Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier: IELJuisx5FEKslwI/Q7Wc2ewC+t8YavVGD9wSvY6Sck=
Subject key identifier: 2A:B1:DA:3A:22:FE:8B:F1:98:38:75:B8:52:F9:17:B6:8F:F7:E1:90
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer: /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial: 01A0C3D73C39691EA48B2C0DCF32815F2CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number: 0ABC
Signing time: Mon 21 Sep 2026 12:00:57 +0000
Manifest this update: Mon 21 Sep 2026 12:00:57 +0000
Manifest next update: Tue 22 Sep 2026 12:00:57 +0000
Files and hashes: 1: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: Qxf4vs8dzMPe+khyRK76w6gJfQhJL/jGcQs99fNn6aU=)
2: hBIKQJotb91PfUz83IlhlDln8Os.roa (hash: FZgPmcaU95wHeFAG7MifAFsuelM+Kr14jElFrFSjrsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:3c:39:69:1e:a4:8b:2c:0d:cf:32:81:5f:2c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Validity
Not Before: Sep 21 12:00:57 2026 GMT
Not After : Sep 22 12:00:57 2026 GMT
Subject: CN=2ab1da3a22fe8bf1983875b852f917b68ff7e190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:51:91:b6:4c:ef:38:e8:de:87:fa:f1:2e:09:
22:05:b1:a7:6d:99:87:e3:81:ff:29:c0:f1:62:9f:
83:1b:7e:ac:f5:f1:9a:ab:1b:38:2b:75:22:13:0c:
e0:22:78:4e:b6:11:b8:f4:87:9d:06:d6:e9:7f:df:
63:47:29:63:24:04:05:08:3e:61:9a:2d:15:39:a6:
c0:ba:fc:b0:12:3e:f9:fb:37:d2:75:29:eb:d6:9a:
c1:d8:07:89:4e:cb:26:c4:78:2f:44:5d:f0:92:5b:
f1:48:f6:cf:fe:fe:c5:3b:e0:2f:53:97:85:20:bc:
ab:00:48:91:9d:5a:33:2b:6b:c3:8d:9e:5e:b8:21:
d5:f9:e5:8f:1a:c7:30:78:70:fc:0c:4a:cb:a4:64:
29:b8:86:d6:34:50:02:9d:e3:c7:26:01:82:0c:fb:
07:c8:4c:58:c6:f7:0c:d4:f7:2b:5c:6c:bf:bc:40:
84:04:61:f9:f7:e9:71:d6:f2:20:88:d4:d4:8f:61:
22:59:18:7e:0b:61:22:c4:e9:8c:68:f8:6d:8b:25:
97:ae:78:27:05:18:1e:ad:1b:26:d5:ff:7f:52:31:
8b:e9:8a:9c:15:3b:fa:6a:03:9f:57:df:bf:23:4e:
d5:f9:22:ca:9e:6e:b1:77:a9:92:52:e6:5e:5b:3b:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B1:DA:3A:22:FE:8B:F1:98:38:75:B8:52:F9:17:B6:8F:F7:E1:90
X509v3 Authority Key Identifier:
keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0f:e5:da:be:07:ec:1b:e5:ca:24:29:11:7e:49:d5:02:a3:
9f:c6:cc:82:95:b7:9b:1b:47:5d:82:77:28:0d:2f:9e:18:68:
1c:61:3b:6e:8d:20:75:7c:0d:57:ea:7f:e0:38:df:25:e8:67:
8a:ac:e2:6d:ef:c2:5f:67:fa:fe:5d:67:5d:90:56:ae:33:a7:
62:4a:41:21:e4:08:ea:66:f3:d2:e6:8e:e1:9c:7a:d0:dc:73:
85:2a:55:c7:d1:cf:24:47:7f:6e:8d:1c:ac:6a:88:77:91:91:
3d:b1:ac:8b:3d:6b:40:7b:b5:d5:d5:66:0a:19:90:39:5a:cd:
47:02:08:88:65:6c:18:71:78:71:6a:75:d5:3b:dd:8d:f1:ea:
c6:b9:52:5d:9e:04:9d:5e:b5:40:7f:0b:11:62:bd:0a:2a:30:
88:24:0c:07:0c:ce:fa:57:73:97:e1:6e:17:55:42:5e:2e:d3:
75:f2:cc:32:7e:26:b9:cf:c6:77:17:ad:15:36:40:a8:30:88:
36:03:f7:fd:b9:48:44:fd:48:2d:f3:0e:9a:aa:5b:34:3a:46:
4d:1f:76:22:21:13:18:83:d9:00:41:95:6e:b2:1b:16:9f:10:
3d:8b:d0:46:c2:e4:0d:fd:f8:1b:f0:0f:14:af:fb:35:b7:58:
54:2a:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:32:11 2026 by rpki-client