Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
File: 3ohLjkYvPsE6QCTWaamdlK8FzbI.mft (raw, json)
Hash identifier: ALfxP5rC70iKwHmWcn76xQNhbVmPxEgCcZRlGpynb/M=
Subject key identifier: C3:91:85:2B:DE:82:75:A8:00:16:DC:78:06:06:68:14:C5:DB:5E:3D
Authority key identifier: DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2
Certificate issuer: /CN=de884b8e462f3ec13a4024d669a99d94af05cdb2
Certificate serial: 01A0C2C490203C7E9686E2DCE0C177F19E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
Manifest number: 0B14
Signing time: Mon 21 Sep 2026 07:00:56 +0000
Manifest this update: Mon 21 Sep 2026 07:00:56 +0000
Manifest next update: Tue 22 Sep 2026 07:00:56 +0000
Files and hashes: 1: 3ohLjkYvPsE6QCTWaamdlK8FzbI.crl (hash: HMob1qk0D+tVq5cyMtHnPuLpmVvvcjib3pE/ejsdpB8=)
2: KyIGNZFDdjiF9uvViG3nRW9Bmw8.roa (hash: DzYiLKcYFU2Q0VtZNwQkwth/5N+BuGWGx0hMS551gkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:90:20:3c:7e:96:86:e2:dc:e0:c1:77:f1:9e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de884b8e462f3ec13a4024d669a99d94af05cdb2
Validity
Not Before: Sep 21 07:00:56 2026 GMT
Not After : Sep 22 07:00:56 2026 GMT
Subject: CN=c391852bde8275a80016dc7806066814c5db5e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:ae:d2:87:fb:90:f2:83:46:c9:60:0e:ef:
ac:b0:b8:54:a6:f9:67:be:c0:95:b8:50:c2:de:1d:
04:6a:74:de:5d:f2:47:40:03:a9:7b:2d:2e:02:85:
28:9e:eb:87:5c:cc:d7:bd:e7:ef:ee:05:24:bb:fd:
cc:82:d6:8f:17:dc:d4:88:75:27:0f:a6:15:bd:ee:
29:dd:3b:91:2f:aa:16:28:56:89:35:fb:1b:db:18:
31:90:4e:da:04:93:ce:52:f9:9d:c1:d8:92:0f:4f:
d9:be:24:5c:5d:0a:f2:bc:df:e3:5a:d8:4c:e5:e2:
ac:67:53:35:99:81:70:68:5f:e4:b7:0b:ec:6f:21:
47:b6:e4:84:84:a7:4d:15:54:e0:c4:fb:26:4d:6a:
22:55:c4:b8:da:b5:ff:02:f3:0a:0c:1f:9c:80:7d:
20:51:42:d8:9a:df:8a:5a:a8:c7:53:21:b0:8d:67:
9d:ea:73:f9:29:b4:e5:5d:c8:3e:ae:c9:13:93:22:
5a:09:5e:05:5e:a3:15:f6:30:14:82:ce:bb:f8:7c:
7f:ba:76:25:37:97:72:40:58:f3:66:18:9a:f4:e8:
ec:eb:96:8f:5f:cf:28:01:72:49:47:32:57:0b:db:
34:7e:f3:a4:4f:64:ee:70:2c:ba:51:6a:0f:07:44:
a3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:91:85:2B:DE:82:75:A8:00:16:DC:78:06:06:68:14:C5:DB:5E:3D
X509v3 Authority Key Identifier:
keyid:DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:75:0c:b4:9a:fd:87:0b:f4:dd:73:1a:39:dd:8e:55:16:56:
b9:dc:b9:f3:7b:1f:ea:e2:7f:9a:7b:be:1d:5b:77:8d:7e:8d:
71:9e:a0:75:e6:57:63:28:31:16:2c:e8:5b:76:e9:06:fe:26:
15:1b:3f:cc:a2:32:ff:ac:69:12:19:7f:ca:c9:d8:8f:29:6e:
db:f6:b4:22:da:21:2f:eb:ba:b5:27:5d:8d:b0:e4:12:66:77:
fe:a2:6f:36:fd:af:01:bf:00:ac:b2:84:59:2f:12:a5:d9:23:
a4:8a:57:60:64:df:45:ba:94:04:84:5b:f9:1b:1d:46:ee:ef:
09:2c:24:5d:3f:c4:67:98:70:1d:6d:a5:7e:26:2b:cc:67:de:
74:e3:8d:b9:a6:e3:5c:a3:e9:fa:05:d1:97:55:b3:7a:ca:cb:
7d:35:60:49:f9:b5:b6:78:5d:d6:84:be:ca:0e:48:61:02:2e:
5e:ba:99:48:a9:28:4f:6a:09:ac:d5:6b:f8:e6:33:d7:3c:c5:
38:03:82:65:c8:e8:aa:b0:24:de:43:1f:af:41:35:59:b0:59:
72:c7:d8:49:c6:d5:47:5b:53:44:7d:df:37:5e:39:f2:c8:3f:
0f:f3:8f:0f:65:a1:68:71:92:a8:e6:9a:22:74:b4:d5:62:ba:
b6:01:76:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:44:33 2026 by rpki-client