Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
File: 3-4r9D8hqBxJLG5qn8bwdNLwohc.mft (raw, json)
Hash identifier: G3H0CYHOwu18TMluslPhdzkUF4O2LW/rbu2dWKrjM+M=
Subject key identifier: 55:66:4A:65:0E:28:D5:07:95:66:04:BC:EF:0C:83:61:E5:EC:11:F6
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 01A0C6D7CF86B7A702BA773283FAEF15CF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
Manifest number: 1A76
Signing time: Tue 22 Sep 2026 02:00:26 +0000
Manifest this update: Tue 22 Sep 2026 02:00:26 +0000
Manifest next update: Wed 23 Sep 2026 02:00:26 +0000
Files and hashes: 1: 1fQajHTJp0S8KUunDd6YeyFtENM.roa (hash: mmAzmTwR/ELzJWO/mTGxkNnXnKiWntSSUF9kf4/Kzb4=)
2: 3-4r9D8hqBxJLG5qn8bwdNLwohc.crl (hash: up9A2lF9DKh2OA22lEJTrMRkAP/KxacspBG2L07KWK8=)
3: 6I-aggcE89s528aMt_8CuZqJ61A.roa (hash: 1l0d6AnGSzNrEZie8Z3fZ9Fg7c3oqYcQ4vM6hMLN2Xk=)
4: F4SS2nAtZGfBCcizniZNF8kbqKM.roa (hash: HKR9CN00lz/+opq5i3oKemga0jRQrkicKz4E2CgkRB4=)
5: SnPwDc-0nTqJfXka4bMItiAxnag.roa (hash: FsxQK4FiALmdR7pjWtArDyIp4Te0b42AEfI8eyP5E4A=)
6: kvP2mI40vax4nF6kVjBW7CPEusk.roa (hash: XQESmT9q2hkU8SLAW++EjKoLyZosWL6LnbGsHkaVg6M=)
7: rrxhY0T34NFm8dBURFOGg9BvJjw.roa (hash: CAUMQZvZz6QKlQgRUZEx4oRHdyyDBXGnUQ6HYMNXgDk=)
8: ts1pF9IuOtsG6MORS9TxN4ZUynY.roa (hash: qnP47gtGKaM8m6t6aMvd42h7A8nkD9mykwqjLsAUTYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:cf:86:b7:a7:02:ba:77:32:83:fa:ef:15:cf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Sep 22 02:00:26 2026 GMT
Not After : Sep 23 02:00:26 2026 GMT
Subject: CN=55664a650e28d507956604bcef0c8361e5ec11f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:65:28:57:ed:93:e7:49:4a:d3:85:9b:21:
e5:ff:d4:87:f5:bf:18:db:5f:83:89:80:f4:77:63:
53:2d:e4:64:ed:0c:91:dd:7d:9b:03:fa:bf:3d:79:
64:42:15:f1:fe:2f:25:9a:d2:6d:41:d7:90:97:ca:
ee:46:f0:e0:57:d9:6d:78:12:bf:34:15:7a:9c:de:
1f:a7:ee:8f:69:a1:f5:af:07:ee:8d:76:05:fd:b2:
eb:6d:c3:d4:b1:21:4d:65:e7:9e:2f:2f:a3:e3:d0:
04:f3:05:ae:98:f4:67:c5:fd:3d:9c:f2:92:1a:df:
2d:b9:cd:a2:0a:57:8c:fb:a9:01:b8:ee:b1:01:e9:
13:91:50:37:31:04:f4:13:90:57:e1:f6:38:59:15:
0b:f9:83:30:c7:1d:05:b9:cf:62:12:e0:21:02:2a:
63:04:51:56:fb:39:8a:2e:de:07:5a:67:cd:09:92:
87:20:e6:33:23:34:15:3a:25:4e:58:09:cc:ea:a0:
7f:22:24:f6:96:45:b6:59:53:4d:3f:02:c2:49:a4:
30:c7:f4:9a:d8:5a:81:72:c9:ae:0b:91:8b:56:d0:
05:a6:fa:e2:42:b2:8e:2d:06:26:22:1e:bb:6e:d3:
8b:3d:75:d8:dd:37:98:97:9b:36:00:b5:c6:18:65:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:66:4A:65:0E:28:D5:07:95:66:04:BC:EF:0C:83:61:E5:EC:11:F6
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:8f:63:02:de:4f:6d:91:71:50:21:15:62:b5:84:56:b8:
22:20:c8:9d:cd:a9:78:f3:a1:ec:3b:c2:0a:84:9b:e2:80:5f:
95:a8:ba:a1:51:03:a9:19:cd:4a:10:59:2f:bb:41:aa:57:49:
d8:3d:f4:7c:1e:25:1f:e5:55:5c:ff:00:45:72:1c:50:97:2d:
40:18:94:ab:e1:f9:72:98:5d:af:3f:db:77:3e:ef:e3:14:bc:
58:79:27:e5:1c:93:14:92:7c:4f:7d:a4:b3:3b:97:75:06:25:
6f:95:30:c7:57:44:38:93:c3:a3:75:9a:de:8c:39:f9:57:7f:
ee:bf:24:46:4a:81:a2:bf:f9:8d:dd:4e:5b:a4:9b:cb:89:74:
c0:f0:e3:c2:3b:41:93:8a:59:ba:bf:13:d3:ee:f7:89:84:cf:
8d:0a:32:95:65:ba:9e:1d:8f:17:7f:85:ab:70:95:4c:c2:1e:
10:80:19:68:9d:09:76:c0:e6:e2:31:57:38:2f:1b:20:fb:34:
9c:c6:39:99:39:5a:23:db:ca:ed:61:6d:5c:27:3a:77:5e:80:
15:61:6b:0f:24:7a:69:31:a5:fe:98:a6:70:83:b2:cf:98:d1:
90:64:59:5c:6e:03:d1:4a:0a:6d:d2:f3:ae:c0:36:f0:6c:87:
ad:fa:bc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:20:10 2026 by rpki-client