Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: 6B9EZ64xcL63tY2MA/fmDcz8RS4GQT+Mx4FjwKTHZhs=
Subject key identifier: 7C:F7:1A:5A:89:09:B6:3F:87:55:DE:63:BB:44:CF:D7:77:7C:E2:C9
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 01A0C70ECD423BD3CDA2E797326D1361980B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 0B60
Signing time: Tue 22 Sep 2026 03:00:31 +0000
Manifest this update: Tue 22 Sep 2026 03:00:31 +0000
Manifest next update: Wed 23 Sep 2026 03:00:31 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: HSmEbXmPMbIXa2J0Y63hgxa2nBXtX4eM6ZIwCtLrtow=)
2: d1jP90vciiSKp3aodWDKGnu38Bk.roa (hash: nxrJlRcagS8YYk40MdJDJveIMr4yj0rHLHg2nPrUsoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:cd:42:3b:d3:cd:a2:e7:97:32:6d:13:61:98:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Sep 22 03:00:31 2026 GMT
Not After : Sep 23 03:00:31 2026 GMT
Subject: CN=7cf71a5a8909b63f8755de63bb44cfd7777ce2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d5:de:3f:61:8a:4b:f1:0f:8a:3b:e3:a6:96:
62:93:ee:cd:7d:f3:7a:7e:3c:b7:5f:62:ee:1d:da:
fb:ac:da:72:d3:85:31:39:88:54:2e:ce:0a:62:e8:
95:e5:cf:92:1c:5d:3e:90:5b:03:a4:16:35:b8:4f:
6f:32:46:69:75:f5:54:8e:3e:cb:53:a5:64:88:3f:
a0:8d:8e:84:23:90:6f:be:52:ec:e6:9f:db:e1:7f:
2f:d5:72:23:98:2b:8b:07:96:42:d2:20:e7:29:b2:
2f:39:c3:18:f0:94:78:af:8c:85:3a:c0:37:c2:5a:
0b:bc:0a:91:73:f6:7d:2d:d1:23:ad:82:f2:46:b2:
3f:cf:b2:9e:00:ed:9b:6a:b0:2b:26:8a:5b:d6:a8:
c7:84:51:bb:50:9e:ae:51:b6:9f:19:25:c2:e1:54:
e0:cc:72:63:fe:4b:31:42:b0:17:92:45:4c:fc:5b:
b2:c9:7d:8d:a3:26:de:43:c8:87:b7:f2:fd:45:a7:
a1:92:e7:93:c9:bb:5e:e0:80:3d:ab:ac:d3:be:23:
cb:ce:7b:a7:8b:91:a2:11:c7:23:4a:6e:c1:55:84:
47:42:58:85:27:ed:f0:0c:86:49:ae:72:f7:22:68:
40:b9:cf:b1:ea:d0:a0:83:d3:40:50:30:08:cb:6c:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F7:1A:5A:89:09:B6:3F:87:55:DE:63:BB:44:CF:D7:77:7C:E2:C9
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:72:50:12:b6:a4:af:5a:01:5b:62:b0:61:41:c8:59:8e:24:
da:92:68:2a:85:40:03:a7:7d:19:8d:d5:cc:71:19:a4:f7:a1:
6d:ea:a1:67:3c:91:6c:4f:f6:ec:f9:c2:59:6d:e0:c4:f8:ff:
e5:75:2c:70:d4:bc:59:60:66:84:f3:a6:20:58:7c:a2:fa:7b:
c5:e8:93:0b:a7:8a:f4:46:cc:9d:99:83:de:49:be:ef:b9:27:
87:5e:36:8b:30:80:52:0c:a5:d4:f2:ba:e8:87:83:95:40:c9:
82:dd:d1:8f:07:05:fb:29:8f:3b:cb:94:ca:24:98:53:7b:9e:
77:58:24:3f:ee:f5:a4:ab:e7:66:ed:42:b7:73:fb:d2:5d:e2:
ab:38:a1:8a:b8:7c:a2:df:0b:78:77:5b:8f:7f:f1:55:b4:c1:
8d:64:32:39:f3:ee:78:df:ca:71:62:3b:94:00:6a:d4:a9:c9:
4d:4e:fc:77:ad:25:b9:63:0d:ec:9f:30:f9:d3:96:7d:24:94:
aa:3b:7b:fb:6d:8a:7f:5d:8c:c4:23:5c:b9:d4:cd:c2:c6:57:
a7:8f:01:63:50:64:7b:5d:7c:62:c9:39:e0:02:2f:25:0b:7c:
b1:48:9e:65:a4:fa:87:06:0a:0b:c0:3c:ec:b2:68:35:99:60:
09:67:f7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:39:52 2026 by rpki-client