Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: ERhR8+LHQzcaRw4tWX0O4abuZlhuweuA2z5jqFjFCME=
Subject key identifier: 49:2B:EA:A3:88:33:22:40:BE:71:E7:E6:7C:26:8F:93:E0:D3:7E:1E
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 01A0C444C42F5FAC05235F569BBFB0CF9742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 1A72
Signing time: Mon 21 Sep 2026 14:00:35 +0000
Manifest this update: Mon 21 Sep 2026 14:00:35 +0000
Manifest next update: Tue 22 Sep 2026 14:00:35 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: 7L1TFewfo6XyEJcYo1MIxeOVMyTMRxQrRy4/rK6tXUk=)
2: W5GHuBmScEfpIPAhuqgylrz1a6Q.roa (hash: iVf+MqYMn6D3or0TDUJHTOHK/dGQL5UOldNHGxN0jow=)
3: tH4NdKGms5TfcW6T3wq-xPP5lao.roa (hash: RAFP/ByUPYbvzL7CQ6hq0JZ4+gFCb5J71aCNcV4HRvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:c4:2f:5f:ac:05:23:5f:56:9b:bf:b0:cf:97:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Sep 21 14:00:35 2026 GMT
Not After : Sep 22 14:00:35 2026 GMT
Subject: CN=492beaa388332240be71e7e67c268f93e0d37e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:8b:93:b4:29:dd:25:a9:5a:ec:38:99:14:
ed:c6:cc:c0:71:02:c1:77:ac:3e:c4:a7:b9:5a:47:
bc:de:fe:10:6e:63:2a:60:14:26:ab:fd:31:32:a2:
45:7f:36:f8:cc:92:fe:bd:4f:9e:a0:aa:c1:93:af:
22:d1:de:0c:c0:61:7e:d2:21:f5:bf:21:16:21:a3:
c6:8e:46:86:dc:fb:2f:98:4c:3b:e6:84:98:ff:b1:
12:49:ba:a6:7e:15:c6:96:37:6b:de:1c:4e:4b:9b:
ad:35:93:2a:f6:6c:89:4d:c7:9e:7b:ca:38:4e:c1:
ab:17:eb:66:f5:a2:2c:e3:25:dd:83:08:f4:b6:1a:
3d:ac:bf:74:da:eb:e3:a7:b2:66:5f:65:4d:de:99:
8d:06:c4:62:e5:14:13:6c:81:20:27:89:ce:57:7f:
4d:bb:92:b7:be:f7:4d:3d:dc:81:93:2d:d4:8a:de:
89:72:46:d1:7a:c8:c6:6c:9f:fb:41:35:36:8e:8c:
34:23:28:86:0e:b0:3b:0a:7b:55:16:47:1a:bb:e1:
b2:4b:0c:a4:08:0f:7f:ea:56:32:b3:b3:a6:ae:bd:
cd:cc:32:97:e5:00:c3:f6:70:00:00:4b:5f:a6:85:
2a:24:b7:9b:be:77:b5:4d:34:84:55:d1:6a:69:80:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2B:EA:A3:88:33:22:40:BE:71:E7:E6:7C:26:8F:93:E0:D3:7E:1E
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:12:c7:56:dd:80:c8:65:26:58:45:c7:80:3e:d5:1d:93:88:
25:24:b7:1e:81:fc:d1:f8:13:bf:26:88:96:61:1f:6e:56:03:
41:1f:7c:79:6d:32:09:47:e3:6d:d6:40:8e:ab:bd:5c:cc:d4:
0b:18:df:aa:39:ae:e0:b4:da:bb:a4:46:b0:e1:69:d6:1b:7d:
e0:5b:78:70:86:cd:a0:c6:a5:41:65:45:ba:c8:c7:bb:98:d4:
9a:6c:c2:c2:ae:a1:39:b1:f7:1f:a7:86:3e:4f:0b:4f:5f:cd:
2c:cc:a7:01:c9:43:cc:33:92:62:4a:68:ae:63:cd:6e:a3:76:
74:ec:59:8b:02:b9:02:92:41:71:8a:0d:d8:dd:9d:d9:51:82:
df:e0:1b:75:c6:43:0f:5f:56:17:2e:a4:90:7a:64:9d:99:a5:
d7:43:ba:7b:68:97:7e:00:fe:84:c6:85:69:2b:89:0d:2a:80:
b3:84:1e:6f:dc:0b:34:d9:75:6c:4a:27:fe:49:61:df:2c:4f:
ce:17:6d:d7:d2:c3:b9:08:e0:95:ed:0f:9b:c9:e9:8d:8e:c8:
34:da:ad:d0:09:83:e9:72:34:f5:a4:63:c3:e4:a4:d6:33:11:
d3:dd:74:f0:ed:78:ad:9f:e2:b5:c2:51:f1:a5:a8:e0:d5:5e:
21:21:bd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:37:39 2026 by rpki-client