Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
File: a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft (raw, json)
Hash identifier: hqNw/cBINeQksmX9OAjYug5/5W3ffB8j6RwbdsG6xp0=
Subject key identifier: CA:31:53:60:94:AE:07:7E:58:08:9E:C6:44:1A:F5:80:4A:B2:9C:6C
Authority key identifier: 6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
Certificate issuer: /CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Certificate serial: 01A0D26E70573D8E1B10AC0A2AEE86B354D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
Manifest number: 0130
Signing time: Thu 24 Sep 2026 08:00:48 +0000
Manifest this update: Thu 24 Sep 2026 08:00:48 +0000
Manifest next update: Fri 25 Sep 2026 08:00:48 +0000
Files and hashes: 1: AYWssxj1PLbVr_URF-ZIiz6BS4I.roa (hash: 9obR855p0IhaLrIXPPGSL2nYoYCxku1wM9uG/XbR5LA=)
2: a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl (hash: 7MDcKczxOxW5UjfAi1BA1vHjThvJ6z/+dFha6cF8ze4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:70:57:3d:8e:1b:10:ac:0a:2a:ee:86:b3:54:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Validity
Not Before: Sep 24 08:00:48 2026 GMT
Not After : Sep 25 08:00:48 2026 GMT
Subject: CN=ca31536094ae077e58089ec6441af5804ab29c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:08:97:fb:28:b8:da:ec:45:1c:d8:4c:bd:
0a:f6:20:ac:35:09:66:95:3d:0b:3a:13:fd:01:64:
37:f8:0a:27:c7:21:dd:e1:c8:fa:60:05:2f:b5:c3:
56:71:13:67:73:87:e5:02:e1:ff:83:8d:db:4c:30:
1b:ce:96:35:c9:51:a1:37:a1:ef:0c:95:b4:a4:d6:
05:1e:03:6f:5d:12:32:5e:33:5b:03:83:a0:d0:f2:
52:35:f2:0b:ed:25:b5:36:08:1f:c3:51:86:25:64:
c3:7f:44:44:02:d4:dc:2d:e4:e3:0c:4c:a9:78:e2:
09:ce:69:f3:55:e2:fb:28:6e:6d:6f:00:93:df:b7:
ea:d6:6e:29:6f:24:d2:5a:05:c2:8a:e0:7e:1e:67:
81:76:1d:b5:51:4b:0f:15:fc:87:2b:b9:37:fc:4f:
5d:cd:d8:b3:b2:c8:ed:92:40:6c:d2:fa:bc:b3:84:
b2:2e:b1:82:1b:da:a3:ff:e7:73:33:f7:33:38:e7:
bc:43:a2:2d:57:43:b9:2d:02:03:fd:45:d0:01:7b:
0a:e8:31:33:99:a5:66:c7:5e:95:2d:d6:1f:27:7f:
82:ea:51:be:35:f9:e1:19:7c:5d:a2:29:ac:63:3a:
0b:c7:d6:08:93:63:50:41:48:2b:09:1c:84:98:da:
8f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:31:53:60:94:AE:07:7E:58:08:9E:C6:44:1A:F5:80:4A:B2:9C:6C
X509v3 Authority Key Identifier:
keyid:6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a1:a6:33:eb:1c:0f:2b:fe:5e:e5:53:c1:59:7a:41:76:a2:
22:94:97:95:bf:e8:e7:c5:2c:d7:b7:2a:e9:c1:fc:95:bb:d8:
11:d7:ce:65:ea:83:c6:7b:45:2d:f2:bb:74:5f:ed:0e:06:5f:
bc:be:bd:f1:ac:d2:a5:d0:1e:11:39:ef:2f:3c:dc:24:9d:d2:
79:d6:94:28:56:dd:39:b5:7c:af:23:a7:8e:83:c9:c4:d6:bb:
b9:db:65:1b:05:96:d1:61:2b:50:4b:47:23:41:c8:6b:3d:a0:
26:cf:8f:e9:be:da:63:f3:ba:1a:90:a5:15:6e:ab:18:81:bb:
f3:86:74:c8:7b:56:3a:43:50:c4:8d:1f:2f:fd:51:70:7a:fa:
95:aa:11:6b:2f:ea:8c:c0:4d:96:e7:85:e0:db:6f:6d:f1:fa:
9a:91:83:d5:87:99:db:cb:ec:7e:e8:2c:9c:dd:e4:95:90:87:
09:df:ad:34:35:f0:b4:76:2c:b3:45:53:84:04:61:f1:27:31:
71:c5:76:85:35:ee:e6:b6:5a:fe:10:74:3a:00:32:e2:74:cc:
75:39:4b:17:3a:ce:fc:24:1a:09:d7:94:eb:2b:e6:d2:6a:9b:
f6:3c:80:81:57:47:37:96:49:fe:c8:18:4e:be:84:b8:4c:ea:
83:53:fe:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:57:16 2026 by rpki-client