54:c9:6e:ce:d2:ce:6b:49:0e:0c:99:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:50:5D:7D:C8:A3:11:2F:80:0E:50:42:73:9D:22:A9:F5:47:2F:04
X509v3 Authority Key Identifier:
keyid:DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:da:63:8a:b3:f6:06:e8:ab:33:f1:e7:9a:eb:b8:d4:1a:b0:
76:3e:7c:f2:53:49:0b:9a:69:7b:66:68:df:2a:8c:9b:3b:9a:
a5:bf:39:b1:13:1a:5d:d3:7a:92:90:ee:5d:0d:74:97:3c:8e:
36:6c:c2:5c:4b:0c:6f:30:10:9d:6c:7a:1f:54:04:d9:7c:a3:
05:9a:29:b2:21:43:62:9e:66:58:02:81:44:c6:fd:df:00:f0:
56:10:ce:c8:32:f9:fd:99:b8:db:8f:58:39:b1:ea:a7:67:73:
af:63:4e:5d:e4:99:37:aa:3e:d0:0e:e0:25:4d:11:32:05:6a:
6e:3b:66:0a:43:31:5d:c1:a7:75:ae:86:40:b4:68:22:47:30:
cb:b5:c6:88:47:29:8d:0a:45:d1:d8:1a:6f:f3:12:0b:57:bb:
ea:c8:41:bb:c4:e2:28:03:ca:56:f7:7f:25:6b:7d:1c:4f:a7:
80:83:9e:f2:0a:72:d9:45:cc:e3:b7:a8:02:d5:f5:23:28:aa:
41:01:42:90:18:86:7f:bb:92:04:63:0e:93:fa:02:b1:5e:d3:
e2:2d:c3:61:26:ee:d7:5c:3f:69:a9:e2:24:04:1b:8e:57:30:
4c:4c:39:95:c6:be:ba:d9:54:93:e2:62:d0:1f:5a:cc:62:18:
4c:d0:ec:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:57:04 2026 by rpki-client