Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File: 3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier: LB1hFDM0Ifqwe0J8KU6NJfNI6lb8mvJx12PYcj5BZmM=
Subject key identifier: D6:E6:C4:3A:A8:20:15:53:40:43:C2:21:8F:E7:38:C5:75:3E:75:C2
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 01A0D7CC9A1B7125B9EBBC05C4576C0D4825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number: 11AB
Signing time: Fri 25 Sep 2026 09:01:45 +0000
Manifest this update: Fri 25 Sep 2026 09:01:45 +0000
Manifest next update: Sat 26 Sep 2026 09:01:45 +0000
Files and hashes: 1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: vsWjNja1DicvgkRYLbCjhnXDNHt2tyvbc4N3sT0Y8cY=)
2: Bt0xMHy61A7htWo3HwQx0xRHYvM.roa (hash: NFwVkcrwORwq5qtsr2xFeijRYhFUAx9h0rzS5lfRuF4=)
3: td-NlOb4bFlwywB-P4mKtEXzRI0.roa (hash: 24q0c0plzrduo92mY1zavTYuQ8C/sxm4E7FFcgXlk2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:9a:1b:71:25:b9:eb:bc:05:c4:57:6c:0d:48:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Sep 25 09:01:45 2026 GMT
Not After : Sep 26 09:01:45 2026 GMT
Subject: CN=d6e6c43aa82015534043c2218fe738c5753e75c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:7e:ec:00:66:82:d3:e7:48:8f:25:3f:e5:
61:48:f5:ae:f0:41:ed:6d:ce:c9:1f:01:0e:57:af:
d4:19:ed:5f:8f:57:9b:5d:8f:63:02:8d:cb:54:3c:
2e:dd:15:fb:1f:8f:ba:24:61:06:cd:97:74:7c:03:
14:0b:03:ba:4b:9a:8c:60:2b:04:04:79:47:45:47:
35:a4:d0:8b:ab:3d:73:4a:8e:3f:d1:eb:6f:97:0a:
7f:3a:cc:aa:b5:97:04:68:98:92:a8:19:bc:67:8a:
24:2f:5e:1d:26:00:82:d9:69:3c:7e:0f:52:2b:32:
dc:c0:f2:6f:2c:f3:04:ef:5d:77:ab:98:b7:a0:78:
64:25:96:6d:76:da:37:ea:8a:d5:36:8a:e9:6d:f0:
33:cb:4f:1a:a3:d2:9d:5a:e4:96:fc:9e:12:2d:40:
cd:71:9f:ad:d7:a8:22:a4:8b:7b:2c:c7:2f:b0:96:
a0:a1:69:01:ac:b1:66:4b:c4:9e:14:09:d2:f6:5c:
5a:82:2e:84:7b:e0:8e:f3:fa:d5:dc:19:ca:4c:7a:
10:62:ac:04:72:6c:63:ce:3b:73:50:8f:92:84:a1:
77:40:5a:54:95:16:1a:ca:0b:c2:b4:d0:24:ae:08:
e9:4d:e9:ff:fe:90:a4:03:2e:a8:2b:cb:21:3a:cb:
7f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E6:C4:3A:A8:20:15:53:40:43:C2:21:8F:E7:38:C5:75:3E:75:C2
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:61:42:b1:87:8f:09:6c:fc:3b:73:9e:1e:d2:75:aa:5f:b1:
c6:ce:d4:21:c2:02:a4:b6:f0:c8:07:44:ab:f0:15:4c:7e:e0:
e9:4e:9e:77:48:87:a5:54:51:08:c7:12:ca:34:28:e2:ac:86:
08:44:29:bf:ec:26:57:f8:31:eb:7e:32:33:76:0f:83:1b:ab:
f1:56:90:eb:37:49:48:76:d1:84:2c:b3:45:d5:b0:93:d9:58:
93:54:ac:fc:58:4b:fa:2f:fd:99:71:78:71:21:5d:0e:55:ba:
b1:01:0f:d5:8b:5a:ab:70:84:62:16:7a:fc:31:8e:00:41:fa:
e8:d4:b7:c2:8c:07:b4:61:19:54:60:d4:31:ee:50:ad:b2:3c:
fe:96:a4:fe:41:4f:27:b2:7f:fe:ba:87:48:95:78:78:10:6a:
ef:f2:8d:91:d1:ab:69:f5:75:4c:28:16:36:02:3e:4d:cd:7c:
79:88:91:43:49:68:62:87:7f:0b:3c:64:aa:61:9d:db:79:8d:
a7:c1:26:d6:a3:ec:e1:29:64:12:8f:b4:b1:4c:98:f5:7f:88:
5d:09:99:cd:9d:e8:32:5a:d0:56:a9:1a:39:05:0e:26:d7:96:
60:91:00:60:36:7c:7a:2c:a2:14:fb:69:4e:0f:f0:b4:51:c8:
cc:70:5e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:26:08 2026 by rpki-client