Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: 4KaySxhqj2x557JgPpYS54Kf368KCmmxTuy5N0l+teY=
Subject key identifier: 05:EF:68:C7:9B:0A:8F:3F:84:52:D3:68:A2:60:2B:B4:45:B4:96:50
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 01A0C28E5AEDF49C62DB8B2B23A945571DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0F8B
Signing time: Mon 21 Sep 2026 06:01:44 +0000
Manifest this update: Mon 21 Sep 2026 06:01:44 +0000
Manifest next update: Tue 22 Sep 2026 06:01:44 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: b50Lx/zT/N84QIUuwa1BP3Kq9jmqbqo2SL4HDZZc1EA=)
2: KUy8l_kE9Ez8yOXsZsPg_xu8U88.roa (hash: Q8NXv7/aGohuJqdBeBqSqaYcBq21Vr5wijgoX0wzMFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:5a:ed:f4:9c:62:db:8b:2b:23:a9:45:57:1d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Sep 21 06:01:44 2026 GMT
Not After : Sep 22 06:01:44 2026 GMT
Subject: CN=05ef68c79b0a8f3f8452d368a2602bb445b49650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:99:05:7e:48:4e:fb:1b:cb:33:fa:ad:20:
00:f6:b3:fa:51:8b:83:4a:dd:75:65:1c:05:6d:48:
41:14:98:57:71:b3:73:6f:82:a7:cc:3e:80:bd:7b:
0a:2a:76:d9:b0:5b:37:93:b0:cf:2a:12:d7:81:61:
01:d4:91:64:72:ab:bc:41:a6:2e:ee:6c:c6:b1:bd:
ad:9e:cb:e6:39:3b:0b:56:3e:71:1e:9a:ce:a6:22:
07:81:45:02:1f:f9:dc:48:fd:26:34:a7:bd:59:aa:
53:38:21:ba:02:b0:91:de:32:7a:3b:e1:da:df:70:
4d:60:33:e5:6c:9d:76:06:2c:9a:23:1d:cf:8d:10:
76:15:a8:32:89:92:bf:8e:d7:47:8f:1f:cd:6e:91:
f0:fc:d3:59:c2:33:42:03:6a:a5:02:60:68:ea:03:
38:d3:44:4f:19:36:8f:50:f0:45:0b:f3:21:9a:81:
c2:f3:34:a4:97:92:82:50:bd:b4:95:78:8e:13:21:
0d:47:17:7e:2c:2f:c9:c2:42:ba:dc:f0:d8:ab:c8:
8d:02:70:57:99:68:08:4c:e7:74:60:a9:c9:bc:54:
d6:3c:85:85:4a:20:66:6c:d8:cc:c5:48:03:f9:1a:
be:ac:f0:1e:53:29:7f:33:6f:86:1c:62:06:93:55:
23:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EF:68:C7:9B:0A:8F:3F:84:52:D3:68:A2:60:2B:B4:45:B4:96:50
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:17:a8:4d:9c:7e:50:eb:16:3b:1e:cb:d3:9b:fe:06:01:9b:
d9:65:05:5d:85:42:c9:b0:1f:64:71:5b:6f:d6:0c:bb:80:e3:
c3:6b:d9:7c:01:dd:98:31:89:79:ff:c2:6e:30:12:d0:9a:c7:
17:1a:40:ea:c1:e6:0b:0c:d3:26:d6:32:5b:91:80:70:6b:b5:
1d:9f:e2:8e:56:6c:01:d1:ba:ac:17:b9:e9:36:68:ab:3b:e2:
5e:d6:83:2a:a7:48:69:c9:14:cf:04:55:b3:9a:3f:75:76:13:
52:43:63:6b:70:79:e0:39:db:6e:28:6c:04:a1:b7:7a:e6:dd:
c0:89:56:b1:d7:d6:f8:bb:12:79:7a:d5:0d:2f:37:05:5a:49:
25:bd:96:44:36:d1:4e:b1:80:77:c4:37:62:ff:12:0f:ab:c2:
69:66:27:b7:51:8c:56:8c:8b:ed:fa:dc:5b:56:58:0a:7c:9c:
d8:22:eb:62:3b:57:83:dc:cc:33:72:50:50:3c:b7:cc:2b:6f:
66:d4:42:ec:2f:b7:70:0f:13:04:67:e7:d7:78:49:fe:7e:5c:
9a:94:6a:ea:0c:bc:21:c0:a5:96:f6:80:42:d7:83:33:ff:b1:
ef:0f:9b:e9:06:25:33:f3:64:6e:a4:76:be:15:6c:74:da:0d:
c0:41:88:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:28:48 2026 by rpki-client