Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
File: _-BD2zfqJckthc5lp20aTlE2JKo.mft (raw, json)
Hash identifier: sIgCSIlscx/23ZGZ7RiDRVlAgr/7XcmJKe62ZgYTDTE=
Subject key identifier: 3F:14:BD:F0:F9:14:3C:30:A2:22:C1:F1:C4:24:A2:03:92:39:46:5C
Authority key identifier: FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
Certificate issuer: /CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Certificate serial: 01A0CC34F985A9051575E633FA518A3B4BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:00:18 +0000
Manifest this update: Wed 23 Sep 2026 03:00:18 +0000
Manifest next update: Thu 24 Sep 2026 03:00:18 +0000
Files and hashes: 1: 9StrTLCfqGV3R6lUHBbjcUPbtgE.roa (hash: hKyGuDQdq7Wwmsr9xKC9vViQNuynbDmlDvA0XQY2P9E=)
2: Qagt2LqaMAntgU09nCJSjOteJGI.roa (hash: hVVNYLozOrGf2eg6nP90ee7AH3HGnRwNnmP01BLSjaQ=)
3: _-BD2zfqJckthc5lp20aTlE2JKo.crl (hash: gbBGG+b1FrtHfHR99Oy2ZmSpjL78KMI6jlCyI4h/f0U=)
4: jGolEufnyPDfW166GsYrvcDadWI.roa (hash: MhUSPPX1/ZIFQ+uQDE4vWXmxQ4zd9lEULvZBslHM2Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:34:f9:85:a9:05:15:75:e6:33:fa:51:8a:3b:4b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Validity
Not Before: Sep 23 03:00:18 2026 GMT
Not After : Sep 24 03:00:18 2026 GMT
Subject: CN=3f14bdf0f9143c30a222c1f1c424a2039239465c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:92:79:7d:5a:60:c7:78:0f:f7:8f:e1:49:
8e:91:aa:31:1e:b5:80:c1:78:a2:15:d1:2e:7f:6e:
55:79:a8:26:68:23:15:b9:1b:3b:f3:b1:73:77:86:
38:e1:7c:26:8f:fc:63:ab:f1:4b:c4:c7:bd:50:1d:
24:ee:25:10:19:f0:a0:4c:22:81:33:3d:f9:43:76:
1a:80:2b:c1:bf:d5:18:29:dc:fe:c5:82:07:9e:50:
fc:0a:f9:0f:d4:5f:a8:68:d9:fa:b1:7a:29:7d:45:
20:da:ce:b4:13:26:2b:6e:83:48:28:fd:50:f6:fd:
6c:86:3a:a7:0b:e8:13:52:9b:49:43:54:62:d6:8c:
93:7b:60:c2:c2:57:0b:4f:ec:57:d5:e3:d8:34:cd:
bd:cf:81:45:77:e1:9a:6b:0d:88:77:20:64:5b:90:
0b:41:94:5a:a4:8c:f7:6a:ec:65:e8:a5:3d:ed:5b:
89:66:35:e6:5c:07:98:9f:48:c9:34:c1:d0:f2:ca:
a4:2b:cd:af:30:b4:ba:c1:62:51:74:fd:db:30:b4:
bd:4a:1d:29:3c:27:67:cb:4e:6d:bf:a5:98:20:9e:
4f:1d:ce:69:a9:d3:ab:98:07:5d:89:a2:ea:92:0e:
35:0c:6a:65:8e:2b:3f:c8:93:0c:02:c7:4f:37:12:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:14:BD:F0:F9:14:3C:30:A2:22:C1:F1:C4:24:A2:03:92:39:46:5C
X509v3 Authority Key Identifier:
keyid:FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d9:8d:1c:26:6f:64:c3:00:4e:4f:51:2a:4c:d9:68:a1:5b:
3e:55:2f:d4:37:9d:6a:c9:49:a1:8e:39:1d:c8:83:43:52:00:
90:a3:7f:87:1c:c4:1d:e2:f8:a6:cb:19:29:e4:1c:43:00:61:
31:ef:ff:04:f8:cf:85:33:a4:c9:c6:84:68:65:10:e2:fb:9d:
02:6b:dc:fb:52:cb:23:46:b1:d3:94:08:9b:b6:e3:36:57:8c:
9f:5f:5a:e9:b8:81:88:dc:5f:a0:89:50:52:7b:7c:85:78:ce:
e2:23:24:30:9b:28:01:cb:d3:f5:89:81:0f:02:f7:43:21:9a:
c3:6e:e4:d1:45:f0:ce:5e:dd:d4:a9:ca:cf:44:6e:d2:46:81:
30:0c:2c:89:32:ec:2c:c2:8f:41:b1:48:62:b1:88:81:7c:0d:
90:0e:16:c5:4a:6f:b1:42:3c:4c:54:54:b3:67:a3:04:23:a8:
20:f2:25:29:df:75:fe:13:3b:2b:1e:81:61:9b:93:3a:a6:6b:
ae:a4:b4:d0:93:09:02:0b:70:d1:2a:d0:20:b2:8d:1c:da:73:
a0:7f:2f:fb:f4:e3:24:2d:dd:fb:ac:a1:dd:0a:b7:96:a8:a1:
3c:9e:04:6b:99:0a:b7:ee:6d:ee:9b:47:e6:e8:29:31:30:30:
37:b7:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:06:59 2026 by rpki-client