Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
File: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft (raw, json)
Hash identifier: 3+Vap/ul8Bu1nh3tj2SPqGAO9IAvKO34ZO+vaztcITw=
Subject key identifier: 09:AB:8C:17:EB:80:11:92:16:80:D3:06:8B:99:3D:E2:40:82:10:A7
Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
Certificate issuer: /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Certificate serial: 01A0C96B9A04148027F2BD80F35103F08EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
Manifest number: 0355
Signing time: Tue 22 Sep 2026 14:01:07 +0000
Manifest this update: Tue 22 Sep 2026 14:01:07 +0000
Manifest next update: Wed 23 Sep 2026 14:01:07 +0000
Files and hashes: 1: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl (hash: vyjuGvuQvjBwAIxApAQ4uGYneS/Rklbi6GTu8MXetpk=)
2: hitJJLRKZoeTjFy1UdVtOKCeU3E.roa (hash: P3W2mUUG6W+rjdD2ot4LgXNOj0ClkdXmzifsh0+3Km0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:9a:04:14:80:27:f2:bd:80:f3:51:03:f0:8e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Validity
Not Before: Sep 22 14:01:07 2026 GMT
Not After : Sep 23 14:01:07 2026 GMT
Subject: CN=09ab8c17eb8011921680d3068b993de2408210a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ab:7a:13:ef:35:cf:a5:8f:4e:62:02:3d:3c:
4f:e2:43:f4:fd:99:b0:6b:bf:ea:1f:f5:bf:eb:02:
4f:8e:4b:49:b0:2c:cd:48:a3:c9:66:16:bb:b8:be:
79:16:a1:de:14:10:b4:dc:05:a2:25:b0:b1:8d:39:
fb:33:62:d7:50:35:e5:0e:27:63:b1:7a:66:c7:19:
20:bb:64:6f:f7:88:92:31:3d:35:47:9f:2d:42:d9:
2f:0c:ce:6a:9a:61:41:8b:61:73:24:8a:1a:b4:20:
82:43:6a:b4:a5:f3:28:8b:1b:29:d5:7f:95:ac:6e:
09:b7:de:f4:46:32:16:73:6e:08:4a:17:df:51:3b:
cd:2f:45:e8:5a:16:58:a4:f1:85:08:bc:ed:3f:91:
34:64:2a:dc:f7:ac:27:d1:48:24:c6:7c:46:b3:3b:
42:18:bc:ae:a7:d1:c2:34:38:25:e4:9e:97:0b:67:
41:41:e0:87:97:fb:5d:30:28:a6:9b:6a:f9:63:27:
f6:14:4f:3c:9c:4f:e2:47:fd:47:fb:7f:1d:45:2c:
90:89:6d:d1:c4:40:3a:71:df:b9:22:5d:dc:2e:f9:
06:cb:31:5f:ec:d0:fb:f0:68:13:07:48:01:48:f9:
78:07:c1:cd:34:5e:f6:6a:20:85:4f:36:f2:af:92:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AB:8C:17:EB:80:11:92:16:80:D3:06:8B:99:3D:E2:40:82:10:A7
X509v3 Authority Key Identifier:
keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c5:34:de:5c:dc:fb:be:1b:e5:96:22:6e:8f:a5:a1:2b:f5:
4a:60:29:9c:77:ac:16:2d:b0:d5:5f:73:59:f2:b7:1c:62:d6:
83:bd:9a:0a:e1:1f:44:2c:6b:ac:d5:1d:29:46:15:22:30:ce:
5b:7b:19:2d:b6:ec:25:52:02:c0:5b:78:93:ac:10:a1:0e:93:
65:89:02:b2:0b:02:94:68:17:eb:20:db:af:c9:b3:04:57:c1:
69:c6:5e:63:7e:16:39:83:87:7e:e3:5b:69:d1:97:8c:65:87:
68:b2:66:cd:0e:8b:81:b1:5b:1a:90:f1:7c:85:c5:e7:06:8d:
25:04:95:2f:ab:74:89:38:8e:f5:1c:28:ab:a2:38:ea:8d:1c:
c4:88:8f:86:84:b8:37:36:f8:46:55:25:12:3c:a1:e6:36:e6:
9c:3b:2d:a4:67:93:d3:7c:cf:ff:c3:7e:9d:0e:ce:f2:e5:3f:
f1:14:e0:76:d4:4d:ee:dd:0e:38:f5:e5:ed:80:74:0b:64:24:
68:6f:c9:81:d6:9e:33:a2:23:24:26:c7:47:e5:71:c3:a9:bc:
26:90:99:96:f5:ed:81:21:c8:75:54:0d:af:82:dc:00:48:9e:
8e:11:f4:1c:fc:3e:b9:33:63:f5:c8:5b:da:b8:a9:7a:b0:11:
fe:fe:eb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:57:58 2026 by rpki-client