Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
File: 3K8sW-MHpGphaXvKhwvsojTsKkc.mft (raw, json)
Hash identifier: v/LqZhR6dT160e7T7D2s44X1dmu6JpHcjwJD8/V+2mA=
Subject key identifier: D8:C5:E7:53:1F:AF:F1:F8:3A:E2:A1:30:98:B2:99:BE:CB:98:82:F5
Authority key identifier: DC:AF:2C:5B:E3:07:A4:6A:61:69:7B:CA:87:0B:EC:A2:34:EC:2A:47
Certificate issuer: /CN=dcaf2c5be307a46a61697bca870beca234ec2a47
Certificate serial: 01A0CA47254D71CDDAF9D3CC06149461019D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:00:55 +0000
Manifest this update: Tue 22 Sep 2026 18:00:55 +0000
Manifest next update: Wed 23 Sep 2026 18:00:55 +0000
Files and hashes: 1: 3K8sW-MHpGphaXvKhwvsojTsKkc.crl (hash: o9t75/vNM+TOcIo/Pc3qidAVyBMomTG7afKyBjQPDHA=)
2: kOfsiEQyAOFEFp6bNE421gle90w.roa (hash: +TRgEzJtF640HkMV28QrOSBubxXo5DyV0zLHNPpuhXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:25:4d:71:cd:da:f9:d3:cc:06:14:94:61:01:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaf2c5be307a46a61697bca870beca234ec2a47
Validity
Not Before: Sep 22 18:00:55 2026 GMT
Not After : Sep 23 18:00:55 2026 GMT
Subject: CN=d8c5e7531faff1f83ae2a13098b299becb9882f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:59:a4:3c:dd:25:cd:29:01:c5:75:d9:2a:95:
c4:db:f7:ed:e1:3b:71:51:57:bd:43:80:57:e3:db:
04:92:5f:a9:68:4b:97:e2:de:60:be:1a:47:17:1f:
87:a2:60:d1:ed:0a:0c:bf:70:98:a8:ef:a8:bf:a4:
a8:b2:46:cc:11:55:b0:50:56:9b:a3:d3:c6:ff:91:
e7:90:54:f0:a1:8f:4a:63:4d:63:e5:a1:f4:a4:6a:
2e:5f:af:9e:dc:92:12:a2:b0:c3:87:1a:c2:2f:cf:
80:89:44:b7:bd:0d:65:c7:32:2e:ad:dd:0b:e4:92:
e7:0b:f7:05:5a:95:38:5c:30:9f:66:6a:46:99:18:
7d:b7:f8:e2:9b:91:ec:0e:86:be:37:d2:fb:a0:6b:
b6:e8:77:a2:1b:57:f4:a0:71:0e:d7:ea:aa:3d:66:
e9:75:3a:0f:8d:af:51:09:98:2b:75:77:53:6b:48:
fb:a6:14:2f:bc:db:a8:aa:94:75:6e:31:ff:4c:f1:
4d:99:e2:df:00:12:68:dd:41:f2:05:a3:64:26:f8:
fb:02:56:a7:08:17:e3:72:a7:d2:87:7b:17:dd:53:
da:98:a3:1a:33:44:c5:23:73:ab:c1:15:49:e5:14:
7f:c1:59:f6:95:e9:42:d4:5a:ed:3b:92:27:2d:da:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C5:E7:53:1F:AF:F1:F8:3A:E2:A1:30:98:B2:99:BE:CB:98:82:F5
X509v3 Authority Key Identifier:
keyid:DC:AF:2C:5B:E3:07:A4:6A:61:69:7B:CA:87:0B:EC:A2:34:EC:2A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a4:7f:c7:88:75:d6:58:6c:77:b6:39:a6:3d:59:c1:88:5f:
af:6c:46:0d:f5:18:33:40:5f:4d:fe:fc:57:39:fc:e7:f8:69:
d4:78:14:a0:3a:b5:18:8d:02:24:14:d5:23:eb:ad:78:fa:7d:
60:63:c1:ad:54:60:d2:91:e4:7a:ff:44:94:c0:54:9d:79:1d:
a5:de:5c:1a:d4:36:5d:cd:a4:6f:be:fa:07:62:4f:8e:10:2e:
71:32:b8:cf:74:fb:cf:33:24:64:7a:64:5c:bc:68:f0:25:fa:
1b:5c:6b:49:79:35:36:6a:04:e5:97:82:26:c2:de:be:6a:6c:
c2:ab:d3:56:f3:df:7b:1d:af:fa:2f:46:bb:04:c0:7a:72:cd:
58:01:3f:b1:0e:bb:40:dd:1d:ad:75:91:fb:df:e4:c9:14:c7:
20:17:59:20:22:2e:5a:a9:e4:34:55:44:6d:c7:1b:d6:b0:40:
5f:38:3f:04:6c:5b:e8:03:9f:d2:96:09:60:9c:9c:93:01:35:
46:9f:cb:f0:71:57:9a:2f:46:12:a0:39:52:46:c8:c3:7b:ab:
37:45:5f:0f:9d:a9:81:83:14:62:5b:9c:6b:85:7f:5c:ea:7b:
0c:0d:b0:22:74:3a:f9:2d:cf:e5:4d:c8:76:d5:ca:72:28:fe:
f5:b3:d2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:55:15 2026 by rpki-client