Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier: BQ85DMF71SLjgCmb5R/MI6x5aOL/7hz61Dp3gv5IM0k=
Subject key identifier: 33:E9:9C:A9:A9:61:38:FB:8F:E9:7A:75:4A:C6:0F:B0:9E:A0:81:E6
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 01A0C8C627D5DC5CB3884974079332145861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 11:00:24 +0000
Manifest this update: Tue 22 Sep 2026 11:00:24 +0000
Manifest next update: Wed 23 Sep 2026 11:00:24 +0000
Files and hashes: 1: 7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa (hash: +MmvrOl97e3DA2vv+SK8o06jDjKb06tuUhtauO+J0DA=)
2: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: nw7GBj9J05wIXYbv/AV3PWBLJ5ToXtwL+c2Sqpjn3RA=)
3: e73gsHaWTejzTyfXW5UdzDUTXQs.roa (hash: 9j92RNoJBabv7foYLIaPsDGRKKARMwRj5sIk41buBpE=)
4: nExWLodTy66s6nOpw-IuXiduwOc.roa (hash: xQ9/3XOQzACu7Vie8ibe6dTF70DY7qx3P6HKsR8oJRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:27:d5:dc:5c:b3:88:49:74:07:93:32:14:58:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Sep 22 11:00:24 2026 GMT
Not After : Sep 23 11:00:24 2026 GMT
Subject: CN=33e99ca9a96138fb8fe97a754ac60fb09ea081e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:a8:1c:c4:cf:f0:c7:de:64:0f:c9:cf:14:
e4:f0:4e:90:81:af:6f:fe:3b:70:f0:85:4e:18:b2:
b1:84:02:71:03:f9:33:f1:b0:83:c9:7b:25:93:30:
f2:45:45:92:17:87:b9:3c:d9:81:5a:d7:84:12:8d:
d7:e0:f6:fb:92:8b:35:0b:c4:9d:83:91:5e:51:c2:
65:71:9c:da:ba:b0:b7:14:6c:95:3b:fc:ba:5f:ab:
19:30:11:3f:01:8a:6a:96:cf:bd:1e:2b:89:c2:b8:
09:09:6c:4f:80:2a:63:e6:ea:fb:31:9e:e0:7f:3b:
94:cf:e8:16:f2:39:c9:4b:92:f9:e3:dc:a0:2d:b6:
8e:dd:e4:62:1c:23:6f:b1:a1:54:91:ad:d8:f4:f9:
47:90:52:30:84:65:89:7d:a1:3c:39:18:5b:2e:9e:
89:76:d5:2d:c7:fe:f3:14:b7:31:2c:2f:f7:74:7a:
8b:7d:2f:72:56:26:b0:a7:04:ce:10:dc:14:a7:f2:
7e:e7:87:68:56:c6:67:d0:af:b2:8c:81:63:32:f5:
69:5d:f4:f3:d2:f6:59:85:44:b6:45:05:71:0a:3d:
89:ab:61:95:b3:98:62:72:09:de:e7:d6:81:28:be:
cd:8e:6d:4a:50:41:3a:c5:66:4e:a2:95:ec:8e:f2:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E9:9C:A9:A9:61:38:FB:8F:E9:7A:75:4A:C6:0F:B0:9E:A0:81:E6
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:77:bd:bf:28:89:63:88:64:fb:a0:b9:92:8b:6a:56:3b:a0:
99:43:2a:18:c0:54:98:2e:20:36:31:cd:18:fe:23:9b:98:55:
8c:fa:dc:2e:df:71:fc:77:c9:31:92:80:e9:96:e4:f4:ce:80:
c2:14:72:81:da:f6:8c:e7:2b:06:4d:0b:db:6f:d5:d8:54:93:
19:b9:40:f5:52:85:11:29:68:5c:e3:71:a2:7d:42:b2:99:cc:
13:72:de:5f:1f:f8:60:73:0c:ce:6e:b9:31:91:f2:0c:14:1a:
9e:db:f8:ce:73:e0:fe:11:b5:f8:12:df:0f:50:38:47:d4:83:
45:b0:06:f0:ee:d8:6e:9a:a1:18:de:14:39:d4:66:a4:3a:05:
24:07:7e:ed:81:2e:7c:72:f9:eb:81:85:43:5b:d2:d3:59:ad:
26:1c:56:36:31:d9:b0:8c:f1:da:b0:0a:eb:76:28:61:89:87:
60:bf:7e:a7:15:f6:af:1a:f9:30:e1:0c:54:22:74:20:08:7d:
bb:8d:ac:5f:f6:fa:82:a6:d9:55:df:c6:31:3a:1f:5e:39:b9:
ea:3f:9f:83:64:5a:35:49:54:5b:cb:bd:51:20:f2:57:dd:69:
e7:05:bc:c6:8a:67:2e:26:77:d3:a0:2d:7d:df:73:ba:1c:87:
4e:48:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:16:20 2026 by rpki-client