Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
File: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft (raw, json)
Hash identifier: 1VeoknneoqPLFsvcmXAVetnm14bbOZgFFFk0EcV/pak=
Subject key identifier: 85:53:89:F9:FA:57:D9:96:7D:FC:E1:B3:1F:81:31:A8:9E:AD:5A:04
Authority key identifier: DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
Certificate issuer: /CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Certificate serial: 01A0DB3BBAEC66BCA1AF6BDE0BBED4B3684B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
Manifest number: 0259
Signing time: Sat 26 Sep 2026 01:01:59 +0000
Manifest this update: Sat 26 Sep 2026 01:01:59 +0000
Manifest next update: Sun 27 Sep 2026 01:01:59 +0000
Files and hashes: 1: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl (hash: lCZn0mPLMPoKAJaHnab1HQx73R7s6QcfMjfj/lVrpBs=)
2: FiJY_f6GKm6veDvPVDNX9LWOSRU.roa (hash: SMTBlb+NpQPNeXGuJJJYcwSp8wfNIzukvM7Bw3VT8hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:ba:ec:66:bc:a1:af:6b:de:0b:be:d4:b3:68:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Validity
Not Before: Sep 26 01:01:59 2026 GMT
Not After : Sep 27 01:01:59 2026 GMT
Subject: CN=855389f9fa57d9967dfce1b31f8131a89ead5a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:c6:70:92:2a:b7:45:5b:b5:bd:7f:36:99:
3c:01:9b:1a:a1:0a:28:04:aa:06:09:f6:cf:9d:e8:
7a:3e:1e:83:75:c1:1c:8e:4d:e1:26:70:75:74:e1:
fe:da:69:4b:df:83:c6:9e:e5:fc:f2:91:8c:f9:75:
8c:3b:41:fd:0e:d3:11:ad:15:26:5a:ae:99:bc:de:
d9:26:a6:a3:81:28:42:17:d2:3c:66:c8:7c:af:07:
bf:97:7a:34:2c:e6:00:c2:45:21:90:b0:c1:e4:d2:
90:e5:d7:b6:0b:d3:c0:96:8f:93:6e:30:00:5f:fe:
42:4b:f7:3f:14:09:7b:17:f5:5c:e4:39:0a:c9:75:
5d:7a:41:a3:f9:ca:15:e0:ff:f4:0c:3d:50:b4:eb:
a5:ba:35:e5:2c:9b:b6:e6:e5:68:c1:3b:a2:38:f4:
d2:fc:01:17:72:66:f5:ba:75:2c:e3:c0:e9:10:b4:
76:56:de:5d:30:0e:8a:60:fc:b5:9a:cd:db:75:4c:
b4:37:b1:32:db:43:09:cc:7a:a6:8a:c8:04:c9:9d:
61:73:24:ba:f2:95:c1:c7:0d:30:b0:76:4e:f9:4a:
b2:93:32:17:96:00:47:45:30:31:4b:11:20:7f:25:
4e:5e:1b:be:d9:0d:d6:0e:8e:09:95:aa:1e:b0:87:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:53:89:F9:FA:57:D9:96:7D:FC:E1:B3:1F:81:31:A8:9E:AD:5A:04
X509v3 Authority Key Identifier:
keyid:DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ca:b1:30:9e:29:4b:71:13:4e:31:67:75:64:d0:9c:2d:69:
f5:4c:64:b7:49:45:72:ba:e9:6c:b2:02:86:c8:dc:5d:75:6f:
83:ef:c7:d4:9f:01:f2:b8:fa:6d:68:c9:f2:6a:d4:5d:56:e1:
70:ce:6f:4e:e3:65:ba:66:81:8c:6f:b5:fc:00:ea:ce:d7:b5:
82:b2:59:3a:73:87:cb:e7:72:ee:7b:2a:c4:65:58:09:7c:42:
97:25:d1:8a:09:6c:e5:f1:2e:f4:1b:36:60:20:10:b6:21:cd:
c8:bd:f4:b5:f3:d7:f1:2d:67:62:da:8f:77:7f:53:c1:37:a8:
fb:49:f8:2b:18:39:24:d3:4b:f2:c3:d2:f4:ea:89:a7:d1:32:
ad:8c:c8:6d:8d:db:2f:5b:5d:f8:56:a4:d6:c0:69:18:9d:32:
f8:44:0b:8e:dc:2d:4f:f9:33:9f:d7:5d:34:5c:d4:d6:bf:af:
06:38:a0:86:33:3e:79:53:e0:dc:c1:fd:6d:cb:35:9b:4c:d4:
c6:66:d1:cb:d0:43:84:0e:0c:99:aa:06:30:f5:4b:0a:d2:d3:
a7:f2:2d:e8:ca:ab:1d:20:a9:3f:ea:54:10:26:ac:c7:86:c8:
a1:a8:e6:a5:a8:d1:14:0f:5e:a0:34:4c:76:85:f3:dd:eb:44:
73:24:00:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:25:50 2026 by rpki-client