Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
File: c_-bDajLqCMr_Xx3EPBFN2eInp0.mft (raw, json)
Hash identifier: xvO9Oqlk0jMNIqyNM/Q/b9oj+lDLOqiSGPtHWdJXm5U=
Subject key identifier: 4B:1A:AA:BC:B5:7A:67:66:AC:A9:A0:14:D1:CF:87:3A:72:D2:4B:B1
Authority key identifier: 73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D
Certificate issuer: /CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
Certificate serial: 01A0CC361A88F392B7EBD227A834B29B1EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:01:32 +0000
Manifest this update: Wed 23 Sep 2026 03:01:32 +0000
Manifest next update: Thu 24 Sep 2026 03:01:32 +0000
Files and hashes: 1: c_-bDajLqCMr_Xx3EPBFN2eInp0.crl (hash: 2RIIU3z64rWdHqmNg7DYLxNzASSCi+FxGbxbKoFVUaM=)
2: vTX4iIqH_CJW3BVeMGACQiGfVBw.roa (hash: B07mgx6eQq4EygaQx3Hss2ApntF23K/SLlLex5sG5XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:1a:88:f3:92:b7:eb:d2:27:a8:34:b2:9b:1e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
Validity
Not Before: Sep 23 03:01:32 2026 GMT
Not After : Sep 24 03:01:32 2026 GMT
Subject: CN=4b1aaabcb57a6766aca9a014d1cf873a72d24bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:2c:f5:3b:42:16:12:a0:9e:69:4c:3a:5c:
99:79:50:9a:af:4e:68:9d:cf:aa:4a:e4:94:42:f2:
8f:c2:e4:9c:9d:77:4e:dc:8f:0d:18:72:0c:77:46:
46:9a:09:ad:b9:ca:76:4a:7e:db:e0:15:b2:09:f3:
53:9f:17:c0:4c:f8:b3:e4:d5:75:d4:01:6b:6c:70:
71:dc:99:e7:f2:a2:2a:b9:c4:12:9e:e6:8c:db:3c:
7d:2d:28:4b:1c:c6:aa:09:d4:91:17:97:81:88:1a:
87:c5:0b:c0:43:1a:67:5d:27:8d:a7:72:2c:ff:cc:
70:fe:80:8a:f4:5d:26:9a:8f:6b:1c:4d:b4:7a:01:
ec:c9:79:9c:9b:43:16:87:36:0c:54:90:e8:2e:1b:
98:db:43:01:87:57:ef:96:bd:9e:71:9b:9a:bd:64:
dc:48:f3:ed:5a:fd:05:8d:07:b7:f2:8a:2d:61:20:
d6:da:ea:95:fb:ce:4b:5b:5f:2b:92:73:63:6b:3e:
9f:59:88:c8:4a:9c:e7:da:94:fd:d5:c4:04:d9:2c:
7f:95:7b:4a:f7:5e:c7:6e:39:b7:db:fe:30:0a:2f:
8d:e2:93:75:37:44:70:17:a1:ce:dd:7f:fb:db:5d:
f3:62:38:5d:0d:7b:91:f0:56:cf:21:5d:e1:0f:66:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1A:AA:BC:B5:7A:67:66:AC:A9:A0:14:D1:CF:87:3A:72:D2:4B:B1
X509v3 Authority Key Identifier:
keyid:73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a2:4b:1c:5b:6c:c5:a5:e2:32:6a:1c:ec:47:0b:98:59:22:
bb:f5:06:35:ee:09:a9:a4:7f:e3:07:ec:99:87:91:1f:88:78:
bc:0f:58:a7:14:41:5c:e8:7c:41:e8:57:03:f5:69:90:78:12:
7f:77:15:01:b0:25:7c:91:09:6a:6d:03:a0:7a:5a:b5:b5:61:
2d:23:09:dd:0c:d6:32:9c:ce:df:72:70:72:4d:6d:35:90:d7:
90:a8:9d:93:e5:1e:95:f4:5d:ce:f1:e6:e8:cd:ce:be:69:2a:
47:2b:1e:2a:b9:d0:d0:f5:15:ee:92:ac:19:31:80:56:ba:c4:
96:9c:0c:22:59:a9:6a:e8:99:2f:56:e2:d6:a5:92:6b:92:cb:
7c:04:57:de:b2:85:dd:47:80:b3:e0:b5:d8:32:71:7d:13:10:
96:fa:27:17:55:77:fb:ec:d2:57:92:67:fe:cc:e7:58:ff:88:
59:9c:9c:00:7a:73:4c:95:41:8b:06:ef:2a:ae:87:e4:24:26:
59:aa:35:c4:49:12:12:3b:99:0d:49:0d:bd:46:d1:aa:30:60:
57:d8:77:07:b9:06:a9:61:14:44:84:60:96:44:49:8b:6c:bc:
8c:4d:ae:a6:c8:27:9b:db:ea:bd:4b:8e:e7:20:9b:aa:4f:6a:
37:19:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:25:48 2026 by rpki-client