Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: RQMqx1+xrYm/rcg9n7/I7/ZiCYaqLF5p5oPgaVKkvRQ=
Subject key identifier: DB:DE:56:E5:70:9E:CE:D3:FA:84:AB:4C:4B:7B:23:6F:8B:9A:92:DB
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 01A0C3324EB3BD182888A7B6BD507D2AFDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 09:00:49 +0000
Manifest this update: Mon 21 Sep 2026 09:00:49 +0000
Manifest next update: Tue 22 Sep 2026 09:00:49 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: 0RobRA/dwZG3GZYYcdWxzYL+Ueke0fRLl9AipnpPdwk=)
2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:4e:b3:bd:18:28:88:a7:b6:bd:50:7d:2a:fd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Sep 21 09:00:49 2026 GMT
Not After : Sep 22 09:00:49 2026 GMT
Subject: CN=dbde56e5709eced3fa84ab4c4b7b236f8b9a92db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1a:75:aa:d2:d9:82:5d:cc:6a:83:5b:7f:92:
51:bd:35:96:fc:42:92:e6:e6:b9:59:ae:61:d9:4e:
41:5d:de:51:b0:1a:6f:e9:9e:95:8e:54:01:e3:7a:
15:3e:a1:6d:c1:a5:48:42:b5:09:d4:24:4d:73:37:
92:66:e5:a4:8d:f8:38:df:ab:d5:02:81:18:81:5a:
1e:ff:d4:db:00:90:c1:98:e2:ff:d2:5e:6c:76:39:
e6:39:7e:52:1a:9f:63:c6:cc:cd:1b:79:d2:69:ca:
61:28:c3:06:b8:d9:0b:47:3d:8b:e9:6a:3f:d3:a6:
c8:65:59:6a:f4:29:5e:0c:31:51:f2:75:44:35:49:
c1:93:69:78:fe:9b:8e:84:b8:5d:9a:45:8d:3e:51:
4b:c8:9d:7f:9a:bd:fd:b1:d2:13:2c:2d:ea:32:92:
d2:5b:dd:2b:78:ce:1c:bb:51:5d:23:b0:c7:1f:79:
d5:5a:98:72:af:d2:ba:65:fe:f8:6d:58:df:92:a0:
59:41:ff:4e:dd:ed:13:6c:5a:c2:45:c6:96:aa:59:
c2:be:8e:f8:57:39:67:4b:b5:6b:ef:b4:fe:59:5d:
b4:36:51:d6:38:c7:7f:e2:d2:98:2d:56:2f:f6:dc:
1c:4e:6f:83:2a:45:21:a9:af:02:a7:ff:bc:f0:a4:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DE:56:E5:70:9E:CE:D3:FA:84:AB:4C:4B:7B:23:6F:8B:9A:92:DB
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:be:d8:db:ed:df:64:69:dd:51:9e:37:09:4a:53:f7:6a:de:
6b:99:f6:34:ae:27:07:7d:d0:91:f2:17:35:f5:14:3e:ac:57:
ac:a4:66:7e:17:7e:5d:5d:5d:0b:16:67:45:07:4e:04:a1:40:
81:6d:c4:e2:86:a2:b9:ed:37:7b:83:30:e4:51:7e:cd:ba:7f:
cb:73:7a:4d:95:1c:2d:ab:b4:77:b6:1e:98:7b:ad:94:13:2d:
d5:c6:01:d3:a5:8d:c1:c3:bc:af:70:5a:6c:40:07:de:c8:c3:
f0:14:d5:ce:9b:43:42:2a:9d:b5:b4:37:45:70:94:91:42:01:
44:16:da:36:03:cd:0f:46:99:b0:51:2b:cb:ff:e4:1b:d0:3f:
46:e1:45:12:c3:a6:cd:16:09:d1:11:95:a6:50:64:19:df:ad:
ba:3d:39:9e:fe:00:9c:49:14:5b:c2:3f:9c:57:10:46:36:59:
16:73:3d:97:41:85:36:81:ab:f5:2b:7b:01:fb:b8:ff:bb:0e:
89:15:16:29:c3:df:cf:a0:d7:cc:ff:80:21:8d:db:85:f7:d7:
a7:5d:8b:e0:19:ab:d4:f5:5d:f7:00:35:76:06:ba:30:5d:e7:
0c:a6:2e:2f:85:2a:e8:d3:57:f0:3b:3c:79:62:f4:bb:0e:b8:
5a:81:03:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:37 2026 by rpki-client