Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
File: 3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft (raw, json)
Hash identifier: V3aQ+dOvTBN81YjocZnIh+nSIhB/oksyy6MGMfnvEIo=
Subject key identifier: CD:4E:B8:58:21:F5:6A:99:59:4A:55:54:92:7A:52:1A:76:3F:A5:00
Authority key identifier: DC:98:98:EC:BA:C7:DD:B3:9B:20:EA:99:B0:38:D2:6C:46:A8:24:D4
Certificate issuer: /CN=dc9898ecbac7ddb39b20ea99b038d26c46a824d4
Certificate serial: 01A0C8589AA89C9B6DF6586697AA2F3E5916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:44 +0000
Manifest this update: Tue 22 Sep 2026 09:00:44 +0000
Manifest next update: Wed 23 Sep 2026 09:00:44 +0000
Files and hashes: 1: 3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl (hash: B/m7NVyGFsrW4k+Mi0d1hRMmVNy0U131zjP7MzI8+EI=)
2: lGfDr1-zqft5sxdN3ZBuxYLpJQ8.roa (hash: HUobi3hV3dki/qkxRm+DIA0moIcySUJXJvx1G//m6cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:9a:a8:9c:9b:6d:f6:58:66:97:aa:2f:3e:59:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc9898ecbac7ddb39b20ea99b038d26c46a824d4
Validity
Not Before: Sep 22 09:00:44 2026 GMT
Not After : Sep 23 09:00:44 2026 GMT
Subject: CN=cd4eb85821f56a99594a5554927a521a763fa500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:80:10:2f:a6:29:ea:d5:6e:2d:5d:93:b1:
c8:71:99:d0:29:dd:7e:05:ef:37:1c:d2:3a:1c:2b:
91:d3:b9:79:07:5e:7e:f3:77:a2:6a:46:1d:ed:f4:
81:3b:2e:2c:f3:77:df:89:11:40:3e:8d:a1:95:cd:
71:54:c5:eb:94:03:7e:32:c9:9c:d7:ea:3b:b6:25:
90:de:fd:80:95:48:0a:a5:6d:7a:a8:dc:a3:60:5d:
49:09:bb:99:c6:27:a4:8f:23:de:4e:8a:bf:76:f5:
b2:50:60:84:58:f6:45:56:6c:14:f2:d7:0c:e6:5b:
aa:da:2d:b3:dc:fc:f5:a9:38:fa:1a:e2:ad:42:71:
d4:0b:d8:b1:83:7f:27:73:6c:b7:43:31:b0:6e:b8:
26:a6:11:87:ea:6c:e9:09:8f:39:ff:54:17:f8:d1:
67:41:fb:4e:a5:c8:8a:13:e5:85:e7:c3:0a:b9:86:
0b:02:57:ad:11:34:b7:31:56:8d:27:29:72:92:9b:
56:bb:22:28:55:d4:99:e6:d1:76:4c:3f:57:2e:46:
77:e4:f5:87:90:df:c6:f6:fe:50:57:19:b6:9c:dc:
27:07:18:f8:f9:27:bd:54:62:24:b9:c1:10:dd:ed:
6c:12:16:c1:fa:d6:52:12:1a:42:b2:6b:0a:2c:ca:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4E:B8:58:21:F5:6A:99:59:4A:55:54:92:7A:52:1A:76:3F:A5:00
X509v3 Authority Key Identifier:
keyid:DC:98:98:EC:BA:C7:DD:B3:9B:20:EA:99:B0:38:D2:6C:46:A8:24:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e7:11:38:af:f5:47:d5:78:14:c2:50:5d:c5:e9:02:b2:d8:
8f:4f:1a:19:bc:c8:8f:f9:5e:e8:b4:3d:88:0c:1c:12:81:b1:
9e:01:9e:24:f9:09:c5:6d:aa:6b:d8:91:a6:13:d3:3c:43:a6:
7c:84:21:08:59:17:90:26:93:b7:09:38:e5:77:43:66:c2:d9:
3c:64:b3:19:6c:15:c7:4c:d7:63:c3:54:e1:29:48:3a:04:f4:
c4:d9:45:42:28:1c:c4:39:d8:bc:99:aa:32:4f:8a:13:f5:9f:
1c:7e:ba:26:0b:fe:10:b3:41:7f:f7:c8:ab:5a:e2:55:25:f1:
24:fd:48:fd:b5:51:61:5b:10:00:96:ab:15:82:cc:95:47:c5:
d0:ab:72:60:41:7f:0d:a0:7c:c2:c0:83:c5:e8:71:64:f5:ef:
b2:6f:ed:5e:ad:44:e7:d0:5f:d0:40:5a:be:bc:9a:50:15:9f:
e4:78:e6:8d:4c:28:d7:2d:ba:35:e3:27:34:bb:40:cc:32:56:
20:07:85:d7:0a:fb:2d:da:10:82:ce:ae:f0:68:7c:80:76:cd:
c2:d6:90:f9:e5:59:69:71:9b:e0:16:5c:86:a2:68:4a:e4:f2:
7b:5b:f7:ac:8b:2a:30:77:29:b5:8b:ce:77:80:19:b3:af:d2:
3e:b9:08:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:06:46 2026 by rpki-client