Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: I4Aft6ojxWdOEzpi4jzbQnVVGlKi6szRrFsvj6vvKQE=
Subject key identifier: 46:AF:C8:28:A1:EC:E1:FB:9C:78:BC:E2:F1:43:F4:D1:17:2C:7D:70
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 01A0DFBC90F865F45D460F10DDB36EE413F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 06CD
Signing time: Sat 26 Sep 2026 22:01:11 +0000
Manifest this update: Sat 26 Sep 2026 22:01:11 +0000
Manifest next update: Sun 27 Sep 2026 22:01:11 +0000
Files and hashes: 1: oMb2k7Oz9unm3siEKObsvSGOu5s.roa (hash: pGiHyUdRro6M/TUFejm603qJXDKgL9TMHqLZBCWVjz4=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: nvv3N0qqFJL4YX8JlJWDJvnFfl3BlO5kA2OltCOYzeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:90:f8:65:f4:5d:46:0f:10:dd:b3:6e:e4:13:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Sep 26 22:01:11 2026 GMT
Not After : Sep 27 22:01:11 2026 GMT
Subject: CN=46afc828a1ece1fb9c78bce2f143f4d1172c7d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:70:0d:15:8e:e5:6b:e9:82:b9:90:c4:a2:
1c:23:0e:8f:21:fc:a0:fb:d4:9f:ff:57:c6:cd:ea:
27:de:7d:09:87:d1:4a:01:a4:c0:21:46:a3:96:13:
52:f3:2e:3c:7f:31:0b:e6:24:37:ab:25:be:45:b9:
b8:3a:4f:ec:4d:d6:72:67:c3:21:82:df:9b:be:05:
b4:44:28:3a:42:41:35:07:80:4d:9b:db:af:c6:22:
48:d6:48:8a:9d:e9:ca:06:92:14:9d:2c:61:a5:39:
fe:55:8e:c4:f3:25:a8:1d:a5:03:5e:83:b5:26:7e:
36:0e:cf:1c:22:c7:46:0c:da:d0:c9:74:67:d2:9b:
89:e5:39:fe:a2:22:f3:b1:00:bf:48:13:c2:a3:2c:
e9:94:d7:27:96:be:65:1d:7a:d9:d1:b7:3b:d7:0e:
5f:3c:a8:00:3a:12:03:4c:a4:6e:25:36:64:a1:8e:
2d:d4:fe:e9:20:51:91:58:9b:5c:19:c6:0d:e0:11:
bf:2d:5c:88:cc:1d:4a:d7:05:27:cc:1a:f4:62:d7:
c1:0a:e4:22:25:98:56:bc:03:49:e6:e7:8d:cb:cf:
ef:8a:46:f5:31:31:cb:39:ed:70:84:20:80:67:4c:
c0:2d:72:fb:24:f9:df:a3:42:3a:db:1e:74:13:36:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AF:C8:28:A1:EC:E1:FB:9C:78:BC:E2:F1:43:F4:D1:17:2C:7D:70
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:5c:29:ab:45:4c:8f:1f:2e:37:23:d2:23:10:74:85:b1:86:
d8:71:6f:e1:9b:93:3f:12:54:60:35:2c:1b:ae:b5:7c:d6:0b:
ee:67:83:cf:f7:9c:f1:e8:49:f3:74:2a:31:92:12:e0:0c:60:
98:b9:02:6e:3a:5a:45:22:7e:bf:65:41:49:25:94:69:a7:ce:
6c:95:37:a7:c2:04:c7:3e:01:b2:9e:5c:e5:d2:80:f4:13:2c:
e8:f5:77:a9:ff:e5:79:01:a3:19:11:ea:e2:c3:71:13:6c:ba:
e1:21:e4:e4:b9:7e:d4:f8:11:a6:11:7d:97:6b:9d:d1:04:35:
eb:34:63:63:c0:77:58:02:4c:9f:94:f6:7a:02:12:97:b5:59:
07:95:45:1c:1f:cc:35:cb:c5:ec:b7:0f:5b:96:63:d3:00:54:
2b:64:42:21:b9:aa:4f:66:10:44:ff:be:7a:ad:17:ce:15:ca:
ca:a7:20:3f:5f:9f:54:7e:7c:b3:17:e2:d1:64:4f:55:29:88:
aa:2d:a1:46:b3:50:00:94:02:82:22:ef:93:74:1c:45:8d:78:
45:03:6f:11:d8:f3:83:d0:d2:1d:e2:a4:ee:1c:2d:c2:60:fb:
bf:1b:02:d2:e4:88:d7:46:ea:27:71:fb:cb:47:73:0c:b8:41:
b0:94:47:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:37:27 2026 by rpki-client