Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File: 3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier: xGUldIIM6s5YojWJEZCIlu/t+IFgwVyPC650mfxd7Nw=
Subject key identifier: 03:21:07:A9:FE:CC:A6:0E:1E:11:E7:85:34:8F:63:B4:FB:2C:BD:39
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 01A0C10D323CA59B5F6786BAB110E614A583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number: 1A7D
Signing time: Sun 20 Sep 2026 23:01:02 +0000
Manifest this update: Sun 20 Sep 2026 23:01:02 +0000
Manifest next update: Mon 21 Sep 2026 23:01:02 +0000
Files and hashes: 1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: O3qRcrN+d1kIpf7b5KtESPRsHBCrVflgusumkigDAlU=)
2: Sl3slTlmy5eFtqo76SlKQ9CnbUM.roa (hash: DVZMz6p8+NCTnVKJba2KiAUqUvaQ9KTQclo1bNgr4hM=)
3: hneKOL6xKV3cr3gP56n-PmBtpXI.roa (hash: GxqGClH9UHGqcmyTREy95vx88t5aKLbmXG/YE4t9Tqg=)
4: w49gIkVLNSYogOVZSrdUPgUp370.roa (hash: 6U7SbASkeATtJP3IVCl3hK3qgWI7Ka+3JgVPUarezUQ=)
5: zqr4aGdDDtzTHDNPWJqgcPddlew.roa (hash: SNHy9E5ZRD/6ft8c8Ogn35Ny9ABmYBAl4wY1xF1BhGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0d:32:3c:a5:9b:5f:67:86:ba:b1:10:e6:14:a5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Sep 20 23:01:02 2026 GMT
Not After : Sep 21 23:01:02 2026 GMT
Subject: CN=032107a9fecca60e1e11e785348f63b4fb2cbd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:c7:85:5a:28:f2:03:16:6c:3e:2a:64:5e:
35:27:90:46:71:92:5c:bc:ac:5b:9e:75:ac:78:dc:
6c:62:15:d8:e0:c4:47:41:e8:b0:36:5c:c6:83:5a:
b7:8d:84:ef:06:de:62:34:bd:6c:be:34:56:4c:a6:
0e:a0:2a:94:2a:4f:b2:08:9c:25:99:d5:14:55:3e:
da:5d:c0:42:70:0a:d9:e2:ec:31:92:63:14:b5:4a:
af:63:0e:b2:f0:87:4d:f8:7e:69:de:1d:f1:8c:ed:
ff:75:18:db:df:71:6a:da:8d:07:f8:0e:c2:8c:fc:
e7:fd:f9:69:f6:53:4e:94:72:d0:6c:3e:b4:31:61:
3f:6c:d1:c3:b6:ba:30:c0:2a:56:4c:44:6e:2b:e5:
d8:4e:80:01:64:2d:70:c8:70:15:70:60:2c:ec:e1:
f7:59:2b:13:1b:16:69:2f:0e:8f:f2:22:b8:b8:d2:
96:34:3f:82:30:ef:19:dc:b1:37:a1:fe:1d:99:a0:
8c:76:4f:1d:76:4e:f0:25:48:00:c8:fb:4b:08:de:
39:21:b5:50:13:9c:1c:f6:af:a7:ff:34:8c:ac:bc:
05:8c:03:1d:23:c0:ce:3f:f3:ad:23:62:10:db:de:
36:d2:4a:b8:0d:f3:18:36:01:06:c7:f3:c6:82:09:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:21:07:A9:FE:CC:A6:0E:1E:11:E7:85:34:8F:63:B4:FB:2C:BD:39
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:de:ac:71:ae:3b:75:f7:8a:76:1f:d0:19:52:c4:e8:fe:b1:
b8:91:da:35:ca:f7:13:85:0b:07:c0:43:7f:f2:94:ed:e6:34:
9d:16:3c:d7:16:51:81:60:d0:d0:af:80:a7:14:96:ff:12:c2:
0e:97:f1:08:5b:69:e9:ec:5b:82:92:97:6a:37:22:7d:c0:4a:
83:09:ae:70:07:85:3c:39:8f:c6:6b:7b:ab:3f:29:d7:05:85:
54:95:0d:0d:0f:01:d6:cd:f8:9c:bd:51:fd:0a:58:bd:86:01:
57:15:67:c3:41:42:27:fa:e1:7e:81:95:bc:86:d4:04:be:cb:
d4:d1:be:69:87:b6:51:46:6a:00:be:49:fd:fd:94:59:7c:ec:
08:29:32:d1:c3:cc:5e:98:45:d9:a0:7e:6c:d6:74:39:d2:41:
fc:e2:52:6a:1e:e5:ee:f5:fc:78:11:3c:ce:eb:2d:d2:64:1f:
01:9b:b2:6c:6c:b0:6f:00:90:4a:04:8d:52:0b:c9:f4:4f:ef:
93:4a:07:85:4c:3f:f3:ca:93:ec:04:04:c2:9d:d4:97:41:db:
f3:cf:db:b1:90:b4:de:5a:96:30:4c:07:8c:0f:9d:f9:56:77:
79:c7:22:89:2a:d7:d4:17:b3:83:9d:c9:4d:87:43:a8:30:83:
56:d6:a0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:57:18 2026 by rpki-client