Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier: 8hhKX7lnArpAkcD0dVSVjH7627m/o5FL7LVe3uYNa0w=
Subject key identifier: 60:DD:8E:E0:4E:44:DF:58:05:44:DD:BA:61:19:02:90:EB:5C:70:D6
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 01A0C1E8E62F5386EAB61D5B4C1F30AA46CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number: 0B73
Signing time: Mon 21 Sep 2026 03:01:00 +0000
Manifest this update: Mon 21 Sep 2026 03:01:00 +0000
Manifest next update: Tue 22 Sep 2026 03:01:00 +0000
Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: hXDi6fOX8Ishft+b8vDA1vC3TSz8MmNW7dpey1IqYuw=)
2: E2bog414s7wIyFoCk8EPV__dfvA.roa (hash: V6Nnm/ymBZJD1OFNh62adA8C3xBKE7VTPboLYpn7i3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:e6:2f:53:86:ea:b6:1d:5b:4c:1f:30:aa:46:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: Sep 21 03:01:00 2026 GMT
Not After : Sep 22 03:01:00 2026 GMT
Subject: CN=60dd8ee04e44df580544ddba61190290eb5c70d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:d5:47:63:05:7d:2f:d7:b6:3e:57:88:f4:
d5:31:8f:07:1d:48:6b:e0:14:84:c0:33:4e:b6:b5:
a5:8f:c0:5b:2b:bf:b6:e3:1f:38:6e:2e:f7:96:83:
4c:5a:5b:ca:9b:27:c1:62:23:be:47:0d:2c:92:22:
18:6a:21:ba:c0:63:06:7b:99:b7:da:99:fa:0c:1d:
e3:97:ea:e1:2f:dc:3f:cf:2a:bc:d9:56:c6:fa:be:
04:5c:d7:53:57:a6:21:b6:c8:4e:af:fa:cf:20:21:
b9:63:49:09:4b:05:e3:61:c0:4b:cc:1d:f0:de:bd:
73:36:8c:87:f1:8d:03:69:ee:31:85:d2:ca:01:9c:
36:ae:c7:fb:42:b8:f1:5e:38:ab:f5:d0:6e:f8:5d:
aa:ba:4a:08:12:02:16:b9:55:ce:5b:9e:a7:c1:7c:
8f:8a:c3:f9:9e:dc:37:ff:92:a0:b4:29:ac:14:9f:
61:3e:da:d8:28:58:69:39:14:6a:66:cd:17:50:1e:
af:f6:ae:f8:16:0c:3d:89:60:e6:d5:aa:8e:cb:e9:
79:02:56:26:c2:9d:00:1e:13:70:ce:f1:29:02:07:
f5:5e:1c:2b:80:44:9b:9c:54:67:85:e1:03:36:8a:
ef:c3:13:d3:6f:20:cf:0b:5d:65:42:53:e0:05:02:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DD:8E:E0:4E:44:DF:58:05:44:DD:BA:61:19:02:90:EB:5C:70:D6
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9c:d5:9a:33:fc:ae:5c:6a:fe:82:30:6b:9f:1e:dd:fc:58:
b6:a6:6e:e8:73:5a:c9:44:d3:40:ec:7e:5a:fb:37:30:db:7b:
90:1a:86:82:74:21:16:b6:76:ed:ea:71:56:2e:4a:c0:42:64:
fe:a3:7e:09:7f:d5:2e:66:b7:c2:d8:64:df:6d:a3:88:0c:24:
24:88:e4:09:d9:8d:42:22:cb:d6:87:ee:de:0b:2b:b5:fb:ad:
0a:31:e3:6e:9b:45:bf:84:bb:be:5a:6d:9b:34:50:b6:f8:7a:
ea:93:7f:b5:f8:63:0e:38:58:99:48:60:f3:76:bb:4c:8c:bb:
fe:a2:0d:5b:ea:f9:b1:b5:a4:09:95:ff:71:86:dc:33:1d:31:
69:ea:fd:da:54:3e:8e:b7:95:9e:95:54:98:11:62:86:f1:25:
96:52:a7:5d:58:85:0b:66:69:05:22:fd:a8:ec:9d:3c:4d:d5:
dc:0f:f4:fd:47:20:4a:c0:b1:5e:ce:c0:d8:4e:ae:0f:46:f9:
10:d1:7e:64:af:1a:d2:6e:32:3d:63:1e:0a:c0:62:4c:2a:0a:
a4:12:cf:b5:49:72:0d:04:5d:ca:c7:29:e3:54:67:40:2c:85:
c1:98:c5:f0:49:ab:fb:ac:3f:b9:0e:f3:d7:6c:fd:27:79:39:
14:87:ce:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:28:11 2026 by rpki-client