Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier: AXKo0f/Ac3PGKCugIFpMK1z7s+F0PE2Pt/mSt8ZjnWs=
Subject key identifier: 8B:85:B7:EB:F0:48:EE:9C:E2:EB:0A:3E:04:3C:1C:6F:63:F3:78:ED
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 01A0CF6D71245EF1D4EC842C9DDEBCACDBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number: 0CDD
Signing time: Wed 23 Sep 2026 18:00:51 +0000
Manifest this update: Wed 23 Sep 2026 18:00:51 +0000
Manifest next update: Thu 24 Sep 2026 18:00:51 +0000
Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: BOcniLSnryqpheaTRAd01ARb19Xlbfld9IIdpGDZii4=)
2: OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa (hash: WPn0W+4jICl9OeInrEgUZWegwTFzjRsf+1TWPog3Wy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:71:24:5e:f1:d4:ec:84:2c:9d:de:bc:ac:db:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: Sep 23 18:00:51 2026 GMT
Not After : Sep 24 18:00:51 2026 GMT
Subject: CN=8b85b7ebf048ee9ce2eb0a3e043c1c6f63f378ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:16:9f:02:13:bf:b1:5e:44:82:04:7f:f1:
df:94:50:67:1c:18:ea:f9:2c:2c:34:a3:3a:95:51:
a9:49:32:ba:6e:1a:03:7a:32:24:90:0e:27:47:20:
a0:0f:01:bf:62:37:54:23:f5:c1:5f:cb:7e:5d:0e:
ec:10:69:31:d7:0b:ab:2e:be:44:d9:d1:83:96:b1:
e8:b5:c8:b8:76:91:2c:f9:e2:1f:f0:36:a4:97:0e:
e3:a4:96:ac:8b:d9:55:5d:59:2e:97:c9:be:d5:ff:
3c:ba:58:d8:99:e1:5c:21:a5:ce:9a:ef:2e:99:5a:
da:e8:c8:09:5e:46:9f:de:1f:9c:d8:15:4c:8f:ad:
70:ff:fa:36:d6:2c:73:de:f3:85:4e:5d:1b:c0:5e:
62:65:dc:c1:fe:86:c4:95:bd:a3:56:3e:cf:8a:87:
a0:e5:4c:fe:b0:40:28:f8:c2:f2:3d:38:85:b1:a1:
ab:bc:3f:14:0c:6d:a4:57:88:20:20:e5:e3:16:51:
46:37:95:7e:d4:b3:ca:7a:f0:96:b0:5e:5f:6f:3d:
c6:90:ac:4e:38:32:70:ef:fb:d9:85:9a:4d:64:f1:
8c:ac:a7:61:d7:cd:3c:80:02:03:26:95:74:f7:95:
be:b7:58:5d:0d:5c:22:22:04:b6:c3:70:c0:07:9d:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:85:B7:EB:F0:48:EE:9C:E2:EB:0A:3E:04:3C:1C:6F:63:F3:78:ED
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:2f:be:b3:39:f3:41:f6:3e:f7:cd:28:dd:e2:3a:a0:15:0d:
c7:41:37:33:25:5f:7a:66:e6:fb:bf:86:7c:00:37:59:3b:ea:
99:14:c5:3b:dd:46:02:44:a9:d5:47:c5:3c:56:ed:b1:73:9f:
a7:ec:79:5e:e5:f5:b6:8e:45:3c:5b:a3:ac:66:60:51:3a:2a:
12:b8:1c:ac:fa:f8:5e:fa:2b:9e:ce:48:b0:a5:90:c6:3a:1c:
8b:66:ff:c6:a2:48:11:d6:7c:7e:fb:27:2c:75:51:72:d2:20:
1f:61:3f:6e:6b:a6:59:f4:bc:fb:c8:f9:c8:5e:47:8f:f2:98:
95:70:04:94:39:03:e7:13:62:d4:94:13:e9:29:d4:46:a8:df:
27:a0:8c:42:b9:de:27:7c:6f:fa:00:47:9c:be:1c:d7:8c:eb:
a0:55:f7:d2:cc:e4:94:a7:c7:2e:8d:63:ef:9a:1c:ad:9c:7d:
f4:60:59:66:b0:35:f9:44:12:25:4e:da:05:53:62:65:de:00:
f0:35:18:c9:d6:6e:49:2a:34:f4:32:72:7e:2c:5a:8b:2e:53:
ab:6d:8c:6f:67:67:f8:fe:29:14:56:66:c4:38:53:b4:39:7d:
07:9f:3d:d1:94:63:19:b4:21:10:ae:dd:ab:8f:78:75:08:c8:
41:55:f0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:33:09 2026 by rpki-client