Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: s11SOpMeUHbrFjeYprxyMyI6xgVTCm+m458oaV9/JsI=
Subject key identifier: 6C:78:91:BB:B5:F0:48:09:0E:5D:A1:76:B1:7D:4D:36:CF:7B:0E:07
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 019DA3AECC48533A116030E874641806D834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 09C0
Signing time: Sun 19 Apr 2026 03:00:34 +0000
Manifest this update: Sun 19 Apr 2026 03:00:34 +0000
Manifest next update: Mon 20 Apr 2026 03:00:34 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: LRnQiJHlX4LdrFXeS8Cmt5gNNlOJKavG9OJsYKzqtCE=)
2: d1jP90vciiSKp3aodWDKGnu38Bk.roa (hash: nxrJlRcagS8YYk40MdJDJveIMr4yj0rHLHg2nPrUsoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:cc:48:53:3a:11:60:30:e8:74:64:18:06:d8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Apr 19 03:00:34 2026 GMT
Not After : Apr 20 03:00:34 2026 GMT
Subject: CN=6c7891bbb5f048090e5da176b17d4d36cf7b0e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:02:5b:00:9f:3f:d7:34:b9:4f:23:5b:5d:
d2:04:9a:32:22:a4:df:aa:2f:41:92:a5:dd:cb:c5:
79:40:c2:aa:a4:7b:e2:41:5f:7c:15:91:0f:28:01:
84:87:a7:0c:b0:b5:bd:f5:c3:b0:f9:28:23:41:d6:
2f:1c:fc:51:ee:0f:fd:1b:be:6e:87:a1:aa:9f:fa:
fc:da:b1:09:4a:ba:47:9e:5e:35:18:21:79:36:94:
cf:c1:b3:03:5d:6e:3b:48:af:36:8f:3d:bb:35:79:
a1:9f:be:9f:ae:7b:9f:e3:76:63:46:ed:3c:18:f5:
f7:ca:c6:f6:98:c8:6f:c2:98:75:62:98:ec:6a:4c:
ce:e0:8c:65:bb:29:70:a3:ca:0f:fa:0a:5d:ab:9a:
0f:6a:75:8b:85:c6:87:f2:60:51:55:71:a2:11:00:
5f:16:26:ac:71:34:27:b9:ce:d9:25:66:79:dd:e7:
9c:9c:2e:7e:69:d6:c0:65:be:55:ec:f7:c4:4a:1f:
9f:42:0e:49:f0:c9:10:85:22:bb:ad:ae:c4:3e:a7:
57:37:7b:63:3d:86:99:71:ef:fe:fe:3c:9f:a5:65:
69:de:2c:b6:1f:3f:b4:01:19:d7:66:e0:b4:07:b7:
c4:89:b9:43:1f:0b:62:97:bb:83:74:ac:b7:4a:1a:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:78:91:BB:B5:F0:48:09:0E:5D:A1:76:B1:7D:4D:36:CF:7B:0E:07
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d9:f8:30:86:f4:64:c1:ed:d9:cb:55:c8:76:7e:4d:fe:45:
c1:e4:b6:b8:25:f8:0a:3f:3d:73:5d:42:92:f5:75:30:b8:49:
65:07:ff:3b:08:63:2d:8b:71:1f:2a:b5:45:26:39:07:d6:63:
f2:f7:6e:97:19:ab:39:de:31:91:2a:b2:07:d0:22:70:d7:82:
b7:59:97:b6:32:0b:a1:54:de:42:40:5a:58:bb:3e:a6:3d:9b:
8c:7d:87:3b:4e:86:fd:88:f7:f7:b6:eb:f8:56:af:13:e7:9a:
74:0e:e3:1d:b2:60:ee:00:4a:80:46:85:07:c3:fe:45:dc:50:
42:65:94:9a:04:4d:d4:14:c3:f4:ad:35:b7:de:81:91:9e:55:
2d:dc:cc:50:15:7a:7c:74:51:66:a3:bb:7f:9b:00:25:85:6a:
96:d5:be:d7:b5:0e:8e:3c:3d:21:12:1a:ae:98:86:95:2e:91:
0d:f2:fd:f2:63:85:c6:d1:89:b5:a2:cb:fc:23:ae:97:11:12:
34:bb:e0:b6:b2:95:e6:76:10:48:98:31:d8:05:15:78:90:56:
bf:5e:68:f5:c6:ab:95:c4:bf:01:a6:7a:6b:b0:fe:1d:49:88:
2d:cf:5a:36:0f:b8:70:96:f7:bd:47:2d:73:54:e7:d2:12:69:
7d:d9:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:40 2026 by rpki-client