Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File: 3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier: 2kUHeBWD2Mup3iBrR7NIDW4fAqwfiPxe57T7+ExKGSI=
Subject key identifier: 16:45:69:D0:C2:89:BB:FF:EC:3D:7B:12:4D:BA:D0:C1:CA:B0:F1:94
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial: 01A0C3D68E82B540E291F8AD6416D19C69C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number: 1A6A
Signing time: Mon 21 Sep 2026 12:00:13 +0000
Manifest this update: Mon 21 Sep 2026 12:00:13 +0000
Manifest next update: Tue 22 Sep 2026 12:00:13 +0000
Files and hashes: 1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: 00wOwzfqHfcFelBcQsQVVNG0l1Rx/BNG3H3z/nHYH+o=)
2: DX5ooE9ZIZJaF02Q9CvGnKIWcNY.roa (hash: wTDsCt307bisN+gK3/IsNzSToPiLxzeSSNZDltvG+zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:8e:82:b5:40:e2:91:f8:ad:64:16:d1:9c:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Validity
Not Before: Sep 21 12:00:13 2026 GMT
Not After : Sep 22 12:00:13 2026 GMT
Subject: CN=164569d0c289bbffec3d7b124dbad0c1cab0f194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:5f:54:7f:af:c3:f7:4a:fb:bb:ed:c3:f8:
8b:04:fd:d4:ab:c9:ea:23:b5:80:9d:e1:8e:39:1b:
99:1f:5e:3a:99:01:c8:42:70:06:0c:bf:a6:72:4a:
b7:35:6c:e2:8c:fc:d3:12:12:e3:ac:97:ed:e1:c8:
47:96:ed:48:e3:30:15:95:28:4f:8a:19:e0:4c:a9:
d4:31:0c:fa:9e:48:39:10:bb:72:bf:2b:79:7a:32:
d0:a6:f2:8a:04:28:b7:c5:60:b7:aa:01:f5:ac:07:
3b:b5:36:1b:0c:08:9c:64:ab:32:8a:4e:97:c3:30:
db:88:65:74:95:93:f6:2f:af:bd:8d:e6:dd:e1:9f:
9f:a0:87:cd:9d:97:48:0f:c4:6d:f8:75:3d:0e:bb:
d6:59:ae:65:bd:41:b9:b2:02:2e:48:39:1e:3e:be:
d8:e4:66:15:80:33:e2:bc:f6:b1:4b:1d:ba:2e:be:
30:e6:c9:79:9c:e3:82:53:02:bf:da:49:5e:de:e8:
25:33:e3:a9:51:af:40:44:cc:12:47:69:f0:f3:79:
bc:e6:fd:12:9a:ba:88:2f:f2:45:27:80:29:4b:be:
ac:cd:9c:12:8b:94:81:4e:86:79:3b:3f:4e:fb:d8:
59:d7:46:9e:7e:98:aa:45:e0:e4:d5:0a:5e:47:ac:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:45:69:D0:C2:89:BB:FF:EC:3D:7B:12:4D:BA:D0:C1:CA:B0:F1:94
X509v3 Authority Key Identifier:
keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2e:e1:56:7e:6d:73:cd:02:66:40:94:5a:bd:d2:1d:2b:19:
a9:29:f1:9e:36:16:05:a2:67:b6:15:53:ea:94:38:c5:0a:03:
59:11:28:31:b9:3c:6b:a5:ae:c0:d1:2c:c8:1b:80:f4:1d:d7:
f0:47:b4:2d:82:7c:45:84:48:f3:31:64:f2:33:ad:1d:38:fd:
4b:98:3e:e9:95:7a:92:3f:29:67:1b:42:c6:d1:98:90:3a:9d:
a4:75:2c:cc:19:c2:65:2d:01:4e:80:ce:d9:57:a0:0a:8f:04:
a3:32:da:b6:2c:df:49:95:e5:07:c8:40:7a:da:01:a6:c7:44:
63:94:0f:a5:33:d2:40:8a:a2:1f:bf:da:3a:b3:36:d7:12:32:
d5:e2:27:f1:85:a5:53:e2:62:23:27:41:07:ae:83:7f:7b:c2:
87:b0:5f:a8:44:9b:af:56:fa:32:e7:80:35:4c:1b:a0:f7:09:
3b:11:2a:c5:87:e1:8f:e1:38:e9:ec:4b:4a:9d:ef:b0:b0:a2:
67:f3:e2:c0:3b:bf:d9:62:6b:16:17:2a:9a:ba:11:80:2d:74:
8e:16:f9:da:c4:6b:4a:ea:d0:c0:51:53:66:63:75:34:1c:cf:
6f:9b:df:c5:b2:9b:62:7c:3d:2e:54:6b:48:f6:60:70:04:1e:
49:f7:9f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:58:44 2026 by rpki-client